./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 01:58:22,238 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 01:58:22,240 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 01:58:22,291 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 01:58:22,292 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 01:58:22,298 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 01:58:22,300 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 01:58:22,305 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 01:58:22,308 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 01:58:22,318 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 01:58:22,319 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 01:58:22,320 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 01:58:22,320 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 01:58:22,321 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 01:58:22,323 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 01:58:22,324 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 01:58:22,325 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 01:58:22,326 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 01:58:22,328 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 01:58:22,331 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 01:58:22,337 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 01:58:22,339 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 01:58:22,342 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 01:58:22,343 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 01:58:22,351 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 01:58:22,352 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 01:58:22,352 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 01:58:22,355 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 01:58:22,355 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 01:58:22,357 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 01:58:22,358 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 01:58:22,359 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 01:58:22,361 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 01:58:22,363 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 01:58:22,365 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 01:58:22,365 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 01:58:22,366 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 01:58:22,367 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 01:58:22,367 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 01:58:22,368 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 01:58:22,369 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 01:58:22,370 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-64bit-Taipan_Default.epf [2021-11-23 01:58:22,425 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 01:58:22,427 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 01:58:22,427 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 01:58:22,428 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 01:58:22,429 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 01:58:22,429 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 01:58:22,429 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 01:58:22,430 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 01:58:22,430 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 01:58:22,430 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 01:58:22,431 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 01:58:22,432 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 01:58:22,432 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 01:58:22,432 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 01:58:22,432 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 01:58:22,433 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 01:58:22,433 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 01:58:22,433 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 01:58:22,435 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 01:58:22,435 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 01:58:22,436 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 01:58:22,436 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 01:58:22,436 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 01:58:22,436 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 01:58:22,437 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 01:58:22,437 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 01:58:22,439 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 01:58:22,439 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 01:58:22,439 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 01:58:22,440 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 01:58:22,440 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 01:58:22,440 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 01:58:22,441 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 01:58:22,441 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 01:58:22,441 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 01:58:22,441 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 01:58:22,442 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 01:58:22,442 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 01:58:22,442 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 [2021-11-23 01:58:22,736 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 01:58:22,756 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 01:58:22,759 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 01:58:22,760 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 01:58:22,761 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 01:58:22,763 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-23 01:58:22,842 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/data/97b776e17/cc3eea7ebbda42f7a59d68046f169a98/FLAG4dd12f4aa [2021-11-23 01:58:23,794 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 01:58:23,795 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-23 01:58:23,860 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/data/97b776e17/cc3eea7ebbda42f7a59d68046f169a98/FLAG4dd12f4aa [2021-11-23 01:58:24,198 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/data/97b776e17/cc3eea7ebbda42f7a59d68046f169a98 [2021-11-23 01:58:24,200 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 01:58:24,202 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 01:58:24,214 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 01:58:24,214 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 01:58:24,218 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 01:58:24,221 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:58:24" (1/1) ... [2021-11-23 01:58:24,222 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@12b63605 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:24, skipping insertion in model container [2021-11-23 01:58:24,223 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:58:24" (1/1) ... [2021-11-23 01:58:24,231 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 01:58:24,406 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 01:58:25,466 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-11-23 01:58:26,460 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 01:58:26,484 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 01:58:26,692 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-11-23 01:58:26,952 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 01:58:27,133 INFO L208 MainTranslator]: Completed translation [2021-11-23 01:58:27,133 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27 WrapperNode [2021-11-23 01:58:27,134 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 01:58:27,135 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 01:58:27,135 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 01:58:27,135 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 01:58:27,143 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (1/1) ... [2021-11-23 01:58:27,255 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (1/1) ... [2021-11-23 01:58:27,455 INFO L137 Inliner]: procedures = 188, calls = 2240, calls flagged for inlining = 91, calls inlined = 86, statements flattened = 4876 [2021-11-23 01:58:27,456 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 01:58:27,457 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 01:58:27,457 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 01:58:27,457 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 01:58:27,465 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (1/1) ... [2021-11-23 01:58:27,466 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (1/1) ... [2021-11-23 01:58:27,491 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (1/1) ... [2021-11-23 01:58:27,491 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (1/1) ... [2021-11-23 01:58:27,643 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (1/1) ... [2021-11-23 01:58:27,676 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (1/1) ... [2021-11-23 01:58:27,692 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (1/1) ... [2021-11-23 01:58:27,720 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 01:58:27,721 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 01:58:27,721 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 01:58:27,721 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 01:58:27,722 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (1/1) ... [2021-11-23 01:58:27,731 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 01:58:27,743 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 01:58:27,759 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 01:58:27,789 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 01:58:27,805 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2021-11-23 01:58:27,805 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2021-11-23 01:58:27,805 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-11-23 01:58:27,806 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-11-23 01:58:27,806 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-23 01:58:27,806 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_host [2021-11-23 01:58:27,806 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_host [2021-11-23 01:58:27,806 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_to_card [2021-11-23 01:58:27,807 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_to_card [2021-11-23 01:58:27,807 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-23 01:58:27,807 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-23 01:58:27,807 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-23 01:58:27,807 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-23 01:58:27,808 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-23 01:58:27,808 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_get_host_pm_caps [2021-11-23 01:58:27,808 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_get_host_pm_caps [2021-11-23 01:58:27,808 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_sync [2021-11-23 01:58:27,808 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_sync [2021-11-23 01:58:27,808 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-23 01:58:27,809 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-23 01:58:27,809 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_card_to_host [2021-11-23 01:58:27,809 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_card_to_host [2021-11-23 01:58:27,809 INFO L130 BoogieDeclarations]: Found specification of procedure mp_tx_aggr_port_limit_reached [2021-11-23 01:58:27,809 INFO L138 BoogieDeclarations]: Found implementation of procedure mp_tx_aggr_port_limit_reached [2021-11-23 01:58:27,809 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-23 01:58:27,810 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-23 01:58:27,810 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2021-11-23 01:58:27,810 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2021-11-23 01:58:27,810 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-23 01:58:27,810 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-23 01:58:27,811 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-11-23 01:58:27,811 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-11-23 01:58:27,811 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-23 01:58:27,811 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-23 01:58:27,811 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2021-11-23 01:58:27,811 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2021-11-23 01:58:27,812 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2021-11-23 01:58:27,812 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2021-11-23 01:58:27,812 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-23 01:58:27,812 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2021-11-23 01:58:27,812 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2021-11-23 01:58:27,812 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-23 01:58:27,813 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-23 01:58:27,813 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_data_sync [2021-11-23 01:58:27,813 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_data_sync [2021-11-23 01:58:27,813 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-23 01:58:27,813 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-23 01:58:27,814 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-11-23 01:58:27,814 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-23 01:58:27,814 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-23 01:58:27,814 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-23 01:58:27,814 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-11-23 01:58:27,814 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-11-23 01:58:27,815 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-23 01:58:27,815 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-23 01:58:27,815 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 01:58:27,815 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_irq [2021-11-23 01:58:27,816 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_irq [2021-11-23 01:58:27,816 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_disable_func [2021-11-23 01:58:27,816 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_disable_func [2021-11-23 01:58:27,817 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-23 01:58:27,817 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-23 01:58:27,817 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_claim_host [2021-11-23 01:58:27,818 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_claim_host [2021-11-23 01:58:27,818 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg_locked [2021-11-23 01:58:27,818 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg_locked [2021-11-23 01:58:27,818 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_cmdrsp_complete [2021-11-23 01:58:27,818 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_cmdrsp_complete [2021-11-23 01:58:27,818 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-23 01:58:27,818 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-11-23 01:58:27,819 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-11-23 01:58:27,819 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-11-23 01:58:27,819 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-23 01:58:27,820 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2021-11-23 01:58:27,820 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_set_drvdata [2021-11-23 01:58:27,820 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-23 01:58:27,820 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-11-23 01:58:27,821 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-11-23 01:58:27,821 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-11-23 01:58:27,821 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-11-23 01:58:27,821 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memmove [2021-11-23 01:58:27,821 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memmove [2021-11-23 01:58:27,821 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-11-23 01:58:27,822 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-11-23 01:58:27,822 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2021-11-23 01:58:27,823 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2021-11-23 01:58:27,823 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 01:58:27,823 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_host_to_card_mp_aggr [2021-11-23 01:58:27,823 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_host_to_card_mp_aggr [2021-11-23 01:58:27,824 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_resume [2021-11-23 01:58:27,824 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_resume [2021-11-23 01:58:27,824 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-23 01:58:27,825 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-23 01:58:27,825 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-23 01:58:27,825 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-23 01:58:27,826 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_decode_rx_packet [2021-11-23 01:58:27,826 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_decode_rx_packet [2021-11-23 01:58:27,826 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 01:58:27,826 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 01:58:28,534 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 01:58:28,537 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 01:58:28,659 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-23 01:58:37,208 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 01:58:38,300 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 01:58:38,300 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 01:58:38,306 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:58:38 BoogieIcfgContainer [2021-11-23 01:58:38,307 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 01:58:38,309 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 01:58:38,309 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 01:58:38,313 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 01:58:38,314 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 01:58:24" (1/3) ... [2021-11-23 01:58:38,315 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3b1af472 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:58:38, skipping insertion in model container [2021-11-23 01:58:38,318 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:58:27" (2/3) ... [2021-11-23 01:58:38,319 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3b1af472 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:58:38, skipping insertion in model container [2021-11-23 01:58:38,319 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:58:38" (3/3) ... [2021-11-23 01:58:38,321 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-23 01:58:38,327 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 01:58:38,328 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 01:58:38,391 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 01:58:38,399 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 01:58:38,399 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 01:58:38,438 INFO L276 IsEmpty]: Start isEmpty. Operand has 749 states, 516 states have (on average 1.426356589147287) internal successors, (736), 529 states have internal predecessors, (736), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) [2021-11-23 01:58:38,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-11-23 01:58:38,446 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:58:38,447 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:58:38,448 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:58:38,453 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:58:38,454 INFO L85 PathProgramCache]: Analyzing trace with hash -1994556386, now seen corresponding path program 1 times [2021-11-23 01:58:38,464 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:58:38,464 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [380168183] [2021-11-23 01:58:38,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:58:38,466 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:58:38,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:58:39,135 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 01:58:39,136 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:58:39,136 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [380168183] [2021-11-23 01:58:39,137 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [380168183] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:58:39,137 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:58:39,137 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 01:58:39,139 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1562166120] [2021-11-23 01:58:39,140 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:58:39,144 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 01:58:39,145 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:58:39,174 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 01:58:39,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:58:39,179 INFO L87 Difference]: Start difference. First operand has 749 states, 516 states have (on average 1.426356589147287) internal successors, (736), 529 states have internal predecessors, (736), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-23 01:58:41,581 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:58:44,089 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:58:46,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:58:46,767 INFO L93 Difference]: Finished difference Result 2196 states and 3275 transitions. [2021-11-23 01:58:46,768 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 01:58:46,770 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 36 [2021-11-23 01:58:46,770 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:58:46,797 INFO L225 Difference]: With dead ends: 2196 [2021-11-23 01:58:46,797 INFO L226 Difference]: Without dead ends: 1440 [2021-11-23 01:58:46,807 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:58:46,811 INFO L933 BasicCegarLoop]: 1112 mSDtfsCounter, 1041 mSDsluCounter, 1099 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 4 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1041 SdHoareTripleChecker+Valid, 2045 SdHoareTripleChecker+Invalid, 353 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.4s IncrementalHoareTripleChecker+Time [2021-11-23 01:58:46,812 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1041 Valid, 2045 Invalid, 353 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 347 Invalid, 2 Unknown, 0 Unchecked, 7.4s Time] [2021-11-23 01:58:46,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1440 states. [2021-11-23 01:58:46,969 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1440 to 1440. [2021-11-23 01:58:46,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1440 states, 1007 states have (on average 1.41012909632572) internal successors, (1420), 1017 states have internal predecessors, (1420), 356 states have call successors, (356), 77 states have call predecessors, (356), 76 states have return successors, (355), 353 states have call predecessors, (355), 355 states have call successors, (355) [2021-11-23 01:58:46,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1440 states to 1440 states and 2131 transitions. [2021-11-23 01:58:46,998 INFO L78 Accepts]: Start accepts. Automaton has 1440 states and 2131 transitions. Word has length 36 [2021-11-23 01:58:46,999 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:58:47,000 INFO L470 AbstractCegarLoop]: Abstraction has 1440 states and 2131 transitions. [2021-11-23 01:58:47,000 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-23 01:58:47,002 INFO L276 IsEmpty]: Start isEmpty. Operand 1440 states and 2131 transitions. [2021-11-23 01:58:47,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-11-23 01:58:47,014 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:58:47,014 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:58:47,014 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 01:58:47,015 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:58:47,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:58:47,018 INFO L85 PathProgramCache]: Analyzing trace with hash 947929817, now seen corresponding path program 1 times [2021-11-23 01:58:47,018 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:58:47,018 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1433150827] [2021-11-23 01:58:47,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:58:47,019 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:58:47,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:58:47,310 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 01:58:47,311 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:58:47,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1433150827] [2021-11-23 01:58:47,312 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1433150827] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:58:47,312 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:58:47,312 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 01:58:47,314 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [600180189] [2021-11-23 01:58:47,314 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:58:47,319 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 01:58:47,320 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:58:47,321 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 01:58:47,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 01:58:47,322 INFO L87 Difference]: Start difference. First operand 1440 states and 2131 transitions. Second operand has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-23 01:58:49,912 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:58:52,056 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:58:56,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:58:56,415 INFO L93 Difference]: Finished difference Result 2857 states and 4232 transitions. [2021-11-23 01:58:56,416 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 01:58:56,416 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 38 [2021-11-23 01:58:56,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:58:56,439 INFO L225 Difference]: With dead ends: 2857 [2021-11-23 01:58:56,440 INFO L226 Difference]: Without dead ends: 2852 [2021-11-23 01:58:56,442 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 01:58:56,444 INFO L933 BasicCegarLoop]: 1204 mSDtfsCounter, 1056 mSDsluCounter, 2468 mSDsCounter, 0 mSdLazyCounter, 548 mSolverCounterSat, 1 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1056 SdHoareTripleChecker+Valid, 3323 SdHoareTripleChecker+Invalid, 551 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 548 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.9s IncrementalHoareTripleChecker+Time [2021-11-23 01:58:56,445 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1056 Valid, 3323 Invalid, 551 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 548 Invalid, 2 Unknown, 0 Unchecked, 8.9s Time] [2021-11-23 01:58:56,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2852 states. [2021-11-23 01:58:56,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2852 to 2850. [2021-11-23 01:58:56,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2850 states, 1997 states have (on average 1.4116174261392087) internal successors, (2819), 2017 states have internal predecessors, (2819), 700 states have call successors, (700), 153 states have call predecessors, (700), 152 states have return successors, (705), 695 states have call predecessors, (705), 699 states have call successors, (705) [2021-11-23 01:58:56,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2850 states to 2850 states and 4224 transitions. [2021-11-23 01:58:56,714 INFO L78 Accepts]: Start accepts. Automaton has 2850 states and 4224 transitions. Word has length 38 [2021-11-23 01:58:56,714 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:58:56,714 INFO L470 AbstractCegarLoop]: Abstraction has 2850 states and 4224 transitions. [2021-11-23 01:58:56,715 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-23 01:58:56,715 INFO L276 IsEmpty]: Start isEmpty. Operand 2850 states and 4224 transitions. [2021-11-23 01:58:56,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2021-11-23 01:58:56,724 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:58:56,725 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:58:56,725 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 01:58:56,725 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:58:56,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:58:56,726 INFO L85 PathProgramCache]: Analyzing trace with hash 719816433, now seen corresponding path program 1 times [2021-11-23 01:58:56,726 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:58:56,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1978742750] [2021-11-23 01:58:56,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:58:56,727 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:58:56,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:58:56,965 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 01:58:56,965 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:58:56,968 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1978742750] [2021-11-23 01:58:56,968 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1978742750] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:58:56,969 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:58:56,969 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 01:58:56,972 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [60853567] [2021-11-23 01:58:56,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:58:56,972 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 01:58:56,973 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:58:56,973 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 01:58:56,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:58:56,974 INFO L87 Difference]: Start difference. First operand 2850 states and 4224 transitions. Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-23 01:58:59,353 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:02,038 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.98s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:06,604 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:07,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:59:07,566 INFO L93 Difference]: Finished difference Result 6989 states and 10350 transitions. [2021-11-23 01:59:07,567 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 01:59:07,567 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 70 [2021-11-23 01:59:07,567 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:59:07,599 INFO L225 Difference]: With dead ends: 6989 [2021-11-23 01:59:07,599 INFO L226 Difference]: Without dead ends: 4148 [2021-11-23 01:59:07,613 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:59:07,622 INFO L933 BasicCegarLoop]: 1105 mSDtfsCounter, 1005 mSDsluCounter, 1072 mSDsCounter, 0 mSdLazyCounter, 346 mSolverCounterSat, 2 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1005 SdHoareTripleChecker+Valid, 2011 SdHoareTripleChecker+Invalid, 350 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 346 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.4s IncrementalHoareTripleChecker+Time [2021-11-23 01:59:07,623 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1005 Valid, 2011 Invalid, 350 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 346 Invalid, 2 Unknown, 0 Unchecked, 10.4s Time] [2021-11-23 01:59:07,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4148 states. [2021-11-23 01:59:07,828 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4148 to 4143. [2021-11-23 01:59:07,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4143 states, 2898 states have (on average 1.411663216011042) internal successors, (4091), 2928 states have internal predecessors, (4091), 1016 states have call successors, (1016), 229 states have call predecessors, (1016), 228 states have return successors, (1024), 1009 states have call predecessors, (1024), 1015 states have call successors, (1024) [2021-11-23 01:59:07,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4143 states to 4143 states and 6131 transitions. [2021-11-23 01:59:07,868 INFO L78 Accepts]: Start accepts. Automaton has 4143 states and 6131 transitions. Word has length 70 [2021-11-23 01:59:07,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:59:07,868 INFO L470 AbstractCegarLoop]: Abstraction has 4143 states and 6131 transitions. [2021-11-23 01:59:07,869 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-23 01:59:07,869 INFO L276 IsEmpty]: Start isEmpty. Operand 4143 states and 6131 transitions. [2021-11-23 01:59:07,876 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2021-11-23 01:59:07,876 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:59:07,876 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:59:07,877 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 01:59:07,878 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:59:07,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:59:07,879 INFO L85 PathProgramCache]: Analyzing trace with hash -1147044784, now seen corresponding path program 1 times [2021-11-23 01:59:07,879 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:59:07,879 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [546186077] [2021-11-23 01:59:07,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:59:07,880 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:59:07,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:59:08,112 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-11-23 01:59:08,112 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:59:08,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [546186077] [2021-11-23 01:59:08,113 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [546186077] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:59:08,113 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:59:08,113 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 01:59:08,113 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [168079193] [2021-11-23 01:59:08,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:59:08,114 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 01:59:08,114 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:59:08,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 01:59:08,115 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:59:08,115 INFO L87 Difference]: Start difference. First operand 4143 states and 6131 transitions. Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 3 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-23 01:59:10,555 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:13,709 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:15,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:59:15,960 INFO L93 Difference]: Finished difference Result 8310 states and 12300 transitions. [2021-11-23 01:59:15,960 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 01:59:15,960 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 3 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 80 [2021-11-23 01:59:15,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:59:16,001 INFO L225 Difference]: With dead ends: 8310 [2021-11-23 01:59:16,001 INFO L226 Difference]: Without dead ends: 5523 [2021-11-23 01:59:16,013 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:59:16,014 INFO L933 BasicCegarLoop]: 1096 mSDtfsCounter, 1066 mSDsluCounter, 1064 mSDsCounter, 0 mSdLazyCounter, 335 mSolverCounterSat, 1 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1066 SdHoareTripleChecker+Valid, 1997 SdHoareTripleChecker+Invalid, 338 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 335 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.7s IncrementalHoareTripleChecker+Time [2021-11-23 01:59:16,015 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1066 Valid, 1997 Invalid, 338 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 335 Invalid, 2 Unknown, 0 Unchecked, 7.7s Time] [2021-11-23 01:59:16,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5523 states. [2021-11-23 01:59:16,321 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5523 to 5518. [2021-11-23 01:59:16,337 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5518 states, 3863 states have (on average 1.4123738027439814) internal successors, (5456), 3903 states have internal predecessors, (5456), 1350 states have call successors, (1350), 305 states have call predecessors, (1350), 304 states have return successors, (1358), 1341 states have call predecessors, (1358), 1349 states have call successors, (1358) [2021-11-23 01:59:16,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5518 states to 5518 states and 8164 transitions. [2021-11-23 01:59:16,363 INFO L78 Accepts]: Start accepts. Automaton has 5518 states and 8164 transitions. Word has length 80 [2021-11-23 01:59:16,364 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:59:16,364 INFO L470 AbstractCegarLoop]: Abstraction has 5518 states and 8164 transitions. [2021-11-23 01:59:16,364 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 3 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-23 01:59:16,365 INFO L276 IsEmpty]: Start isEmpty. Operand 5518 states and 8164 transitions. [2021-11-23 01:59:16,372 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2021-11-23 01:59:16,372 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:59:16,372 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:59:16,373 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 01:59:16,373 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:59:16,373 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:59:16,374 INFO L85 PathProgramCache]: Analyzing trace with hash 2080557567, now seen corresponding path program 1 times [2021-11-23 01:59:16,374 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:59:16,374 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1842551724] [2021-11-23 01:59:16,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:59:16,374 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:59:16,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:59:16,576 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-23 01:59:16,576 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:59:16,576 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1842551724] [2021-11-23 01:59:16,577 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1842551724] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:59:16,577 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:59:16,577 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 01:59:16,577 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [799040114] [2021-11-23 01:59:16,577 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:59:16,579 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 01:59:16,580 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:59:16,580 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 01:59:16,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:59:16,581 INFO L87 Difference]: Start difference. First operand 5518 states and 8164 transitions. Second operand has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-11-23 01:59:18,654 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:20,767 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.26s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:22,786 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:24,841 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:27,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:59:27,410 INFO L93 Difference]: Finished difference Result 10427 states and 15408 transitions. [2021-11-23 01:59:27,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 01:59:27,410 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 88 [2021-11-23 01:59:27,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:59:27,452 INFO L225 Difference]: With dead ends: 10427 [2021-11-23 01:59:27,452 INFO L226 Difference]: Without dead ends: 4918 [2021-11-23 01:59:27,473 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 01:59:27,474 INFO L933 BasicCegarLoop]: 1004 mSDtfsCounter, 225 mSDsluCounter, 1030 mSDsCounter, 0 mSdLazyCounter, 393 mSolverCounterSat, 2 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 1875 SdHoareTripleChecker+Invalid, 398 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 393 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.7s IncrementalHoareTripleChecker+Time [2021-11-23 01:59:27,475 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [225 Valid, 1875 Invalid, 398 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 393 Invalid, 3 Unknown, 0 Unchecked, 10.7s Time] [2021-11-23 01:59:27,483 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4918 states. [2021-11-23 01:59:27,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4918 to 4704. [2021-11-23 01:59:27,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4704 states, 3337 states have (on average 1.4216362001798022) internal successors, (4744), 3367 states have internal predecessors, (4744), 1096 states have call successors, (1096), 271 states have call predecessors, (1096), 270 states have return successors, (1101), 1089 states have call predecessors, (1101), 1095 states have call successors, (1101) [2021-11-23 01:59:27,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4704 states to 4704 states and 6941 transitions. [2021-11-23 01:59:27,839 INFO L78 Accepts]: Start accepts. Automaton has 4704 states and 6941 transitions. Word has length 88 [2021-11-23 01:59:27,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:59:27,840 INFO L470 AbstractCegarLoop]: Abstraction has 4704 states and 6941 transitions. [2021-11-23 01:59:27,841 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-11-23 01:59:27,841 INFO L276 IsEmpty]: Start isEmpty. Operand 4704 states and 6941 transitions. [2021-11-23 01:59:27,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2021-11-23 01:59:27,847 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:59:27,848 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:59:27,848 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 01:59:27,848 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:59:27,849 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:59:27,849 INFO L85 PathProgramCache]: Analyzing trace with hash 874187848, now seen corresponding path program 1 times [2021-11-23 01:59:27,849 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:59:27,850 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1478247060] [2021-11-23 01:59:27,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:59:27,850 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:59:28,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:59:28,206 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 126 trivial. 0 not checked. [2021-11-23 01:59:28,206 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:59:28,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1478247060] [2021-11-23 01:59:28,207 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1478247060] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:59:28,207 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:59:28,207 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 01:59:28,207 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [787079232] [2021-11-23 01:59:28,207 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:59:28,208 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 01:59:28,208 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:59:28,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 01:59:28,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 01:59:28,209 INFO L87 Difference]: Start difference. First operand 4704 states and 6941 transitions. Second operand has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-11-23 01:59:30,287 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:33,041 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:38,836 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:41,417 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:41,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:59:41,731 INFO L93 Difference]: Finished difference Result 7714 states and 11397 transitions. [2021-11-23 01:59:41,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 01:59:41,732 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 104 [2021-11-23 01:59:41,732 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:59:41,789 INFO L225 Difference]: With dead ends: 7714 [2021-11-23 01:59:41,789 INFO L226 Difference]: Without dead ends: 7709 [2021-11-23 01:59:41,794 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 01:59:41,796 INFO L933 BasicCegarLoop]: 1124 mSDtfsCounter, 1051 mSDsluCounter, 2370 mSDsCounter, 0 mSdLazyCounter, 511 mSolverCounterSat, 1 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1051 SdHoareTripleChecker+Valid, 3162 SdHoareTripleChecker+Invalid, 516 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 511 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.3s IncrementalHoareTripleChecker+Time [2021-11-23 01:59:41,796 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1051 Valid, 3162 Invalid, 516 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 511 Invalid, 4 Unknown, 0 Unchecked, 13.3s Time] [2021-11-23 01:59:41,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7709 states. [2021-11-23 01:59:42,135 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7709 to 4766. [2021-11-23 01:59:42,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4766 states, 3375 states have (on average 1.4207407407407406) internal successors, (4795), 3405 states have internal predecessors, (4795), 1116 states have call successors, (1116), 275 states have call predecessors, (1116), 274 states have return successors, (1124), 1109 states have call predecessors, (1124), 1115 states have call successors, (1124) [2021-11-23 01:59:42,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4766 states to 4766 states and 7035 transitions. [2021-11-23 01:59:42,163 INFO L78 Accepts]: Start accepts. Automaton has 4766 states and 7035 transitions. Word has length 104 [2021-11-23 01:59:42,164 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:59:42,164 INFO L470 AbstractCegarLoop]: Abstraction has 4766 states and 7035 transitions. [2021-11-23 01:59:42,164 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2021-11-23 01:59:42,164 INFO L276 IsEmpty]: Start isEmpty. Operand 4766 states and 7035 transitions. [2021-11-23 01:59:42,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2021-11-23 01:59:42,178 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:59:42,179 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 9, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:59:42,179 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-23 01:59:42,179 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:59:42,180 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:59:42,180 INFO L85 PathProgramCache]: Analyzing trace with hash 1258785819, now seen corresponding path program 1 times [2021-11-23 01:59:42,180 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:59:42,180 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1824097073] [2021-11-23 01:59:42,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:59:42,181 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:59:42,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:59:42,498 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-11-23 01:59:42,498 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:59:42,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1824097073] [2021-11-23 01:59:42,501 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1824097073] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:59:42,502 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:59:42,502 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-23 01:59:42,502 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1419682969] [2021-11-23 01:59:42,502 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:59:42,503 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 01:59:42,504 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:59:42,504 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 01:59:42,504 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 01:59:42,505 INFO L87 Difference]: Start difference. First operand 4766 states and 7035 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-11-23 01:59:44,606 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:47,708 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 01:59:52,463 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 01:59:52,464 INFO L93 Difference]: Finished difference Result 9468 states and 14009 transitions. [2021-11-23 01:59:52,464 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 01:59:52,464 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) Word has length 120 [2021-11-23 01:59:52,465 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 01:59:52,494 INFO L225 Difference]: With dead ends: 9468 [2021-11-23 01:59:52,494 INFO L226 Difference]: Without dead ends: 4804 [2021-11-23 01:59:52,512 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 01:59:52,513 INFO L933 BasicCegarLoop]: 922 mSDtfsCounter, 2 mSDsluCounter, 3265 mSDsCounter, 0 mSdLazyCounter, 683 mSolverCounterSat, 1 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3683 SdHoareTripleChecker+Invalid, 686 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 683 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.8s IncrementalHoareTripleChecker+Time [2021-11-23 01:59:52,514 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 3683 Invalid, 686 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 683 Invalid, 2 Unknown, 0 Unchecked, 9.8s Time] [2021-11-23 01:59:52,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4804 states. [2021-11-23 01:59:52,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4804 to 4796. [2021-11-23 01:59:52,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4796 states, 3396 states have (on average 1.4181389870435808) internal successors, (4816), 3429 states have internal predecessors, (4816), 1116 states have call successors, (1116), 275 states have call predecessors, (1116), 283 states have return successors, (1141), 1115 states have call predecessors, (1141), 1115 states have call successors, (1141) [2021-11-23 01:59:52,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4796 states to 4796 states and 7073 transitions. [2021-11-23 01:59:52,755 INFO L78 Accepts]: Start accepts. Automaton has 4796 states and 7073 transitions. Word has length 120 [2021-11-23 01:59:52,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 01:59:52,756 INFO L470 AbstractCegarLoop]: Abstraction has 4796 states and 7073 transitions. [2021-11-23 01:59:52,757 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-11-23 01:59:52,757 INFO L276 IsEmpty]: Start isEmpty. Operand 4796 states and 7073 transitions. [2021-11-23 01:59:52,765 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-11-23 01:59:52,765 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 01:59:52,766 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 01:59:52,766 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-23 01:59:52,766 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 01:59:52,767 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 01:59:52,767 INFO L85 PathProgramCache]: Analyzing trace with hash -2011182754, now seen corresponding path program 1 times [2021-11-23 01:59:52,767 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 01:59:52,768 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1250573277] [2021-11-23 01:59:52,768 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 01:59:52,768 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 01:59:55,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 01:59:56,239 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-11-23 01:59:56,239 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 01:59:56,240 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1250573277] [2021-11-23 01:59:56,240 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1250573277] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 01:59:56,240 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 01:59:56,240 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-23 01:59:56,240 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663218658] [2021-11-23 01:59:56,240 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 01:59:56,241 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-23 01:59:56,241 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 01:59:56,241 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-23 01:59:56,241 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2021-11-23 01:59:56,242 INFO L87 Difference]: Start difference. First operand 4796 states and 7073 transitions. Second operand has 13 states, 10 states have (on average 6.9) internal successors, (69), 9 states have internal predecessors, (69), 3 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-23 01:59:58,485 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:03,898 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.43s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:05,925 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:07,783 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.86s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:09,470 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.69s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:13,315 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:15,316 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:17,351 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:19,705 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:28,405 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:36,402 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.72s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:37,772 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.37s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:39,715 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.20s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:41,550 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.25s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:43,571 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:45,605 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:46,730 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.12s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:49,966 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:53,783 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.51s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:00:59,803 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:01,057 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.25s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:03,457 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.83s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:07,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:01:07,797 INFO L93 Difference]: Finished difference Result 12173 states and 18365 transitions. [2021-11-23 02:01:07,798 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-23 02:01:07,798 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 6.9) internal successors, (69), 9 states have internal predecessors, (69), 3 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) Word has length 124 [2021-11-23 02:01:07,798 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:01:07,829 INFO L225 Difference]: With dead ends: 12173 [2021-11-23 02:01:07,829 INFO L226 Difference]: Without dead ends: 7479 [2021-11-23 02:01:07,847 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-11-23 02:01:07,848 INFO L933 BasicCegarLoop]: 1494 mSDtfsCounter, 449 mSDsluCounter, 16770 mSDsCounter, 0 mSdLazyCounter, 2678 mSolverCounterSat, 1 mSolverCounterUnsat, 10 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 68.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 560 SdHoareTripleChecker+Valid, 15944 SdHoareTripleChecker+Invalid, 2689 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2678 IncrementalHoareTripleChecker+Invalid, 10 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 71.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:01:07,848 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [560 Valid, 15944 Invalid, 2689 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2678 Invalid, 10 Unknown, 0 Unchecked, 71.1s Time] [2021-11-23 02:01:07,858 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7479 states. [2021-11-23 02:01:08,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7479 to 4826. [2021-11-23 02:01:08,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4826 states, 3417 states have (on average 1.4138132865086332) internal successors, (4831), 3447 states have internal predecessors, (4831), 1116 states have call successors, (1116), 275 states have call predecessors, (1116), 292 states have return successors, (1156), 1127 states have call predecessors, (1156), 1115 states have call successors, (1156) [2021-11-23 02:01:08,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4826 states to 4826 states and 7103 transitions. [2021-11-23 02:01:08,349 INFO L78 Accepts]: Start accepts. Automaton has 4826 states and 7103 transitions. Word has length 124 [2021-11-23 02:01:08,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:01:08,350 INFO L470 AbstractCegarLoop]: Abstraction has 4826 states and 7103 transitions. [2021-11-23 02:01:08,350 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 6.9) internal successors, (69), 9 states have internal predecessors, (69), 3 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) [2021-11-23 02:01:08,350 INFO L276 IsEmpty]: Start isEmpty. Operand 4826 states and 7103 transitions. [2021-11-23 02:01:08,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2021-11-23 02:01:08,361 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:01:08,361 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:01:08,361 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-23 02:01:08,361 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:01:08,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:01:08,362 INFO L85 PathProgramCache]: Analyzing trace with hash -785518697, now seen corresponding path program 1 times [2021-11-23 02:01:08,362 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:01:08,362 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1052711680] [2021-11-23 02:01:08,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:01:08,363 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:01:08,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:01:08,618 INFO L134 CoverageAnalysis]: Checked inductivity of 168 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 159 trivial. 0 not checked. [2021-11-23 02:01:08,618 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:01:08,618 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1052711680] [2021-11-23 02:01:08,618 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1052711680] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:01:08,618 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:01:08,619 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 02:01:08,619 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1172353249] [2021-11-23 02:01:08,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:01:08,620 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 02:01:08,620 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:01:08,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 02:01:08,621 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 02:01:08,621 INFO L87 Difference]: Start difference. First operand 4826 states and 7103 transitions. Second operand has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-23 02:01:10,700 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:14,752 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.28s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:20,353 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:22,390 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:26,446 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:29,079 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:29,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:01:29,487 INFO L93 Difference]: Finished difference Result 14498 states and 22072 transitions. [2021-11-23 02:01:29,488 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 02:01:29,488 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 148 [2021-11-23 02:01:29,489 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:01:29,530 INFO L225 Difference]: With dead ends: 14498 [2021-11-23 02:01:29,531 INFO L226 Difference]: Without dead ends: 9774 [2021-11-23 02:01:29,550 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 02:01:29,551 INFO L933 BasicCegarLoop]: 1589 mSDtfsCounter, 1215 mSDsluCounter, 2930 mSDsCounter, 0 mSdLazyCounter, 663 mSolverCounterSat, 184 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1323 SdHoareTripleChecker+Valid, 4110 SdHoareTripleChecker+Invalid, 852 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 184 IncrementalHoareTripleChecker+Valid, 663 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.5s IncrementalHoareTripleChecker+Time [2021-11-23 02:01:29,551 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1323 Valid, 4110 Invalid, 852 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [184 Valid, 663 Invalid, 5 Unknown, 0 Unchecked, 20.5s Time] [2021-11-23 02:01:29,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9774 states. [2021-11-23 02:01:30,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9774 to 4838. [2021-11-23 02:01:30,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4838 states, 3429 states have (on average 1.4123651210265384) internal successors, (4843), 3459 states have internal predecessors, (4843), 1116 states have call successors, (1116), 275 states have call predecessors, (1116), 292 states have return successors, (1156), 1127 states have call predecessors, (1156), 1115 states have call successors, (1156) [2021-11-23 02:01:30,052 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4838 states to 4838 states and 7115 transitions. [2021-11-23 02:01:30,053 INFO L78 Accepts]: Start accepts. Automaton has 4838 states and 7115 transitions. Word has length 148 [2021-11-23 02:01:30,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:01:30,054 INFO L470 AbstractCegarLoop]: Abstraction has 4838 states and 7115 transitions. [2021-11-23 02:01:30,054 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-11-23 02:01:30,055 INFO L276 IsEmpty]: Start isEmpty. Operand 4838 states and 7115 transitions. [2021-11-23 02:01:30,067 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 155 [2021-11-23 02:01:30,068 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:01:30,068 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:01:30,068 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-23 02:01:30,068 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:01:30,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:01:30,069 INFO L85 PathProgramCache]: Analyzing trace with hash 391584416, now seen corresponding path program 1 times [2021-11-23 02:01:30,069 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:01:30,069 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [165462662] [2021-11-23 02:01:30,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:01:30,070 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:01:32,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:01:32,884 INFO L134 CoverageAnalysis]: Checked inductivity of 176 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 151 trivial. 0 not checked. [2021-11-23 02:01:32,884 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:01:32,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [165462662] [2021-11-23 02:01:32,884 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [165462662] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:01:32,884 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:01:32,884 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-23 02:01:32,884 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1229611068] [2021-11-23 02:01:32,885 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:01:32,885 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-23 02:01:32,885 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:01:32,886 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-23 02:01:32,886 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2021-11-23 02:01:32,886 INFO L87 Difference]: Start difference. First operand 4838 states and 7115 transitions. Second operand has 13 states, 10 states have (on average 8.5) internal successors, (85), 9 states have internal predecessors, (85), 3 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) [2021-11-23 02:01:35,196 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:41,612 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:50,125 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.21s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:52,159 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.43s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:53,776 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.37s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:01:56,391 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.87s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:06,352 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:13,598 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:14,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:02:14,530 INFO L93 Difference]: Finished difference Result 12501 states and 18795 transitions. [2021-11-23 02:02:14,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-11-23 02:02:14,531 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 8.5) internal successors, (85), 9 states have internal predecessors, (85), 3 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) Word has length 154 [2021-11-23 02:02:14,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:02:14,561 INFO L225 Difference]: With dead ends: 12501 [2021-11-23 02:02:14,561 INFO L226 Difference]: Without dead ends: 7765 [2021-11-23 02:02:14,576 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2021-11-23 02:02:14,577 INFO L933 BasicCegarLoop]: 1519 mSDtfsCounter, 492 mSDsluCounter, 18732 mSDsCounter, 0 mSdLazyCounter, 2921 mSolverCounterSat, 0 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 39.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 607 SdHoareTripleChecker+Valid, 17711 SdHoareTripleChecker+Invalid, 2925 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 2921 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 41.2s IncrementalHoareTripleChecker+Time [2021-11-23 02:02:14,578 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [607 Valid, 17711 Invalid, 2925 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 2921 Invalid, 4 Unknown, 0 Unchecked, 41.2s Time] [2021-11-23 02:02:14,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7765 states. [2021-11-23 02:02:14,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7765 to 4850. [2021-11-23 02:02:14,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4850 states, 3441 states have (on average 1.4109270560883465) internal successors, (4855), 3465 states have internal predecessors, (4855), 1116 states have call successors, (1116), 275 states have call predecessors, (1116), 292 states have return successors, (1156), 1133 states have call predecessors, (1156), 1115 states have call successors, (1156) [2021-11-23 02:02:14,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4850 states to 4850 states and 7127 transitions. [2021-11-23 02:02:14,934 INFO L78 Accepts]: Start accepts. Automaton has 4850 states and 7127 transitions. Word has length 154 [2021-11-23 02:02:14,935 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:02:14,935 INFO L470 AbstractCegarLoop]: Abstraction has 4850 states and 7127 transitions. [2021-11-23 02:02:14,935 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 8.5) internal successors, (85), 9 states have internal predecessors, (85), 3 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) [2021-11-23 02:02:14,935 INFO L276 IsEmpty]: Start isEmpty. Operand 4850 states and 7127 transitions. [2021-11-23 02:02:14,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 163 [2021-11-23 02:02:14,950 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:02:14,950 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:02:14,951 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-11-23 02:02:14,951 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:02:14,951 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:02:14,951 INFO L85 PathProgramCache]: Analyzing trace with hash -1170620834, now seen corresponding path program 1 times [2021-11-23 02:02:14,952 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:02:14,952 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1025084988] [2021-11-23 02:02:14,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:02:14,952 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:02:15,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:02:15,186 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2021-11-23 02:02:15,186 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:02:15,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1025084988] [2021-11-23 02:02:15,186 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1025084988] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:02:15,186 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:02:15,187 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-23 02:02:15,187 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1463661981] [2021-11-23 02:02:15,187 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:02:15,188 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 02:02:15,188 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:02:15,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 02:02:15,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 02:02:15,189 INFO L87 Difference]: Start difference. First operand 4850 states and 7127 transitions. Second operand has 5 states, 5 states have (on average 18.8) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (22), 2 states have call predecessors, (22), 2 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2021-11-23 02:02:17,283 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:20,766 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:25,164 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:26,387 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:28,170 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.55s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:32,479 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:32,935 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:02:32,935 INFO L93 Difference]: Finished difference Result 11965 states and 17941 transitions. [2021-11-23 02:02:32,936 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 02:02:32,936 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.8) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (22), 2 states have call predecessors, (22), 2 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) Word has length 162 [2021-11-23 02:02:32,936 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:02:32,969 INFO L225 Difference]: With dead ends: 11965 [2021-11-23 02:02:32,969 INFO L226 Difference]: Without dead ends: 7217 [2021-11-23 02:02:32,987 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 02:02:32,988 INFO L933 BasicCegarLoop]: 1414 mSDtfsCounter, 391 mSDsluCounter, 4442 mSDsCounter, 0 mSdLazyCounter, 850 mSolverCounterSat, 0 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 480 SdHoareTripleChecker+Valid, 5243 SdHoareTripleChecker+Invalid, 854 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 850 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.5s IncrementalHoareTripleChecker+Time [2021-11-23 02:02:32,988 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [480 Valid, 5243 Invalid, 854 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 850 Invalid, 4 Unknown, 0 Unchecked, 17.5s Time] [2021-11-23 02:02:32,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7217 states. [2021-11-23 02:02:33,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7217 to 4874. [2021-11-23 02:02:33,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4874 states, 3459 states have (on average 1.4087886672448684) internal successors, (4873), 3483 states have internal predecessors, (4873), 1116 states have call successors, (1116), 275 states have call predecessors, (1116), 298 states have return successors, (1168), 1139 states have call predecessors, (1168), 1115 states have call successors, (1168) [2021-11-23 02:02:33,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4874 states to 4874 states and 7157 transitions. [2021-11-23 02:02:33,342 INFO L78 Accepts]: Start accepts. Automaton has 4874 states and 7157 transitions. Word has length 162 [2021-11-23 02:02:33,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:02:33,343 INFO L470 AbstractCegarLoop]: Abstraction has 4874 states and 7157 transitions. [2021-11-23 02:02:33,343 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.8) internal successors, (94), 4 states have internal predecessors, (94), 2 states have call successors, (22), 2 states have call predecessors, (22), 2 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2021-11-23 02:02:33,343 INFO L276 IsEmpty]: Start isEmpty. Operand 4874 states and 7157 transitions. [2021-11-23 02:02:33,358 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 186 [2021-11-23 02:02:33,358 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:02:33,358 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 9, 8, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:02:33,359 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-23 02:02:33,359 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:02:33,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:02:33,360 INFO L85 PathProgramCache]: Analyzing trace with hash -2011120824, now seen corresponding path program 1 times [2021-11-23 02:02:33,360 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:02:33,360 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [553852136] [2021-11-23 02:02:33,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:02:33,361 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:02:33,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:02:33,666 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 216 trivial. 0 not checked. [2021-11-23 02:02:33,666 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:02:33,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [553852136] [2021-11-23 02:02:33,667 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [553852136] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 02:02:33,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1644319118] [2021-11-23 02:02:33,667 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:02:33,667 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:02:33,668 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:02:33,669 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 02:02:33,698 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-23 02:02:34,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:02:34,667 INFO L263 TraceCheckSpWp]: Trace formula consists of 3319 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-23 02:02:34,690 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:02:35,014 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 191 trivial. 0 not checked. [2021-11-23 02:02:35,014 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 02:02:35,014 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1644319118] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:02:35,014 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 02:02:35,014 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [4] total 5 [2021-11-23 02:02:35,015 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [130169066] [2021-11-23 02:02:35,015 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:02:35,015 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 02:02:35,015 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:02:35,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 02:02:35,016 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-11-23 02:02:35,016 INFO L87 Difference]: Start difference. First operand 4874 states and 7157 transitions. Second operand has 3 states, 3 states have (on average 34.0) internal successors, (102), 3 states have internal predecessors, (102), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2021-11-23 02:02:37,091 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:39,956 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:42,208 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.22s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:44,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:02:44,698 INFO L93 Difference]: Finished difference Result 12517 states and 18805 transitions. [2021-11-23 02:02:44,698 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 02:02:44,699 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 34.0) internal successors, (102), 3 states have internal predecessors, (102), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) Word has length 185 [2021-11-23 02:02:44,699 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:02:44,784 INFO L225 Difference]: With dead ends: 12517 [2021-11-23 02:02:44,784 INFO L226 Difference]: Without dead ends: 7745 [2021-11-23 02:02:44,794 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 186 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-11-23 02:02:44,794 INFO L933 BasicCegarLoop]: 1535 mSDtfsCounter, 466 mSDsluCounter, 1197 mSDsCounter, 0 mSdLazyCounter, 421 mSolverCounterSat, 2 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 580 SdHoareTripleChecker+Valid, 2569 SdHoareTripleChecker+Invalid, 425 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 421 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.4s IncrementalHoareTripleChecker+Time [2021-11-23 02:02:44,795 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [580 Valid, 2569 Invalid, 425 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 421 Invalid, 2 Unknown, 0 Unchecked, 9.4s Time] [2021-11-23 02:02:44,801 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7745 states. [2021-11-23 02:02:45,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7745 to 4952. [2021-11-23 02:02:45,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4952 states, 3519 states have (on average 1.4069337880079569) internal successors, (4951), 3543 states have internal predecessors, (4951), 1134 states have call successors, (1134), 275 states have call predecessors, (1134), 298 states have return successors, (1192), 1157 states have call predecessors, (1192), 1133 states have call successors, (1192) [2021-11-23 02:02:45,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4952 states to 4952 states and 7277 transitions. [2021-11-23 02:02:45,165 INFO L78 Accepts]: Start accepts. Automaton has 4952 states and 7277 transitions. Word has length 185 [2021-11-23 02:02:45,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:02:45,166 INFO L470 AbstractCegarLoop]: Abstraction has 4952 states and 7277 transitions. [2021-11-23 02:02:45,166 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 34.0) internal successors, (102), 3 states have internal predecessors, (102), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2021-11-23 02:02:45,167 INFO L276 IsEmpty]: Start isEmpty. Operand 4952 states and 7277 transitions. [2021-11-23 02:02:45,182 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 171 [2021-11-23 02:02:45,182 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:02:45,183 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:02:45,226 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-23 02:02:45,409 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-11-23 02:02:45,409 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:02:45,410 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:02:45,410 INFO L85 PathProgramCache]: Analyzing trace with hash -43095272, now seen corresponding path program 1 times [2021-11-23 02:02:45,410 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:02:45,410 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1872505776] [2021-11-23 02:02:45,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:02:45,410 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:02:45,538 ERROR L247 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2021-11-23 02:02:45,539 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1974199726] [2021-11-23 02:02:45,539 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:02:45,539 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:02:45,539 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:02:45,540 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 02:02:45,556 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-23 02:02:46,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:02:46,437 INFO L263 TraceCheckSpWp]: Trace formula consists of 3108 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-23 02:02:46,452 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:02:46,735 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2021-11-23 02:02:46,735 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 02:02:46,735 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:02:46,735 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1872505776] [2021-11-23 02:02:46,736 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2021-11-23 02:02:46,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1974199726] [2021-11-23 02:02:46,736 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1974199726] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:02:46,736 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:02:46,736 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 02:02:46,736 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1267723561] [2021-11-23 02:02:46,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:02:46,737 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 02:02:46,737 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:02:46,737 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 02:02:46,737 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 02:02:46,738 INFO L87 Difference]: Start difference. First operand 4952 states and 7277 transitions. Second operand has 3 states, 3 states have (on average 33.333333333333336) internal successors, (100), 3 states have internal predecessors, (100), 2 states have call successors, (23), 2 states have call predecessors, (23), 2 states have return successors, (22), 2 states have call predecessors, (22), 2 states have call successors, (22) [2021-11-23 02:02:48,849 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:51,022 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.40s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:53,049 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:55,713 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:02:58,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:02:58,012 INFO L93 Difference]: Finished difference Result 9802 states and 14429 transitions. [2021-11-23 02:02:58,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 02:02:58,012 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 33.333333333333336) internal successors, (100), 3 states have internal predecessors, (100), 2 states have call successors, (23), 2 states have call predecessors, (23), 2 states have return successors, (22), 2 states have call predecessors, (22), 2 states have call successors, (22) Word has length 170 [2021-11-23 02:02:58,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:02:58,029 INFO L225 Difference]: With dead ends: 9802 [2021-11-23 02:02:58,030 INFO L226 Difference]: Without dead ends: 4952 [2021-11-23 02:02:58,043 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 169 GetRequests, 168 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 02:02:58,044 INFO L933 BasicCegarLoop]: 923 mSDtfsCounter, 12 mSDsluCounter, 1065 mSDsCounter, 0 mSdLazyCounter, 331 mSolverCounterSat, 3 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 1827 SdHoareTripleChecker+Invalid, 337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 331 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:02:58,044 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [19 Valid, 1827 Invalid, 337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 331 Invalid, 3 Unknown, 0 Unchecked, 11.1s Time] [2021-11-23 02:02:58,050 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4952 states. [2021-11-23 02:02:58,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4952 to 4952. [2021-11-23 02:02:58,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4952 states, 3519 states have (on average 1.4052287581699345) internal successors, (4945), 3543 states have internal predecessors, (4945), 1134 states have call successors, (1134), 275 states have call predecessors, (1134), 298 states have return successors, (1192), 1157 states have call predecessors, (1192), 1133 states have call successors, (1192) [2021-11-23 02:02:58,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4952 states to 4952 states and 7271 transitions. [2021-11-23 02:02:58,344 INFO L78 Accepts]: Start accepts. Automaton has 4952 states and 7271 transitions. Word has length 170 [2021-11-23 02:02:58,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:02:58,345 INFO L470 AbstractCegarLoop]: Abstraction has 4952 states and 7271 transitions. [2021-11-23 02:02:58,345 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 33.333333333333336) internal successors, (100), 3 states have internal predecessors, (100), 2 states have call successors, (23), 2 states have call predecessors, (23), 2 states have return successors, (22), 2 states have call predecessors, (22), 2 states have call successors, (22) [2021-11-23 02:02:58,346 INFO L276 IsEmpty]: Start isEmpty. Operand 4952 states and 7271 transitions. [2021-11-23 02:02:58,361 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 172 [2021-11-23 02:02:58,361 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:02:58,361 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:02:58,405 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-23 02:02:58,577 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2021-11-23 02:02:58,577 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:02:58,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:02:58,578 INFO L85 PathProgramCache]: Analyzing trace with hash 1041216138, now seen corresponding path program 1 times [2021-11-23 02:02:58,578 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:02:58,578 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1748402274] [2021-11-23 02:02:58,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:02:58,578 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:02:58,714 ERROR L247 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2021-11-23 02:02:58,714 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [54191483] [2021-11-23 02:02:58,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:02:58,715 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:02:58,715 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:02:58,716 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 02:02:58,733 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-23 02:02:59,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:02:59,653 INFO L263 TraceCheckSpWp]: Trace formula consists of 3148 conjuncts, 5 conjunts are in the unsatisfiable core [2021-11-23 02:02:59,662 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:02:59,971 INFO L134 CoverageAnalysis]: Checked inductivity of 158 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 149 trivial. 0 not checked. [2021-11-23 02:02:59,971 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 02:02:59,971 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:02:59,971 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1748402274] [2021-11-23 02:02:59,971 WARN L312 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2021-11-23 02:02:59,971 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [54191483] [2021-11-23 02:02:59,971 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [54191483] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:02:59,971 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:02:59,972 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-23 02:02:59,972 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2030946696] [2021-11-23 02:02:59,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:02:59,972 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 02:02:59,973 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:02:59,973 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 02:02:59,973 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-23 02:02:59,973 INFO L87 Difference]: Start difference. First operand 4952 states and 7271 transitions. Second operand has 4 states, 4 states have (on average 24.5) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (24), 2 states have call predecessors, (24), 3 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-11-23 02:03:02,059 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:05,000 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.75s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:07,467 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:11,613 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:13,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:03:13,257 INFO L93 Difference]: Finished difference Result 9826 states and 14465 transitions. [2021-11-23 02:03:13,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 02:03:13,257 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 24.5) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (24), 2 states have call predecessors, (24), 3 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 171 [2021-11-23 02:03:13,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:03:13,268 INFO L225 Difference]: With dead ends: 9826 [2021-11-23 02:03:13,268 INFO L226 Difference]: Without dead ends: 4952 [2021-11-23 02:03:13,277 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 168 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-23 02:03:13,278 INFO L933 BasicCegarLoop]: 918 mSDtfsCounter, 11 mSDsluCounter, 2158 mSDsCounter, 0 mSdLazyCounter, 517 mSolverCounterSat, 3 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 2744 SdHoareTripleChecker+Invalid, 523 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 517 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:03:13,278 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [13 Valid, 2744 Invalid, 523 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 517 Invalid, 3 Unknown, 0 Unchecked, 13.1s Time] [2021-11-23 02:03:13,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4952 states. [2021-11-23 02:03:13,620 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4952 to 4952. [2021-11-23 02:03:13,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4952 states, 3519 states have (on average 1.4018186984938903) internal successors, (4933), 3543 states have internal predecessors, (4933), 1134 states have call successors, (1134), 275 states have call predecessors, (1134), 298 states have return successors, (1192), 1157 states have call predecessors, (1192), 1133 states have call successors, (1192) [2021-11-23 02:03:13,643 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4952 states to 4952 states and 7259 transitions. [2021-11-23 02:03:13,645 INFO L78 Accepts]: Start accepts. Automaton has 4952 states and 7259 transitions. Word has length 171 [2021-11-23 02:03:13,645 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:03:13,645 INFO L470 AbstractCegarLoop]: Abstraction has 4952 states and 7259 transitions. [2021-11-23 02:03:13,645 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 24.5) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (24), 2 states have call predecessors, (24), 3 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-11-23 02:03:13,646 INFO L276 IsEmpty]: Start isEmpty. Operand 4952 states and 7259 transitions. [2021-11-23 02:03:13,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2021-11-23 02:03:13,661 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:03:13,661 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 9, 8, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:03:13,702 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-23 02:03:13,877 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:03:13,877 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:03:13,878 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:03:13,878 INFO L85 PathProgramCache]: Analyzing trace with hash 1440906394, now seen corresponding path program 1 times [2021-11-23 02:03:13,878 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:03:13,878 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1633058883] [2021-11-23 02:03:13,878 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:03:13,878 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:03:14,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:03:14,167 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 216 trivial. 0 not checked. [2021-11-23 02:03:14,167 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:03:14,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1633058883] [2021-11-23 02:03:14,168 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1633058883] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 02:03:14,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [815019168] [2021-11-23 02:03:14,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:03:14,168 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:03:14,168 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:03:14,169 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 02:03:14,188 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-23 02:03:15,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:03:15,014 INFO L263 TraceCheckSpWp]: Trace formula consists of 3330 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-23 02:03:15,021 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:03:15,572 INFO L354 Elim1Store]: treesize reduction 42, result has 50.6 percent of original size [2021-11-23 02:03:15,573 INFO L388 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 79 treesize of output 79 [2021-11-23 02:03:15,833 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 191 trivial. 0 not checked. [2021-11-23 02:03:15,833 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 02:03:15,833 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [815019168] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:03:15,834 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 02:03:15,834 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5] total 8 [2021-11-23 02:03:15,834 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [75157617] [2021-11-23 02:03:15,834 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:03:15,835 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 02:03:15,835 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:03:15,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 02:03:15,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2021-11-23 02:03:15,835 INFO L87 Difference]: Start difference. First operand 4952 states and 7259 transitions. Second operand has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2021-11-23 02:03:17,934 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:22,021 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:25,565 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:30,494 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.31s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:34,312 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.49s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:36,355 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:41,066 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.14s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:48,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:03:48,012 INFO L93 Difference]: Finished difference Result 25012 states and 38897 transitions. [2021-11-23 02:03:48,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-23 02:03:48,012 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) Word has length 189 [2021-11-23 02:03:48,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:03:48,060 INFO L225 Difference]: With dead ends: 25012 [2021-11-23 02:03:48,060 INFO L226 Difference]: Without dead ends: 20162 [2021-11-23 02:03:48,071 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 198 GetRequests, 190 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=59, Unknown=0, NotChecked=0, Total=90 [2021-11-23 02:03:48,072 INFO L933 BasicCegarLoop]: 3781 mSDtfsCounter, 1760 mSDsluCounter, 5770 mSDsCounter, 0 mSdLazyCounter, 1523 mSolverCounterSat, 728 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 29.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2128 SdHoareTripleChecker+Valid, 8850 SdHoareTripleChecker+Invalid, 2255 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 728 IncrementalHoareTripleChecker+Valid, 1523 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 31.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:03:48,072 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2128 Valid, 8850 Invalid, 2255 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [728 Valid, 1523 Invalid, 4 Unknown, 0 Unchecked, 31.1s Time] [2021-11-23 02:03:48,090 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20162 states. [2021-11-23 02:03:48,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20162 to 4964. [2021-11-23 02:03:48,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4964 states, 3531 states have (on average 1.4021523647691871) internal successors, (4951), 3555 states have internal predecessors, (4951), 1134 states have call successors, (1134), 275 states have call predecessors, (1134), 298 states have return successors, (1192), 1157 states have call predecessors, (1192), 1133 states have call successors, (1192) [2021-11-23 02:03:49,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4964 states to 4964 states and 7277 transitions. [2021-11-23 02:03:49,007 INFO L78 Accepts]: Start accepts. Automaton has 4964 states and 7277 transitions. Word has length 189 [2021-11-23 02:03:49,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:03:49,008 INFO L470 AbstractCegarLoop]: Abstraction has 4964 states and 7277 transitions. [2021-11-23 02:03:49,008 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2021-11-23 02:03:49,008 INFO L276 IsEmpty]: Start isEmpty. Operand 4964 states and 7277 transitions. [2021-11-23 02:03:49,024 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2021-11-23 02:03:49,025 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:03:49,025 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 9, 8, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:03:49,068 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-11-23 02:03:49,243 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2021-11-23 02:03:49,243 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:03:49,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:03:49,244 INFO L85 PathProgramCache]: Analyzing trace with hash -381021642, now seen corresponding path program 1 times [2021-11-23 02:03:49,244 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:03:49,244 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1791773844] [2021-11-23 02:03:49,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:03:49,244 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:03:49,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:03:49,518 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 216 trivial. 0 not checked. [2021-11-23 02:03:49,519 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 02:03:49,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1791773844] [2021-11-23 02:03:49,519 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1791773844] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-23 02:03:49,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1551788164] [2021-11-23 02:03:49,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:03:49,520 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-23 02:03:49,520 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:03:49,521 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-23 02:03:49,525 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-11-23 02:03:50,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:03:50,508 INFO L263 TraceCheckSpWp]: Trace formula consists of 3330 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-23 02:03:50,515 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:03:50,902 INFO L354 Elim1Store]: treesize reduction 42, result has 50.6 percent of original size [2021-11-23 02:03:50,902 INFO L388 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 76 treesize of output 76 [2021-11-23 02:03:51,128 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 191 trivial. 0 not checked. [2021-11-23 02:03:51,128 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-23 02:03:51,129 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1551788164] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 02:03:51,129 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 02:03:51,129 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5] total 8 [2021-11-23 02:03:51,129 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [603130761] [2021-11-23 02:03:51,129 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:03:51,130 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 02:03:51,130 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 02:03:51,130 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 02:03:51,130 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2021-11-23 02:03:51,130 INFO L87 Difference]: Start difference. First operand 4964 states and 7277 transitions. Second operand has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2021-11-23 02:03:53,206 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:03:56,162 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:02,602 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:04,768 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:07,236 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.88s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:08,347 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:09,578 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.23s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:11,664 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.24s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:14,590 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.10s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:15,943 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.35s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:23,957 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:27,449 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.34s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:29,472 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:33,519 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.29s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:35,546 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:04:37,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:04:37,542 INFO L93 Difference]: Finished difference Result 25076 states and 39003 transitions. [2021-11-23 02:04:37,542 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-23 02:04:37,542 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) Word has length 189 [2021-11-23 02:04:37,543 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:04:37,588 INFO L225 Difference]: With dead ends: 25076 [2021-11-23 02:04:37,588 INFO L226 Difference]: Without dead ends: 20214 [2021-11-23 02:04:37,603 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 198 GetRequests, 190 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=59, Unknown=0, NotChecked=0, Total=90 [2021-11-23 02:04:37,603 INFO L933 BasicCegarLoop]: 2941 mSDtfsCounter, 1788 mSDsluCounter, 6937 mSDsCounter, 0 mSdLazyCounter, 1596 mSolverCounterSat, 506 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 43.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2171 SdHoareTripleChecker+Valid, 9019 SdHoareTripleChecker+Invalid, 2108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 506 IncrementalHoareTripleChecker+Valid, 1596 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 45.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:04:37,604 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2171 Valid, 9019 Invalid, 2108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [506 Valid, 1596 Invalid, 6 Unknown, 0 Unchecked, 45.1s Time] [2021-11-23 02:04:37,623 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20214 states. [2021-11-23 02:04:38,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20214 to 5018. [2021-11-23 02:04:38,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5018 states, 3579 states have (on average 1.4051411008661638) internal successors, (5029), 3603 states have internal predecessors, (5029), 1140 states have call successors, (1140), 275 states have call predecessors, (1140), 298 states have return successors, (1198), 1163 states have call predecessors, (1198), 1139 states have call successors, (1198) [2021-11-23 02:04:38,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5018 states to 5018 states and 7367 transitions. [2021-11-23 02:04:38,427 INFO L78 Accepts]: Start accepts. Automaton has 5018 states and 7367 transitions. Word has length 189 [2021-11-23 02:04:38,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:04:38,428 INFO L470 AbstractCegarLoop]: Abstraction has 5018 states and 7367 transitions. [2021-11-23 02:04:38,428 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2021-11-23 02:04:38,428 INFO L276 IsEmpty]: Start isEmpty. Operand 5018 states and 7367 transitions. [2021-11-23 02:04:38,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2021-11-23 02:04:38,450 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:04:38,450 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:04:38,494 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-11-23 02:04:38,669 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2021-11-23 02:04:38,669 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:04:38,670 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:04:38,670 INFO L85 PathProgramCache]: Analyzing trace with hash 2004914900, now seen corresponding path program 1 times [2021-11-23 02:04:38,670 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 02:04:38,670 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [951524268] [2021-11-23 02:04:38,670 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:04:38,670 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 02:04:42,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-23 02:04:42,765 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-23 02:04:45,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-23 02:04:45,583 INFO L133 FreeRefinementEngine]: Strategy SIFA_TAIPAN found a feasible trace [2021-11-23 02:04:45,584 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-23 02:04:45,585 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 02:04:45,589 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-11-23 02:04:45,593 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:04:45,596 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 02:04:45,706 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-23 02:04:45,707 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-23 02:04:45,709 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-23 02:04:45,709 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-23 02:04:45,709 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-23 02:04:45,710 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-23 02:04:45,710 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-23 02:04:45,710 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-23 02:04:46,053 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 02:04:46 BoogieIcfgContainer [2021-11-23 02:04:46,053 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 02:04:46,054 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 02:04:46,054 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 02:04:46,054 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 02:04:46,055 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:58:38" (3/4) ... [2021-11-23 02:04:46,058 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-23 02:04:46,058 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 02:04:46,059 INFO L158 Benchmark]: Toolchain (without parser) took 381857.21ms. Allocated memory was 115.3MB in the beginning and 1.1GB in the end (delta: 958.4MB). Free memory was 71.7MB in the beginning and 505.5MB in the end (delta: -433.8MB). Peak memory consumption was 523.8MB. Max. memory is 16.1GB. [2021-11-23 02:04:46,059 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 115.3MB. Free memory is still 70.9MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 02:04:46,060 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2920.41ms. Allocated memory was 115.3MB in the beginning and 257.9MB in the end (delta: 142.6MB). Free memory was 71.7MB in the beginning and 160.2MB in the end (delta: -88.5MB). Peak memory consumption was 80.6MB. Max. memory is 16.1GB. [2021-11-23 02:04:46,062 INFO L158 Benchmark]: Boogie Procedure Inliner took 321.04ms. Allocated memory is still 257.9MB. Free memory was 160.2MB in the beginning and 134.0MB in the end (delta: 26.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2021-11-23 02:04:46,062 INFO L158 Benchmark]: Boogie Preprocessor took 263.73ms. Allocated memory is still 257.9MB. Free memory was 134.0MB in the beginning and 162.2MB in the end (delta: -28.2MB). Peak memory consumption was 31.6MB. Max. memory is 16.1GB. [2021-11-23 02:04:46,068 INFO L158 Benchmark]: RCFGBuilder took 10585.88ms. Allocated memory was 257.9MB in the beginning and 440.4MB in the end (delta: 182.5MB). Free memory was 162.2MB in the beginning and 152.6MB in the end (delta: 9.6MB). Peak memory consumption was 269.7MB. Max. memory is 16.1GB. [2021-11-23 02:04:46,069 INFO L158 Benchmark]: TraceAbstraction took 367744.17ms. Allocated memory was 440.4MB in the beginning and 1.1GB in the end (delta: 633.3MB). Free memory was 152.6MB in the beginning and 505.5MB in the end (delta: -353.0MB). Peak memory consumption was 290.8MB. Max. memory is 16.1GB. [2021-11-23 02:04:46,071 INFO L158 Benchmark]: Witness Printer took 4.68ms. Allocated memory is still 1.1GB. Free memory is still 505.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 02:04:46,073 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 115.3MB. Free memory is still 70.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2920.41ms. Allocated memory was 115.3MB in the beginning and 257.9MB in the end (delta: 142.6MB). Free memory was 71.7MB in the beginning and 160.2MB in the end (delta: -88.5MB). Peak memory consumption was 80.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 321.04ms. Allocated memory is still 257.9MB. Free memory was 160.2MB in the beginning and 134.0MB in the end (delta: 26.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 263.73ms. Allocated memory is still 257.9MB. Free memory was 134.0MB in the beginning and 162.2MB in the end (delta: -28.2MB). Peak memory consumption was 31.6MB. Max. memory is 16.1GB. * RCFGBuilder took 10585.88ms. Allocated memory was 257.9MB in the beginning and 440.4MB in the end (delta: 182.5MB). Free memory was 162.2MB in the beginning and 152.6MB in the end (delta: 9.6MB). Peak memory consumption was 269.7MB. Max. memory is 16.1GB. * TraceAbstraction took 367744.17ms. Allocated memory was 440.4MB in the beginning and 1.1GB in the end (delta: 633.3MB). Free memory was 152.6MB in the beginning and 505.5MB in the end (delta: -353.0MB). Peak memory consumption was 290.8MB. Max. memory is 16.1GB. * Witness Printer took 4.68ms. Allocated memory is still 1.1GB. Free memory is still 505.5MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7417]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 7550, overapproximation of bitwiseOr at line 9385, overapproximation of bitwiseAnd at line 9183. Possible FailurePath: [L7440] int ldv_state_variable_3 ; [L7441] int LDV_IN_INTERRUPT = 1; [L7442] int ldv_state_variable_2 ; [L7443] struct sdio_func *mwifiex_sdio_group0 ; [L7444] int ref_cnt ; [L7445] struct mwifiex_adapter *sdio_ops_group0 ; [L7446] int ldv_state_variable_1 ; [L7447] struct device *mwifiex_sdio_pm_ops_group1 ; [L7448] int ldv_state_variable_4 ; [L7449] int ldv_state_variable_0 ; [L7450] struct sk_buff *sdio_ops_group1 ; [L7543-L7545] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd87xx = {1U, 1U, 64U, 65U, 48U, 3U, 96U, 97U, 63U, 65534U, 64U, 4U, 5U, (unsigned char)0, (unsigned char)0, 6U, 7U, (unsigned char)0, (unsigned char)0, 8U, 9U, 108U}; [L7546-L7548] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd8897 = {0U, 0U, 96U, 97U, 80U, 195U, 192U, 193U, 255U, 4294967295U, 184U, 4U, 5U, 6U, 7U, 8U, 9U, 10U, 11U, 12U, 13U, 204U}; [L7549-L7551] static struct mwifiex_sdio_device const mwifiex_sdio_sd8786 = {"mrvl/sd8786_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7552-L7554] static struct mwifiex_sdio_device const mwifiex_sdio_sd8787 = {"mrvl/sd8787_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7555-L7557] static struct mwifiex_sdio_device const mwifiex_sdio_sd8797 = {"mrvl/sd8797_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7558-L7560] static struct mwifiex_sdio_device const mwifiex_sdio_sd8897 = {"mrvl/sd8897_uapsta.bin", & mwifiex_reg_sd8897, 32U, 16U, 1, 0, 4096U, 32768U, 32768U}; [L7646] static u8 user_rmmod ; [L7648] static struct semaphore add_remove_card_sem ; [L7879-L7882] static struct sdio_device_id const mwifiex_ids[5U] = { {255U, 735U, 37142U, (unsigned long )(& mwifiex_sdio_sd8786)}, {255U, 735U, 37145U, (unsigned long )(& mwifiex_sdio_sd8787)}, {255U, 735U, 37161U, (unsigned long )(& mwifiex_sdio_sd8797)}, {255U, 735U, 37165U, (unsigned long )(& mwifiex_sdio_sd8897)}}; [L7883] struct sdio_device_id const __mod_sdio__mwifiex_ids_device_table ; [L7884-L7886] static struct dev_pm_ops const mwifiex_sdio_pm_ops = {0, 0, & mwifiex_sdio_suspend, & mwifiex_sdio_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7887-L7889] static struct sdio_driver mwifiex_sdio = {(char *)"mwifiex_sdio", (struct sdio_device_id const *)(& mwifiex_ids), & mwifiex_sdio_probe, & mwifiex_sdio_remove, {0, 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_sdio_pm_ops, 0}}; [L9929] static struct mmc_host *reset_host ; [L9954-L9955] static struct work_struct card_reset_work = {{137438953424L}, {& card_reset_work.entry, & card_reset_work.entry}, & sdio_card_reset_worker, {(struct lock_class_key *)(& card_reset_work), {0, 0}, "card_reset_work", 0, 0UL}}; [L9966-L9972] static struct mwifiex_if_ops sdio_ops = {& mwifiex_init_sdio, & mwifiex_cleanup_sdio, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_sdio_enable_host_int, & mwifiex_sdio_disable_host_int, & mwifiex_process_int_status, & mwifiex_sdio_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, & mwifiex_update_mp_end_port, & mwifiex_cleanup_mpa_buf, & mwifiex_sdio_cmdrsp_complete, & mwifiex_sdio_cmdrsp_complete, 0, 0, 0, & mwifiex_sdio_card_reset, 0, 0}; [L9999] int ldv_retval_2 ; [L10000] int ldv_retval_5 ; [L10001] int ldv_retval_0 ; [L10002] int ldv_retval_6 ; [L10003] int ldv_retval_1 ; [L10010] int ldv_retval_4 ; [L10012] int ldv_retval_8 ; [L10013] int ldv_retval_3 ; [L10014] int ldv_retval_7 ; [L10462] Element set_impl[15] ; [L10463] int last_index = 0; [L10597] Set LDV_SKBS ; [L10047] u32 ldvarg1 ; [L10048] u32 tmp ; [L10049] u16 ldvarg4 ; [L10050] u16 tmp___0 ; [L10051] u8 ldvarg3 ; [L10052] u8 tmp___1 ; [L10053] struct mwifiex_fw_image *ldvarg0 ; [L10054] void *tmp___2 ; [L10055] struct mwifiex_tx_param *ldvarg2 ; [L10056] void *tmp___3 ; [L10057] struct sdio_device_id *ldvarg5 ; [L10058] void *tmp___4 ; [L10059] struct work_struct *ldvarg6 ; [L10060] void *tmp___5 ; [L10061] int tmp___6 ; [L10062] int tmp___7 ; [L10063] int tmp___8 ; [L10064] int tmp___9 ; [L10065] int tmp___10 ; [L10066] int tmp___11 ; [L10068] tmp = __VERIFIER_nondet_u32() [L10069] ldvarg1 = tmp [L10070] tmp___0 = __VERIFIER_nondet_u16() [L10071] ldvarg4 = tmp___0 [L10072] tmp___1 = __VERIFIER_nondet_u8() [L10073] ldvarg3 = tmp___1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg1=61, ldvarg3=94, ldvarg4=49, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, user_rmmod=0] [L10074] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=32, tmp___0=1, user_rmmod=0] [L10074] RET, EXPR ldv_zalloc(32UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg1=61, ldvarg3=94, ldvarg4=49, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, user_rmmod=0] [L10074] tmp___2 = ldv_zalloc(32UL) [L10075] ldvarg0 = (struct mwifiex_fw_image *)tmp___2 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=61, ldvarg3=94, ldvarg4=49, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, user_rmmod=0] [L10076] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=4, tmp___0=1, user_rmmod=0] [L10076] RET, EXPR ldv_zalloc(4UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, ldvarg1=61, ldvarg3=94, ldvarg4=49, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, user_rmmod=0] [L10076] tmp___3 = ldv_zalloc(4UL) [L10077] ldvarg2 = (struct mwifiex_tx_param *)tmp___3 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, user_rmmod=0] [L10078] CALL, EXPR ldv_zalloc(16UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=16, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=16, tmp___0=1, user_rmmod=0] [L10078] RET, EXPR ldv_zalloc(16UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(16UL)={0:0}, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, user_rmmod=0] [L10078] tmp___4 = ldv_zalloc(16UL) [L10079] ldvarg5 = (struct sdio_device_id *)tmp___4 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, user_rmmod=0] [L10080] CALL, EXPR ldv_zalloc(80UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=80, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=80, tmp___0=1, user_rmmod=0] [L10080] RET, EXPR ldv_zalloc(80UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(80UL)={0:0}, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, user_rmmod=0] [L10080] tmp___5 = ldv_zalloc(80UL) [L10081] ldvarg6 = (struct work_struct *)tmp___5 [L10082] CALL ldv_initialize() [L10616] CALL ldv_set_init(LDV_SKBS) [L10468] set = set_impl [L10469] last_index = 0 [L10616] RET ldv_set_init(LDV_SKBS) [L10082] RET ldv_initialize() [L10083] ldv_state_variable_4 = 0 [L10084] ldv_state_variable_1 = 0 [L10085] ref_cnt = 0 [L10086] ldv_state_variable_0 = 1 [L10087] ldv_state_variable_3 = 0 [L10088] ldv_state_variable_2 = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: [L10324] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___9=1, user_rmmod=0] [L10325] COND TRUE ldv_state_variable_0 == 1 [L10326] CALL, EXPR mwifiex_sdio_init_module() [L9975] int tmp ; [L9977] CALL sema_init(& add_remove_card_sem, 1) [L7459] struct lock_class_key __key ; [L7460] struct semaphore __constr_expr_0 ; [L7462] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7463] __constr_expr_0.lock.magic = 3735899821U [L7464] __constr_expr_0.lock.owner_cpu = 4294967295U [L7465] __constr_expr_0.lock.owner = (void *)-1 [L7466] __constr_expr_0.lock.dep_map.key = 0 [L7467] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7468] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7469] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7470] __constr_expr_0.lock.dep_map.cpu = 0 [L7471] __constr_expr_0.lock.dep_map.ip = 0UL [L7472] __constr_expr_0.count = (unsigned int )val [L7473] __constr_expr_0.wait_list.next = & sem->wait_list [L7474] __constr_expr_0.wait_list.prev = & sem->wait_list [L7475] *sem = __constr_expr_0 [L7476] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7477] return; [L7477] return; [L9977] RET sema_init(& add_remove_card_sem, 1) [L9978] user_rmmod = 0U [L9979] CALL, EXPR sdio_register_driver(& mwifiex_sdio) [L10826] return __VERIFIER_nondet_int(); [L9979] RET, EXPR sdio_register_driver(& mwifiex_sdio) [L9979] tmp = sdio_register_driver(& mwifiex_sdio) [L9980] return (tmp); [L10326] RET, EXPR mwifiex_sdio_init_module() [L10326] ldv_retval_7 = mwifiex_sdio_init_module() [L10327] COND FALSE !(ldv_retval_7 != 0) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___9=1, user_rmmod=0] [L10332] COND TRUE ldv_retval_7 == 0 [L10333] ldv_state_variable_0 = 2 [L10334] ldv_state_variable_2 = 1 [L10335] ldv_state_variable_3 = 1 [L10336] CALL ldv_initialize_sdio_driver_3() [L10029] void *tmp ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10031] CALL, EXPR ldv_zalloc(1488UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=1488, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=1488, tmp___0=1, user_rmmod=0] [L10031] RET, EXPR ldv_zalloc(1488UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(1488UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10031] tmp = ldv_zalloc(1488UL) [L10032] mwifiex_sdio_group0 = (struct sdio_func *)tmp [L10336] RET ldv_initialize_sdio_driver_3() [L10337] ldv_state_variable_1 = 1 [L10338] CALL ldv_initialize_mwifiex_if_ops_1() [L10017] void *tmp ; [L10018] void *tmp___0 ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10020] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=6864, tmp___0=1, user_rmmod=0] [L10020] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(6864UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10020] tmp = ldv_zalloc(6864UL) [L10021] sdio_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10022] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=232, tmp___0=1, user_rmmod=0] [L10022] RET, EXPR ldv_zalloc(232UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(232UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10022] tmp___0 = ldv_zalloc(232UL) [L10023] sdio_ops_group1 = (struct sk_buff *)tmp___0 [L10338] RET ldv_initialize_mwifiex_if_ops_1() [L10339] ldv_state_variable_4 = 1 [L10340] CALL ldv_dev_pm_ops_4() [L10038] void *tmp ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10040] CALL, EXPR ldv_zalloc(1416UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=1416, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=1416, tmp___0=1, user_rmmod=0] [L10040] RET, EXPR ldv_zalloc(1416UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1416UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10040] tmp = ldv_zalloc(1416UL) [L10041] mwifiex_sdio_pm_ops_group1 = (struct device *)tmp [L10340] RET ldv_dev_pm_ops_4() [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___9=1, user_rmmod=0] [L10183] COND TRUE ldv_state_variable_1 != 0 [L10184] tmp___8 = __VERIFIER_nondet_int() [L10186] case 0: [L10193] case 1: [L10200] case 2: [L10207] case 3: [L10214] case 4: [L10221] case 5: [L10228] case 6: [L10235] case 7: [L10242] case 8: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___8=8, tmp___9=1, user_rmmod=0] [L10243] COND TRUE ldv_state_variable_1 == 1 [L10244] CALL mwifiex_process_int_status(sdio_ops_group0) [L9125] struct sdio_mmc_card *card ; [L9126] struct mwifiex_sdio_card_reg const *reg ; [L9127] int ret ; [L9128] u8 sdio_ireg ; [L9129] struct sk_buff *skb ; [L9130] u8 port ; [L9131] u32 len_reg_l ; [L9132] u32 len_reg_u ; [L9133] u32 rx_blocks ; [L9134] u16 rx_len ; [L9135] unsigned long flags ; [L9136] u32 bitmap ; [L9137] u8 cr ; [L9138] raw_spinlock_t *tmp ; [L9139] u32 pkt_type ; [L9140] int tmp___0 ; [L9141] struct _ddebug descriptor ; [L9142] long tmp___1 ; [L9143] struct _ddebug descriptor___0 ; [L9144] long tmp___2 ; [L9145] struct _ddebug descriptor___1 ; [L9146] long tmp___3 ; [L9147] struct _ddebug descriptor___2 ; [L9148] long tmp___4 ; [L9149] struct _ddebug descriptor___3 ; [L9150] long tmp___5 ; [L9151] struct _ddebug descriptor___4 ; [L9152] long tmp___6 ; [L9153] struct _ddebug descriptor___5 ; [L9154] long tmp___7 ; [L9155] int tmp___8 ; [L9156] struct _ddebug descriptor___6 ; [L9157] long tmp___9 ; [L9158] int tmp___10 ; [L9159] struct _ddebug descriptor___7 ; [L9160] long tmp___11 ; [L9161] int tmp___12 ; [L9162] struct _ddebug descriptor___8 ; [L9163] long tmp___13 ; [L9164] int tmp___14 ; [L9166] EXPR adapter->card [L9166] card = (struct sdio_mmc_card *)adapter->card [L9167] EXPR card->reg [L9167] reg = card->reg [L9168] ret = 0 [L9169] port = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9170] CALL, EXPR spinlock_check(& adapter->int_lock) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, lock={0:891}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7253] return (& lock->ldv_6338.rlock); [L9170] RET, EXPR spinlock_check(& adapter->int_lock) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, spinlock_check(& adapter->int_lock)={0:891}, user_rmmod=0] [L9170] tmp = spinlock_check(& adapter->int_lock) [L9171] CALL, EXPR _raw_spin_lock_irqsave(tmp) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, arg0={0:891}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10693] return __VERIFIER_nondet_ulong(); [L9171] RET, EXPR _raw_spin_lock_irqsave(tmp) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, _raw_spin_lock_irqsave(tmp)=18446744073709551674, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9171] flags = _raw_spin_lock_irqsave(tmp) [L9172] EXPR adapter->int_status [L9172] sdio_ireg = adapter->int_status [L9173] adapter->int_status = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9174] CALL spin_unlock_irqrestore(& adapter->int_lock, flags) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7259] FCALL _raw_spin_unlock_irqrestore(& lock->ldv_6338.rlock, flags) [L9174] RET spin_unlock_irqrestore(& adapter->int_lock, flags) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9175] COND FALSE !((unsigned int )sdio_ireg == 0U) [L9179] (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U [L9179] COND FALSE !((int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U) [L9183] COND TRUE ((unsigned int )sdio_ireg & 64U) != 0U [L9184] EXPR card->mp_regs [L9184] EXPR card->mp_regs + 181UL [L9184] rx_len = (int )((u16 )*(card->mp_regs + 181UL)) << 8U [L9185] EXPR card->mp_regs [L9185] EXPR card->mp_regs + 180UL [L9185] rx_len = (int )((u16 )*(card->mp_regs + 180UL)) | (int )rx_len [L9186] rx_blocks = (u32 )(((int )rx_len + 255) / 256) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=5, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9187] COND FALSE !((unsigned int )rx_len <= 4U || rx_blocks * 256U > 4096U) [L9191] rx_len = (unsigned int )((unsigned short )rx_blocks) * 256U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9192] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )rx_len) VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10455] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=256, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10457] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10600] void *skb ; [L10601] void *tmp___7 ; VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10603] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND FALSE !(tmp___0 != 0) [L7390] EXPR, FCALL calloc(1UL, size) [L7390] tmp = calloc(1UL, size) [L7391] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, calloc(1UL, size)={18446744073709551617:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={18446744073709551617:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={18446744073709551617:0}, tmp___0=0, user_rmmod=0] [L7392] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7361] COND FALSE !(!cond) [L7392] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, calloc(1UL, size)={18446744073709551617:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={18446744073709551617:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={18446744073709551617:0}, tmp___0=0, user_rmmod=0] [L7393] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={18446744073709551617:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, calloc(1UL, size)={18446744073709551617:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={18446744073709551617:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={18446744073709551617:0}, tmp___0=0, user_rmmod=0] [L10603] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={18446744073709551617:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10603] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L10604] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp___7={18446744073709551617:0}, user_rmmod=0] [L10605] COND FALSE !(! skb) [L10608] CALL ldv_set_add(LDV_SKBS, skb) [L10476] int i ; [L10478] i = 0 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={18446744073709551617:0}, e={18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10479] COND TRUE 1 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={18446744073709551617:0}, e={18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10480] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={18446744073709551617:0}, e={18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10490] COND TRUE last_index < 15 [L10491] set_impl[last_index] = e [L10492] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={18446744073709551617:0}, e={18446744073709551617:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10608] RET ldv_set_add(LDV_SKBS, skb) [L10609] return (skb); VAL [\old(last_index)=0, \result={18446744073709551617:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp___7={18446744073709551617:0}, user_rmmod=0] [L10457] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_skb_alloc()={18446744073709551617:0}, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=256, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10457] tmp = ldv_skb_alloc() [L10458] return (tmp); [L9192] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )rx_len) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, ldv_dev_alloc_skb_14((unsigned int )rx_len)={18446744073709551617:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9192] skb = ldv_dev_alloc_skb_14((unsigned int )rx_len) [L9193] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, user_rmmod=0] [L9197] CALL skb_put(skb, (unsigned int )rx_len) VAL [\old(arg1)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, arg0={18446744073709551617:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10857] EXPR arg0->data [L10857] EXPR arg0->tail [L10857] unsigned char *ret_val = arg0->data + arg0->tail; [L10858] EXPR arg0->tail [L10858] arg0->tail += arg1 [L10859] return ret_val; [L9197] RET skb_put(skb, (unsigned int )rx_len) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, skb_put(skb, (unsigned int )rx_len)={0:0}, tmp={0:891}, user_rmmod=0] [L9198] EXPR skb->data [L9198] EXPR skb->len [L9199] EXPR adapter->ioport VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, adapter->ioport=18446744073709551646, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, skb->data={0:0}, skb->len=0, tmp={0:891}, user_rmmod=0] [L9198-L9199] CALL, EXPR mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) VAL [\old(npayload)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={0:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={18446744073709551627:0}, user_rmmod=0] [L8505] int ret ; [L8506] u32 nb ; VAL [\old(ioport)=76, \old(npayload)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={0:0}, buffer={0:0}, card_reset_work={313:0}, ioport=76, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, npayload=0, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={18446744073709551627:0}, type={18446744073709551627:0}, user_rmmod=0] [L8508] COND TRUE (unsigned long )buffer == (unsigned long )((u8 *)0U) [L8509] adapter->dev [L8510] return (-1); VAL [\old(ioport)=76, \old(npayload)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={0:0}, buffer={0:0}, card_reset_work={313:0}, ioport=76, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, npayload=0, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={18446744073709551627:0}, type={18446744073709551627:0}, user_rmmod=0] [L9198-L9199] RET, EXPR mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, adapter->ioport=18446744073709551646, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U)=-1, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, skb->data={0:0}, skb->len=0, tmp={0:891}, user_rmmod=0] [L9198-L9199] tmp___0 = mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) [L9200] COND TRUE tmp___0 != 0 [L9201] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9203] CALL dev_kfree_skb_any(skb) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7486] FCALL __dev_kfree_skb_any(skb, 1) [L9203] RET dev_kfree_skb_any(skb) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9368] CALL, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7913] struct sdio_mmc_card *card ; [L7914] int ret ; [L7915] u8 val ; [L7917] EXPR adapter->card [L7917] card = (struct sdio_mmc_card *)adapter->card [L7918] ret = -1 [L7919] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551690:18446744073709551650}, card_reset_work={313:0}, data={18446744073709551630:0}, data={18446744073709551630:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={18446744073709551636:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7919] FCALL sdio_claim_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551690:18446744073709551650}, card_reset_work={313:0}, data={18446744073709551630:0}, data={18446744073709551630:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={18446744073709551636:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7920] EXPR card->func [L7920] CALL, EXPR sdio_readb(card->func, reg, & ret) [L10818] return __VERIFIER_nondet_uchar(); [L7920] RET, EXPR sdio_readb(card->func, reg, & ret) [L7920] val = sdio_readb(card->func, reg, & ret) [L7921] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551690:18446744073709551650}, card_reset_work={313:0}, data={18446744073709551630:0}, data={18446744073709551630:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={18446744073709551636:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=33] [L7921] FCALL sdio_release_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551690:18446744073709551650}, card_reset_work={313:0}, data={18446744073709551630:0}, data={18446744073709551630:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={18446744073709551636:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=33] [L7922] *data = val [L7923] EXPR \read(ret) [L7923] return (ret); [L7923] return (ret); [L9368] RET, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_read_reg(adapter, 0U, & cr)=-1, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9368] tmp___10 = mwifiex_read_reg(adapter, 0U, & cr) [L9369] COND TRUE tmp___10 != 0 [L9370] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] EXPR \read(cr) VAL [\read(cr)=18446744073709551649, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] CALL, EXPR mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7901] struct sdio_mmc_card *card ; [L7902] int ret ; [L7904] EXPR adapter->card [L7904] card = (struct sdio_mmc_card *)adapter->card [L7905] EXPR card->func VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551690:18446744073709551650}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7905] FCALL sdio_claim_host(card->func) VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551690:18446744073709551650}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] EXPR card->func VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551690:18446744073709551650}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] CALL, EXPR mwifiex_write_reg_locked(card->func, reg, (int )data) VAL [\old(data)=0, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, func={18446744073709551690:18446744073709551650}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7892] int ret ; [L7894] ret = -1 [L7895] FCALL sdio_writeb(func, (int )data, reg, & ret) [L7896] EXPR \read(ret) [L7896] return (ret); [L7896] return (ret); [L7906] RET, EXPR mwifiex_write_reg_locked(card->func, reg, (int )data) VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551690:18446744073709551650}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, mwifiex_write_reg_locked(card->func, reg, (int )data)=-1, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] ret = mwifiex_write_reg_locked(card->func, reg, (int )data) [L7907] EXPR card->func VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551675:18446744073709551702}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret=-1, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7907] FCALL sdio_release_host(card->func) VAL [\old(data)=-256, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551675:18446744073709551702}, card_reset_work={313:0}, data=-256, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret=-1, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7908] return (ret); [L9385] RET, EXPR mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) VAL [\read(cr)=18446744073709551649, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U))=-1, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] tmp___12 = mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) [L9386] COND TRUE tmp___12 != 0 [L9387] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, user_rmmod=0] [L9401] CALL, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7913] struct sdio_mmc_card *card ; [L7914] int ret ; [L7915] u8 val ; [L7917] EXPR adapter->card [L7917] card = (struct sdio_mmc_card *)adapter->card [L7918] ret = -1 [L7919] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551675:18446744073709551702}, card_reset_work={313:0}, data={18446744073709551630:0}, data={18446744073709551630:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={18446744073709551619:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7919] FCALL sdio_claim_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551675:18446744073709551702}, card_reset_work={313:0}, data={18446744073709551630:0}, data={18446744073709551630:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={18446744073709551619:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7920] EXPR card->func [L7920] CALL, EXPR sdio_readb(card->func, reg, & ret) [L10818] return __VERIFIER_nondet_uchar(); [L7920] RET, EXPR sdio_readb(card->func, reg, & ret) [L7920] val = sdio_readb(card->func, reg, & ret) [L7921] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551675:18446744073709551702}, card_reset_work={313:0}, data={18446744073709551630:0}, data={18446744073709551630:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={18446744073709551619:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=45] [L7921] FCALL sdio_release_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card->func={18446744073709551675:18446744073709551702}, card_reset_work={313:0}, data={18446744073709551630:0}, data={18446744073709551630:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={18446744073709551619:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=45] [L7922] *data = val [L7923] EXPR \read(ret) [L7923] return (ret); [L7923] return (ret); [L9401] RET, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_read_reg(adapter, 0U, & cr)=-1, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, user_rmmod=0] [L9401] tmp___14 = mwifiex_read_reg(adapter, 0U, & cr) [L9402] COND TRUE tmp___14 != 0 [L9403] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, cr={18446744073709551630:0}, descriptor={18446744073709551631:0}, descriptor___0={18446744073709551622:0}, descriptor___1={18446744073709551628:0}, descriptor___2={18446744073709551624:0}, descriptor___3={18446744073709551623:0}, descriptor___4={18446744073709551634:0}, descriptor___5={18446744073709551632:0}, descriptor___6={18446744073709551629:0}, descriptor___7={18446744073709551625:0}, descriptor___8={18446744073709551626:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={18446744073709551627:0}, port={18446744073709551633:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, tmp___14=-1, user_rmmod=0] [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); VAL [\result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={18446744073709551636:0}, card_reset_work={313:0}, flags=58, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg={18446744073709551708:18446744073709551685}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=127, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, tmp___14=-1, user_rmmod=0] [L10244] RET mwifiex_process_int_status(sdio_ops_group0) [L10245] ldv_state_variable_1 = 1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___8=8, tmp___9=1, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=1, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=0, user_rmmod=0] [L10317] COND TRUE ldv_state_variable_0 == 2 && ref_cnt == 0 [L10318] CALL mwifiex_sdio_cleanup_module() [L9985] int tmp ; [L9987] CALL, EXPR down_interruptible(& add_remove_card_sem) [L10712] return __VERIFIER_nondet_int(); [L9987] RET, EXPR down_interruptible(& add_remove_card_sem) [L9987] tmp = down_interruptible(& add_remove_card_sem) [L9988] COND FALSE !(tmp == 0) [L9992] user_rmmod = 1U [L9993] CALL cancel_work_sync(& card_reset_work) [L10700] return __VERIFIER_nondet_bool(); [L9993] RET cancel_work_sync(& card_reset_work) [L9994] FCALL sdio_unregister_driver(& mwifiex_sdio) [L10318] RET mwifiex_sdio_cleanup_module() [L10319] ldv_state_variable_0 = 3 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=61, ldvarg2={0:0}, ldvarg3=94, ldvarg4=49, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=61, tmp___0=49, tmp___1=94, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=0, user_rmmod=1] [L10407] CALL ldv_check_final_state() [L10667] int tmp___7 ; [L10669] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L10558] return (last_index == 0); [L10669] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L10669] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L10670] COND FALSE !(\read(tmp___7)) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp___7=0, user_rmmod=1] [L10672] CALL ldv_error() VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=1] [L7417] reach_error() VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={18446744073709551669:18446744073709551688}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 41 procedures, 750 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 367.2s, OverallIterations: 17, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.2s, AutomataDifference: 335.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 58 mSolverCounterUnknown, 13327 SdHoareTripleChecker+Valid, 328.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 12030 mSDsluCounter, 86113 SdHoareTripleChecker+Invalid, 314.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 72369 mSDsCounter, 1439 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 14663 IncrementalHoareTripleChecker+Invalid, 16160 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1439 mSolverCounterUnsat, 23681 mSDtfsCounter, 14663 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 996 GetRequests, 927 SyntacticMatches, 0 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=5518occurred in iteration=4, InterpolantAutomatonStates: 85, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 6.5s AutomataMinimizationTime, 16 MinimizatonAttempts, 49211 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.9s SsaConstructionTime, 12.5s SatisfiabilityAnalysisTime, 5.6s InterpolantComputationTime, 2774 NumberOfCodeBlocks, 2774 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 2572 ConstructedInterpolants, 0 QuantifiedInterpolants, 3343 SizeOfPredicates, 19 NumberOfNonLiveVariables, 16235 ConjunctsInSsa, 27 ConjunctsInUnsatCore, 19 InterpolantComputations, 16 PerfectInterpolantSequences, 2810/2819 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-23 02:04:46,301 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-11-23 02:04:46,323 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-64bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 02:04:48,542 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 02:04:48,546 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 02:04:48,600 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 02:04:48,601 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 02:04:48,606 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 02:04:48,608 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 02:04:48,613 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 02:04:48,617 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 02:04:48,627 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 02:04:48,629 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 02:04:48,631 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 02:04:48,631 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 02:04:48,635 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 02:04:48,638 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 02:04:48,643 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 02:04:48,645 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 02:04:48,646 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 02:04:48,649 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 02:04:48,656 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 02:04:48,659 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 02:04:48,660 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 02:04:48,663 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 02:04:48,665 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 02:04:48,671 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 02:04:48,671 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 02:04:48,672 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 02:04:48,674 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 02:04:48,674 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 02:04:48,676 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 02:04:48,676 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 02:04:48,681 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 02:04:48,683 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 02:04:48,684 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 02:04:48,686 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 02:04:48,686 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 02:04:48,687 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 02:04:48,687 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 02:04:48,688 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 02:04:48,690 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 02:04:48,690 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 02:04:48,696 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-64bit-Taipan_Bitvector.epf [2021-11-23 02:04:48,739 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 02:04:48,740 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 02:04:48,740 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 02:04:48,741 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 02:04:48,742 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 02:04:48,742 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 02:04:48,742 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 02:04:48,742 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 02:04:48,743 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 02:04:48,743 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 02:04:48,744 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 02:04:48,744 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 02:04:48,746 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 02:04:48,747 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 02:04:48,747 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 02:04:48,747 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 02:04:48,747 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 02:04:48,748 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-11-23 02:04:48,748 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-23 02:04:48,748 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-23 02:04:48,748 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 02:04:48,748 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 02:04:48,749 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 02:04:48,749 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 02:04:48,749 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-23 02:04:48,750 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 02:04:48,750 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 02:04:48,750 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 02:04:48,750 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 02:04:48,751 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 02:04:48,751 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2021-11-23 02:04:48,751 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-23 02:04:48,751 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 02:04:48,752 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 02:04:48,752 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 02:04:48,752 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 [2021-11-23 02:04:49,170 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 02:04:49,198 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 02:04:49,203 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 02:04:49,205 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 02:04:49,206 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 02:04:49,207 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-23 02:04:49,285 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/data/7f0e5603a/724218bf6ff94447a24571b3b35a7949/FLAG064b7ed67 [2021-11-23 02:04:50,299 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 02:04:50,300 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-23 02:04:50,343 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/data/7f0e5603a/724218bf6ff94447a24571b3b35a7949/FLAG064b7ed67 [2021-11-23 02:04:50,756 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/data/7f0e5603a/724218bf6ff94447a24571b3b35a7949 [2021-11-23 02:04:50,758 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 02:04:50,759 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 02:04:50,761 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 02:04:50,761 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 02:04:50,765 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 02:04:50,766 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:04:50" (1/1) ... [2021-11-23 02:04:50,767 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@555472b5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:50, skipping insertion in model container [2021-11-23 02:04:50,767 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:04:50" (1/1) ... [2021-11-23 02:04:50,784 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 02:04:50,966 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 02:04:51,998 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-11-23 02:04:53,152 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 02:04:53,207 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-11-23 02:04:53,296 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 02:04:53,558 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-11-23 02:04:53,885 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 02:04:53,914 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 02:04:54,097 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2021-11-23 02:04:54,338 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 02:04:54,566 INFO L208 MainTranslator]: Completed translation [2021-11-23 02:04:54,566 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54 WrapperNode [2021-11-23 02:04:54,567 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 02:04:54,568 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 02:04:54,568 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 02:04:54,568 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 02:04:54,576 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (1/1) ... [2021-11-23 02:04:54,694 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (1/1) ... [2021-11-23 02:04:54,895 INFO L137 Inliner]: procedures = 203, calls = 2240, calls flagged for inlining = 91, calls inlined = 86, statements flattened = 4723 [2021-11-23 02:04:54,896 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 02:04:54,897 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 02:04:54,897 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 02:04:54,898 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 02:04:54,906 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (1/1) ... [2021-11-23 02:04:54,907 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (1/1) ... [2021-11-23 02:04:54,956 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (1/1) ... [2021-11-23 02:04:54,969 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (1/1) ... [2021-11-23 02:04:55,132 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (1/1) ... [2021-11-23 02:04:55,168 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (1/1) ... [2021-11-23 02:04:55,200 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (1/1) ... [2021-11-23 02:04:55,226 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 02:04:55,227 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 02:04:55,228 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 02:04:55,228 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 02:04:55,229 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (1/1) ... [2021-11-23 02:04:55,235 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 02:04:55,247 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 02:04:55,258 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 02:04:55,263 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 02:04:55,306 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2021-11-23 02:04:55,306 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2021-11-23 02:04:55,306 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-23 02:04:55,306 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_host [2021-11-23 02:04:55,307 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_host [2021-11-23 02:04:55,355 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-23 02:04:55,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-23 02:04:55,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-23 02:04:55,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-23 02:04:55,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-23 02:04:55,356 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-23 02:04:55,356 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-23 02:04:55,356 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_card_to_host [2021-11-23 02:04:55,356 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_card_to_host [2021-11-23 02:04:55,356 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-23 02:04:55,357 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-23 02:04:55,357 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2021-11-23 02:04:55,357 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2021-11-23 02:04:55,357 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2021-11-23 02:04:55,357 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2021-11-23 02:04:55,357 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2021-11-23 02:04:55,357 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2021-11-23 02:04:55,357 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2021-11-23 02:04:55,357 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2021-11-23 02:04:55,358 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2021-11-23 02:04:55,358 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2021-11-23 02:04:55,358 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-23 02:04:55,358 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-23 02:04:55,358 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_data_sync [2021-11-23 02:04:55,358 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_data_sync [2021-11-23 02:04:55,358 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-23 02:04:55,358 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-23 02:04:55,358 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2021-11-23 02:04:55,358 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2021-11-23 02:04:55,359 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_disable_func [2021-11-23 02:04:55,359 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_disable_func [2021-11-23 02:04:55,359 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-23 02:04:55,359 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg_locked [2021-11-23 02:04:55,359 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg_locked [2021-11-23 02:04:55,359 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_cmdrsp_complete [2021-11-23 02:04:55,359 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_cmdrsp_complete [2021-11-23 02:04:55,359 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-23 02:04:55,359 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2021-11-23 02:04:55,359 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-11-23 02:04:55,360 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-11-23 02:04:55,360 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-23 02:04:55,360 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-23 02:04:55,360 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-23 02:04:55,360 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-23 02:04:55,360 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-23 02:04:55,360 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2021-11-23 02:04:55,360 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_set_drvdata [2021-11-23 02:04:55,360 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-23 02:04:55,360 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-23 02:04:55,361 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-23 02:04:55,361 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-23 02:04:55,361 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-11-23 02:04:55,361 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2021-11-23 02:04:55,361 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2021-11-23 02:04:55,361 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memmove [2021-11-23 02:04:55,361 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memmove [2021-11-23 02:04:55,361 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2021-11-23 02:04:55,361 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2021-11-23 02:04:55,362 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_host_to_card_mp_aggr [2021-11-23 02:04:55,362 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_host_to_card_mp_aggr [2021-11-23 02:04:55,362 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_resume [2021-11-23 02:04:55,362 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_resume [2021-11-23 02:04:55,362 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-23 02:04:55,362 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-23 02:04:55,362 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_decode_rx_packet [2021-11-23 02:04:55,362 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_decode_rx_packet [2021-11-23 02:04:55,362 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2021-11-23 02:04:55,362 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2021-11-23 02:04:55,363 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_to_card [2021-11-23 02:04:55,363 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_to_card [2021-11-23 02:04:55,363 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_get_host_pm_caps [2021-11-23 02:04:55,363 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_get_host_pm_caps [2021-11-23 02:04:55,363 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_sync [2021-11-23 02:04:55,363 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_sync [2021-11-23 02:04:55,363 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-23 02:04:55,363 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-23 02:04:55,363 INFO L130 BoogieDeclarations]: Found specification of procedure mp_tx_aggr_port_limit_reached [2021-11-23 02:04:55,363 INFO L138 BoogieDeclarations]: Found implementation of procedure mp_tx_aggr_port_limit_reached [2021-11-23 02:04:55,364 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2021-11-23 02:04:55,364 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2021-11-23 02:04:55,364 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-23 02:04:55,364 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-23 02:04:55,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-23 02:04:55,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-23 02:04:55,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-23 02:04:55,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-23 02:04:55,364 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-23 02:04:55,365 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-23 02:04:55,365 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-11-23 02:04:55,365 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-23 02:04:55,365 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2021-11-23 02:04:55,365 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2021-11-23 02:04:55,365 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 02:04:55,366 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_irq [2021-11-23 02:04:55,366 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_irq [2021-11-23 02:04:55,366 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-23 02:04:55,366 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-23 02:04:55,366 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-23 02:04:55,366 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_claim_host [2021-11-23 02:04:55,366 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_claim_host [2021-11-23 02:04:55,366 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-23 02:04:55,366 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2021-11-23 02:04:55,367 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2021-11-23 02:04:55,367 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2021-11-23 02:04:55,367 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2021-11-23 02:04:55,367 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-23 02:04:55,367 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2021-11-23 02:04:55,367 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 02:04:55,367 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 02:04:56,292 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 02:04:56,294 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 02:04:56,498 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-23 02:05:46,479 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 02:05:46,496 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 02:05:46,497 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-23 02:05:46,501 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:05:46 BoogieIcfgContainer [2021-11-23 02:05:46,501 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 02:05:46,503 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 02:05:46,503 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 02:05:46,506 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 02:05:46,506 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 02:04:50" (1/3) ... [2021-11-23 02:05:46,507 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1bb054cd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:05:46, skipping insertion in model container [2021-11-23 02:05:46,507 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:04:54" (2/3) ... [2021-11-23 02:05:46,508 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1bb054cd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:05:46, skipping insertion in model container [2021-11-23 02:05:46,508 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:05:46" (3/3) ... [2021-11-23 02:05:46,509 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2021-11-23 02:05:46,514 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 02:05:46,515 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 02:05:46,569 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 02:05:46,576 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 02:05:46,576 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 02:05:46,628 INFO L276 IsEmpty]: Start isEmpty. Operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) [2021-11-23 02:05:46,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-11-23 02:05:46,642 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:05:46,642 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:05:46,643 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:05:46,648 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:05:46,649 INFO L85 PathProgramCache]: Analyzing trace with hash -601957003, now seen corresponding path program 1 times [2021-11-23 02:05:46,669 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:05:46,669 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1158760107] [2021-11-23 02:05:46,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:05:46,670 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:05:46,671 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:05:46,677 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:05:46,716 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-23 02:05:47,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:05:47,802 INFO L263 TraceCheckSpWp]: Trace formula consists of 1181 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-23 02:05:47,809 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:05:48,133 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 02:05:48,133 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:05:48,398 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 02:05:48,399 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:05:48,399 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1158760107] [2021-11-23 02:05:48,400 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1158760107] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-23 02:05:48,400 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:05:48,400 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-23 02:05:48,402 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1778206053] [2021-11-23 02:05:48,403 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-23 02:05:48,407 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-23 02:05:48,407 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:05:48,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-23 02:05:48,435 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-23 02:05:48,440 INFO L87 Difference]: Start difference. First operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) Second operand has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-23 02:05:50,851 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.10s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:05:55,263 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:05:55,263 INFO L93 Difference]: Finished difference Result 4167 states and 6251 transitions. [2021-11-23 02:05:55,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-23 02:05:55,267 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2021-11-23 02:05:55,267 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:05:55,326 INFO L225 Difference]: With dead ends: 4167 [2021-11-23 02:05:55,326 INFO L226 Difference]: Without dead ends: 3078 [2021-11-23 02:05:55,342 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 90 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-23 02:05:55,349 INFO L933 BasicCegarLoop]: 2157 mSDtfsCounter, 3998 mSDsluCounter, 2700 mSDsCounter, 0 mSdLazyCounter, 386 mSolverCounterSat, 342 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3998 SdHoareTripleChecker+Valid, 4857 SdHoareTripleChecker+Invalid, 729 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 342 IncrementalHoareTripleChecker+Valid, 386 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.4s IncrementalHoareTripleChecker+Time [2021-11-23 02:05:55,352 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3998 Valid, 4857 Invalid, 729 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [342 Valid, 386 Invalid, 1 Unknown, 0 Unchecked, 6.4s Time] [2021-11-23 02:05:55,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3078 states. [2021-11-23 02:05:55,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3078 to 3078. [2021-11-23 02:05:55,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3078 states, 2423 states have (on average 1.4341725134131242) internal successors, (3475), 2438 states have internal predecessors, (3475), 540 states have call successors, (540), 115 states have call predecessors, (540), 114 states have return successors, (539), 536 states have call predecessors, (539), 539 states have call successors, (539) [2021-11-23 02:05:55,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3078 states to 3078 states and 4554 transitions. [2021-11-23 02:05:55,665 INFO L78 Accepts]: Start accepts. Automaton has 3078 states and 4554 transitions. Word has length 46 [2021-11-23 02:05:55,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:05:55,666 INFO L470 AbstractCegarLoop]: Abstraction has 3078 states and 4554 transitions. [2021-11-23 02:05:55,666 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-23 02:05:55,666 INFO L276 IsEmpty]: Start isEmpty. Operand 3078 states and 4554 transitions. [2021-11-23 02:05:55,674 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-11-23 02:05:55,675 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:05:55,675 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:05:55,712 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-23 02:05:55,898 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:05:55,898 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:05:55,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:05:55,899 INFO L85 PathProgramCache]: Analyzing trace with hash -1981556391, now seen corresponding path program 1 times [2021-11-23 02:05:55,900 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:05:55,901 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1869596312] [2021-11-23 02:05:55,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:05:55,901 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:05:55,901 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:05:55,907 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:05:55,949 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-23 02:05:57,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:05:57,385 INFO L263 TraceCheckSpWp]: Trace formula consists of 1250 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-23 02:05:57,389 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:05:57,824 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 02:05:57,824 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:05:58,250 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 02:05:58,250 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:05:58,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1869596312] [2021-11-23 02:05:58,250 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1869596312] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-23 02:05:58,250 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:05:58,250 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 7 [2021-11-23 02:05:58,250 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1114536361] [2021-11-23 02:05:58,251 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-23 02:05:58,252 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-23 02:05:58,252 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:05:58,252 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-23 02:05:58,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-11-23 02:05:58,253 INFO L87 Difference]: Start difference. First operand 3078 states and 4554 transitions. Second operand has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 7 states have internal predecessors, (31), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-23 02:05:59,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:05:59,054 INFO L93 Difference]: Finished difference Result 9207 states and 13646 transitions. [2021-11-23 02:05:59,055 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 02:05:59,055 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 7 states have internal predecessors, (31), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2021-11-23 02:05:59,056 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:05:59,107 INFO L225 Difference]: With dead ends: 9207 [2021-11-23 02:05:59,107 INFO L226 Difference]: Without dead ends: 6131 [2021-11-23 02:05:59,121 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=26, Invalid=46, Unknown=0, NotChecked=0, Total=72 [2021-11-23 02:05:59,122 INFO L933 BasicCegarLoop]: 1916 mSDtfsCounter, 1533 mSDsluCounter, 9198 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1533 SdHoareTripleChecker+Valid, 11114 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-23 02:05:59,122 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1533 Valid, 11114 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-23 02:05:59,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6131 states. [2021-11-23 02:05:59,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6131 to 6131. [2021-11-23 02:05:59,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6131 states, 4827 states have (on average 1.4346384918168635) internal successors, (6925), 4857 states have internal predecessors, (6925), 1075 states have call successors, (1075), 229 states have call predecessors, (1075), 228 states have return successors, (1083), 1068 states have call predecessors, (1083), 1074 states have call successors, (1083) [2021-11-23 02:05:59,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6131 states to 6131 states and 9083 transitions. [2021-11-23 02:05:59,566 INFO L78 Accepts]: Start accepts. Automaton has 6131 states and 9083 transitions. Word has length 46 [2021-11-23 02:05:59,566 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:05:59,567 INFO L470 AbstractCegarLoop]: Abstraction has 6131 states and 9083 transitions. [2021-11-23 02:05:59,568 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.428571428571429) internal successors, (31), 7 states have internal predecessors, (31), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-23 02:05:59,571 INFO L276 IsEmpty]: Start isEmpty. Operand 6131 states and 9083 transitions. [2021-11-23 02:05:59,590 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2021-11-23 02:05:59,590 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:05:59,592 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:05:59,631 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-11-23 02:05:59,813 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:05:59,813 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:05:59,814 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:05:59,814 INFO L85 PathProgramCache]: Analyzing trace with hash -642422905, now seen corresponding path program 1 times [2021-11-23 02:05:59,816 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:05:59,816 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1488224044] [2021-11-23 02:05:59,816 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:05:59,816 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:05:59,816 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:05:59,817 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:05:59,821 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-23 02:06:01,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:06:01,253 INFO L263 TraceCheckSpWp]: Trace formula consists of 1483 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-23 02:06:01,259 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:06:01,882 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-11-23 02:06:01,882 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:06:02,371 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2021-11-23 02:06:02,371 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:06:02,371 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1488224044] [2021-11-23 02:06:02,372 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1488224044] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-23 02:06:02,372 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:06:02,372 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-23 02:06:02,372 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1045789124] [2021-11-23 02:06:02,372 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-23 02:06:02,373 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 02:06:02,373 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:06:02,373 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 02:06:02,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 02:06:02,374 INFO L87 Difference]: Start difference. First operand 6131 states and 9083 transitions. Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-23 02:06:05,421 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:06:07,089 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.63s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:06:08,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:06:08,401 INFO L93 Difference]: Finished difference Result 11328 states and 16684 transitions. [2021-11-23 02:06:08,402 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 02:06:08,402 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 103 [2021-11-23 02:06:08,403 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:06:08,443 INFO L225 Difference]: With dead ends: 11328 [2021-11-23 02:06:08,443 INFO L226 Difference]: Without dead ends: 5209 [2021-11-23 02:06:08,465 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 203 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 02:06:08,470 INFO L933 BasicCegarLoop]: 1595 mSDtfsCounter, 338 mSDsluCounter, 1484 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 2 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 338 SdHoareTripleChecker+Valid, 3079 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.8s IncrementalHoareTripleChecker+Time [2021-11-23 02:06:08,471 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [338 Valid, 3079 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 53 Invalid, 1 Unknown, 0 Unchecked, 5.8s Time] [2021-11-23 02:06:08,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5209 states. [2021-11-23 02:06:08,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5209 to 5192. [2021-11-23 02:06:08,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5192 states, 4120 states have (on average 1.429126213592233) internal successors, (5888), 4142 states have internal predecessors, (5888), 851 states have call successors, (851), 221 states have call predecessors, (851), 220 states have return successors, (856), 844 states have call predecessors, (856), 850 states have call successors, (856) [2021-11-23 02:06:08,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5192 states to 5192 states and 7595 transitions. [2021-11-23 02:06:08,735 INFO L78 Accepts]: Start accepts. Automaton has 5192 states and 7595 transitions. Word has length 103 [2021-11-23 02:06:08,737 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:06:08,738 INFO L470 AbstractCegarLoop]: Abstraction has 5192 states and 7595 transitions. [2021-11-23 02:06:08,738 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-23 02:06:08,738 INFO L276 IsEmpty]: Start isEmpty. Operand 5192 states and 7595 transitions. [2021-11-23 02:06:08,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2021-11-23 02:06:08,759 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:06:08,759 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 9, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:06:08,805 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-23 02:06:08,973 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:06:08,973 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:06:08,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:06:08,974 INFO L85 PathProgramCache]: Analyzing trace with hash 96929181, now seen corresponding path program 1 times [2021-11-23 02:06:08,976 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:06:08,976 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [939093597] [2021-11-23 02:06:08,976 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:06:08,976 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:06:08,976 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:06:08,978 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:06:09,021 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-23 02:06:10,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:06:10,626 INFO L263 TraceCheckSpWp]: Trace formula consists of 1595 conjuncts, 9 conjunts are in the unsatisfiable core [2021-11-23 02:06:10,633 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:06:11,324 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-11-23 02:06:11,324 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:06:12,609 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-11-23 02:06:12,609 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:06:12,609 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [939093597] [2021-11-23 02:06:12,609 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [939093597] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-23 02:06:12,610 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:06:12,610 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-23 02:06:12,610 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [769328542] [2021-11-23 02:06:12,610 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-23 02:06:12,611 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-23 02:06:12,611 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:06:12,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-23 02:06:12,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 02:06:12,612 INFO L87 Difference]: Start difference. First operand 5192 states and 7595 transitions. Second operand has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-11-23 02:06:12,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:06:12,848 INFO L93 Difference]: Finished difference Result 10185 states and 14937 transitions. [2021-11-23 02:06:12,849 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 02:06:12,849 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) Word has length 144 [2021-11-23 02:06:12,850 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:06:12,886 INFO L225 Difference]: With dead ends: 10185 [2021-11-23 02:06:12,886 INFO L226 Difference]: Without dead ends: 5222 [2021-11-23 02:06:12,903 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 286 GetRequests, 283 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-23 02:06:12,906 INFO L933 BasicCegarLoop]: 1552 mSDtfsCounter, 2 mSDsluCounter, 4651 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 6203 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 02:06:12,907 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 6203 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 02:06:12,915 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5222 states. [2021-11-23 02:06:13,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5222 to 5212. [2021-11-23 02:06:13,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5212 states, 4134 states have (on average 1.4276729559748427) internal successors, (5902), 4158 states have internal predecessors, (5902), 851 states have call successors, (851), 221 states have call predecessors, (851), 226 states have return successors, (870), 848 states have call predecessors, (870), 850 states have call successors, (870) [2021-11-23 02:06:13,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5212 states to 5212 states and 7623 transitions. [2021-11-23 02:06:13,179 INFO L78 Accepts]: Start accepts. Automaton has 5212 states and 7623 transitions. Word has length 144 [2021-11-23 02:06:13,181 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:06:13,181 INFO L470 AbstractCegarLoop]: Abstraction has 5212 states and 7623 transitions. [2021-11-23 02:06:13,182 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2021-11-23 02:06:13,183 INFO L276 IsEmpty]: Start isEmpty. Operand 5212 states and 7623 transitions. [2021-11-23 02:06:13,195 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2021-11-23 02:06:13,195 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:06:13,195 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:06:13,239 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-23 02:06:13,417 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:06:13,417 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:06:13,418 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:06:13,418 INFO L85 PathProgramCache]: Analyzing trace with hash 36910958, now seen corresponding path program 1 times [2021-11-23 02:06:13,419 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:06:13,420 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [375000814] [2021-11-23 02:06:13,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:06:13,420 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:06:13,420 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:06:13,421 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:06:13,428 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-23 02:06:14,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:06:14,954 INFO L263 TraceCheckSpWp]: Trace formula consists of 1618 conjuncts, 24 conjunts are in the unsatisfiable core [2021-11-23 02:06:14,960 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:06:16,717 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-11-23 02:06:16,717 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:06:20,587 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2021-11-23 02:06:20,587 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:06:20,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [375000814] [2021-11-23 02:06:20,587 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [375000814] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-23 02:06:20,587 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:06:20,587 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13, 13] imperfect sequences [] total 14 [2021-11-23 02:06:20,588 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [466194762] [2021-11-23 02:06:20,588 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-23 02:06:20,588 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-23 02:06:20,588 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:06:20,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-23 02:06:20,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=155, Unknown=0, NotChecked=0, Total=182 [2021-11-23 02:06:20,589 INFO L87 Difference]: Start difference. First operand 5212 states and 7623 transitions. Second operand has 14 states, 14 states have (on average 7.0) internal successors, (98), 10 states have internal predecessors, (98), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) [2021-11-23 02:06:25,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:06:25,279 INFO L93 Difference]: Finished difference Result 12880 states and 19213 transitions. [2021-11-23 02:06:25,286 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-23 02:06:25,287 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 7.0) internal successors, (98), 10 states have internal predecessors, (98), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) Word has length 151 [2021-11-23 02:06:25,287 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:06:25,346 INFO L225 Difference]: With dead ends: 12880 [2021-11-23 02:06:25,346 INFO L226 Difference]: Without dead ends: 7897 [2021-11-23 02:06:25,364 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 304 GetRequests, 289 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=40, Invalid=232, Unknown=0, NotChecked=0, Total=272 [2021-11-23 02:06:25,365 INFO L933 BasicCegarLoop]: 2396 mSDtfsCounter, 817 mSDsluCounter, 22994 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 952 SdHoareTripleChecker+Valid, 25390 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2021-11-23 02:06:25,365 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [952 Valid, 25390 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2021-11-23 02:06:25,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7897 states. [2021-11-23 02:06:25,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7897 to 5236. [2021-11-23 02:06:25,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5236 states, 4152 states have (on average 1.4248554913294798) internal successors, (5916), 4174 states have internal predecessors, (5916), 851 states have call successors, (851), 221 states have call predecessors, (851), 232 states have return successors, (880), 856 states have call predecessors, (880), 850 states have call successors, (880) [2021-11-23 02:06:25,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5236 states to 5236 states and 7647 transitions. [2021-11-23 02:06:25,678 INFO L78 Accepts]: Start accepts. Automaton has 5236 states and 7647 transitions. Word has length 151 [2021-11-23 02:06:25,680 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:06:25,680 INFO L470 AbstractCegarLoop]: Abstraction has 5236 states and 7647 transitions. [2021-11-23 02:06:25,680 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 7.0) internal successors, (98), 10 states have internal predecessors, (98), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) [2021-11-23 02:06:25,680 INFO L276 IsEmpty]: Start isEmpty. Operand 5236 states and 7647 transitions. [2021-11-23 02:06:25,697 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-11-23 02:06:25,697 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:06:25,698 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:06:25,738 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-23 02:06:25,921 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:06:25,921 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:06:25,922 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:06:25,922 INFO L85 PathProgramCache]: Analyzing trace with hash 1511771000, now seen corresponding path program 1 times [2021-11-23 02:06:25,923 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:06:25,924 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [507066208] [2021-11-23 02:06:25,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:06:25,924 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:06:25,924 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:06:25,924 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:06:25,926 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-23 02:06:27,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:06:27,709 INFO L263 TraceCheckSpWp]: Trace formula consists of 1753 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-23 02:06:27,716 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:06:28,581 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 124 trivial. 0 not checked. [2021-11-23 02:06:28,581 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:06:29,677 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 9 proven. 6 refuted. 0 times theorem prover too weak. 159 trivial. 0 not checked. [2021-11-23 02:06:29,677 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:06:29,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [507066208] [2021-11-23 02:06:29,678 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [507066208] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-23 02:06:29,678 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 02:06:29,678 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 8 [2021-11-23 02:06:29,678 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1610839972] [2021-11-23 02:06:29,678 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:06:29,680 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 02:06:29,680 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:06:29,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 02:06:29,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-23 02:06:29,680 INFO L87 Difference]: Start difference. First operand 5236 states and 7647 transitions. Second operand has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-11-23 02:06:33,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:06:33,665 INFO L93 Difference]: Finished difference Result 12730 states and 18928 transitions. [2021-11-23 02:06:33,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 02:06:33,666 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2021-11-23 02:06:33,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:06:33,700 INFO L225 Difference]: With dead ends: 12730 [2021-11-23 02:06:33,701 INFO L226 Difference]: Without dead ends: 7723 [2021-11-23 02:06:33,717 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 379 GetRequests, 372 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-23 02:06:33,718 INFO L933 BasicCegarLoop]: 2259 mSDtfsCounter, 770 mSDsluCounter, 8118 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 897 SdHoareTripleChecker+Valid, 10377 SdHoareTripleChecker+Invalid, 330 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2021-11-23 02:06:33,718 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [897 Valid, 10377 Invalid, 330 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 3.6s Time] [2021-11-23 02:06:33,729 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7723 states. [2021-11-23 02:06:33,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7723 to 5236. [2021-11-23 02:06:33,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5236 states, 4152 states have (on average 1.4238921001926783) internal successors, (5912), 4174 states have internal predecessors, (5912), 851 states have call successors, (851), 221 states have call predecessors, (851), 232 states have return successors, (880), 856 states have call predecessors, (880), 850 states have call successors, (880) [2021-11-23 02:06:33,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5236 states to 5236 states and 7643 transitions. [2021-11-23 02:06:33,986 INFO L78 Accepts]: Start accepts. Automaton has 5236 states and 7643 transitions. Word has length 190 [2021-11-23 02:06:33,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:06:33,987 INFO L470 AbstractCegarLoop]: Abstraction has 5236 states and 7643 transitions. [2021-11-23 02:06:33,987 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-11-23 02:06:33,987 INFO L276 IsEmpty]: Start isEmpty. Operand 5236 states and 7643 transitions. [2021-11-23 02:06:34,001 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-11-23 02:06:34,002 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:06:34,002 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:06:34,052 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-11-23 02:06:34,229 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:06:34,229 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:06:34,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:06:34,230 INFO L85 PathProgramCache]: Analyzing trace with hash -1944162634, now seen corresponding path program 1 times [2021-11-23 02:06:34,231 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:06:34,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [797465362] [2021-11-23 02:06:34,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:06:34,231 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:06:34,232 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:06:34,232 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:06:34,233 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-23 02:06:35,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:06:36,025 INFO L263 TraceCheckSpWp]: Trace formula consists of 1753 conjuncts, 10 conjunts are in the unsatisfiable core [2021-11-23 02:06:36,030 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:06:36,863 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-11-23 02:06:36,863 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:06:37,883 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 11 proven. 4 refuted. 0 times theorem prover too weak. 159 trivial. 0 not checked. [2021-11-23 02:06:37,883 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:06:37,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [797465362] [2021-11-23 02:06:37,883 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [797465362] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-23 02:06:37,883 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 02:06:37,884 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 8 [2021-11-23 02:06:37,884 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288232843] [2021-11-23 02:06:37,884 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:06:37,884 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 02:06:37,884 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:06:37,884 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 02:06:37,885 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-23 02:06:37,885 INFO L87 Difference]: Start difference. First operand 5236 states and 7643 transitions. Second operand has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-11-23 02:06:42,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:06:42,178 INFO L93 Difference]: Finished difference Result 12734 states and 18924 transitions. [2021-11-23 02:06:42,179 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 02:06:42,179 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2021-11-23 02:06:42,179 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:06:42,214 INFO L225 Difference]: With dead ends: 12734 [2021-11-23 02:06:42,215 INFO L226 Difference]: Without dead ends: 7727 [2021-11-23 02:06:42,232 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 379 GetRequests, 372 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-23 02:06:42,233 INFO L933 BasicCegarLoop]: 2275 mSDtfsCounter, 762 mSDsluCounter, 8176 mSDsCounter, 0 mSdLazyCounter, 331 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 888 SdHoareTripleChecker+Valid, 10451 SdHoareTripleChecker+Invalid, 331 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 331 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.0s IncrementalHoareTripleChecker+Time [2021-11-23 02:06:42,233 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [888 Valid, 10451 Invalid, 331 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 331 Invalid, 0 Unknown, 0 Unchecked, 4.0s Time] [2021-11-23 02:06:42,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7727 states. [2021-11-23 02:06:42,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7727 to 5236. [2021-11-23 02:06:42,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5236 states, 4152 states have (on average 1.4229287090558767) internal successors, (5908), 4174 states have internal predecessors, (5908), 851 states have call successors, (851), 221 states have call predecessors, (851), 232 states have return successors, (880), 856 states have call predecessors, (880), 850 states have call successors, (880) [2021-11-23 02:06:42,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5236 states to 5236 states and 7639 transitions. [2021-11-23 02:06:42,529 INFO L78 Accepts]: Start accepts. Automaton has 5236 states and 7639 transitions. Word has length 190 [2021-11-23 02:06:42,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:06:42,529 INFO L470 AbstractCegarLoop]: Abstraction has 5236 states and 7639 transitions. [2021-11-23 02:06:42,530 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-11-23 02:06:42,530 INFO L276 IsEmpty]: Start isEmpty. Operand 5236 states and 7639 transitions. [2021-11-23 02:06:42,549 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-11-23 02:06:42,550 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:06:42,550 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:06:42,600 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-23 02:06:42,777 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:06:42,777 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:06:42,778 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:06:42,778 INFO L85 PathProgramCache]: Analyzing trace with hash 1858178488, now seen corresponding path program 1 times [2021-11-23 02:06:42,780 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:06:42,780 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1865475068] [2021-11-23 02:06:42,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:06:42,781 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:06:42,781 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:06:42,782 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:06:42,786 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-11-23 02:06:44,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:06:44,668 INFO L263 TraceCheckSpWp]: Trace formula consists of 1753 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-23 02:06:44,674 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:06:45,492 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 54 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-11-23 02:06:45,493 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:06:46,513 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 13 proven. 2 refuted. 0 times theorem prover too weak. 159 trivial. 0 not checked. [2021-11-23 02:06:46,513 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:06:46,514 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1865475068] [2021-11-23 02:06:46,514 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1865475068] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-23 02:06:46,514 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 02:06:46,514 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 8 [2021-11-23 02:06:46,514 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [416566112] [2021-11-23 02:06:46,514 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:06:46,515 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 02:06:46,515 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:06:46,516 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 02:06:46,516 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-23 02:06:46,516 INFO L87 Difference]: Start difference. First operand 5236 states and 7639 transitions. Second operand has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-11-23 02:06:49,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:06:49,850 INFO L93 Difference]: Finished difference Result 12950 states and 19266 transitions. [2021-11-23 02:06:49,851 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 02:06:49,851 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2021-11-23 02:06:49,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:06:49,884 INFO L225 Difference]: With dead ends: 12950 [2021-11-23 02:06:49,884 INFO L226 Difference]: Without dead ends: 7943 [2021-11-23 02:06:49,900 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 379 GetRequests, 372 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-23 02:06:49,901 INFO L933 BasicCegarLoop]: 2354 mSDtfsCounter, 818 mSDsluCounter, 8425 mSDsCounter, 0 mSdLazyCounter, 350 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 955 SdHoareTripleChecker+Valid, 10779 SdHoareTripleChecker+Invalid, 350 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 350 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2021-11-23 02:06:49,901 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [955 Valid, 10779 Invalid, 350 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 350 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2021-11-23 02:06:49,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7943 states. [2021-11-23 02:06:50,168 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7943 to 5236. [2021-11-23 02:06:50,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5236 states, 4152 states have (on average 1.4219653179190752) internal successors, (5904), 4174 states have internal predecessors, (5904), 851 states have call successors, (851), 221 states have call predecessors, (851), 232 states have return successors, (880), 856 states have call predecessors, (880), 850 states have call successors, (880) [2021-11-23 02:06:50,190 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5236 states to 5236 states and 7635 transitions. [2021-11-23 02:06:50,191 INFO L78 Accepts]: Start accepts. Automaton has 5236 states and 7635 transitions. Word has length 190 [2021-11-23 02:06:50,192 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:06:50,192 INFO L470 AbstractCegarLoop]: Abstraction has 5236 states and 7635 transitions. [2021-11-23 02:06:50,192 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2021-11-23 02:06:50,192 INFO L276 IsEmpty]: Start isEmpty. Operand 5236 states and 7635 transitions. [2021-11-23 02:06:50,205 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2021-11-23 02:06:50,205 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:06:50,206 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:06:50,253 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2021-11-23 02:06:50,421 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:06:50,421 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:06:50,422 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:06:50,422 INFO L85 PathProgramCache]: Analyzing trace with hash -1757516554, now seen corresponding path program 1 times [2021-11-23 02:06:50,423 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:06:50,423 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1109653726] [2021-11-23 02:06:50,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:06:50,423 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:06:50,424 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:06:50,424 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:06:50,427 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-11-23 02:06:52,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:06:52,323 INFO L263 TraceCheckSpWp]: Trace formula consists of 1753 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-23 02:06:52,328 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:06:53,003 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 124 trivial. 0 not checked. [2021-11-23 02:06:53,003 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:06:53,531 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 165 trivial. 0 not checked. [2021-11-23 02:06:53,531 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:06:53,531 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1109653726] [2021-11-23 02:06:53,531 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1109653726] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-23 02:06:53,531 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:06:53,532 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2021-11-23 02:06:53,532 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [737711205] [2021-11-23 02:06:53,532 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-23 02:06:53,532 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 02:06:53,533 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:06:53,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 02:06:53,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-23 02:06:53,533 INFO L87 Difference]: Start difference. First operand 5236 states and 7635 transitions. Second operand has 6 states, 6 states have (on average 24.0) internal successors, (144), 6 states have internal predecessors, (144), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-23 02:06:58,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:06:58,319 INFO L93 Difference]: Finished difference Result 17792 states and 26942 transitions. [2021-11-23 02:06:58,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-23 02:06:58,320 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 24.0) internal successors, (144), 6 states have internal predecessors, (144), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 190 [2021-11-23 02:06:58,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:06:58,366 INFO L225 Difference]: With dead ends: 17792 [2021-11-23 02:06:58,366 INFO L226 Difference]: Without dead ends: 12785 [2021-11-23 02:06:58,376 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 380 GetRequests, 375 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-23 02:06:58,379 INFO L933 BasicCegarLoop]: 2605 mSDtfsCounter, 2902 mSDsluCounter, 7597 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 288 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3109 SdHoareTripleChecker+Valid, 10202 SdHoareTripleChecker+Invalid, 402 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 288 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.3s IncrementalHoareTripleChecker+Time [2021-11-23 02:06:58,379 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3109 Valid, 10202 Invalid, 402 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [288 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 4.3s Time] [2021-11-23 02:06:58,393 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12785 states. [2021-11-23 02:06:58,812 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12785 to 5244. [2021-11-23 02:06:58,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5244 states, 4160 states have (on average 1.4211538461538462) internal successors, (5912), 4182 states have internal predecessors, (5912), 851 states have call successors, (851), 221 states have call predecessors, (851), 232 states have return successors, (880), 856 states have call predecessors, (880), 850 states have call successors, (880) [2021-11-23 02:06:58,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5244 states to 5244 states and 7643 transitions. [2021-11-23 02:06:58,835 INFO L78 Accepts]: Start accepts. Automaton has 5244 states and 7643 transitions. Word has length 190 [2021-11-23 02:06:58,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:06:58,835 INFO L470 AbstractCegarLoop]: Abstraction has 5244 states and 7643 transitions. [2021-11-23 02:06:58,836 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 24.0) internal successors, (144), 6 states have internal predecessors, (144), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-23 02:06:58,836 INFO L276 IsEmpty]: Start isEmpty. Operand 5244 states and 7643 transitions. [2021-11-23 02:06:58,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-11-23 02:06:58,851 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:06:58,851 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:06:58,894 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-11-23 02:06:59,065 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:06:59,065 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:06:59,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:06:59,066 INFO L85 PathProgramCache]: Analyzing trace with hash 632306147, now seen corresponding path program 1 times [2021-11-23 02:06:59,067 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:06:59,067 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [556262571] [2021-11-23 02:06:59,067 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:06:59,067 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:06:59,068 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:06:59,068 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:06:59,069 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-11-23 02:07:01,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:07:01,119 INFO L263 TraceCheckSpWp]: Trace formula consists of 1782 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-23 02:07:01,123 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:07:01,764 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 59 proven. 0 refuted. 0 times theorem prover too weak. 127 trivial. 0 not checked. [2021-11-23 02:07:01,764 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:07:02,300 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 177 trivial. 0 not checked. [2021-11-23 02:07:02,301 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:07:02,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [556262571] [2021-11-23 02:07:02,301 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [556262571] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-23 02:07:02,301 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:07:02,301 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-23 02:07:02,302 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [551182765] [2021-11-23 02:07:02,302 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-23 02:07:02,302 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 02:07:02,302 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:07:02,303 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 02:07:02,303 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 02:07:02,303 INFO L87 Difference]: Start difference. First operand 5244 states and 7643 transitions. Second operand has 3 states, 3 states have (on average 49.0) internal successors, (147), 3 states have internal predecessors, (147), 2 states have call successors, (27), 2 states have call predecessors, (27), 2 states have return successors, (26), 2 states have call predecessors, (26), 2 states have call successors, (26) [2021-11-23 02:07:04,675 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 02:07:04,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:07:04,743 INFO L93 Difference]: Finished difference Result 10263 states and 14978 transitions. [2021-11-23 02:07:04,761 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 02:07:04,761 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 49.0) internal successors, (147), 3 states have internal predecessors, (147), 2 states have call successors, (27), 2 states have call predecessors, (27), 2 states have return successors, (26), 2 states have call predecessors, (26), 2 states have call successors, (26) Word has length 200 [2021-11-23 02:07:04,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:07:04,779 INFO L225 Difference]: With dead ends: 10263 [2021-11-23 02:07:04,780 INFO L226 Difference]: Without dead ends: 5248 [2021-11-23 02:07:04,790 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 398 GetRequests, 397 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 02:07:04,790 INFO L933 BasicCegarLoop]: 1550 mSDtfsCounter, 0 mSDsluCounter, 1545 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 3095 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2021-11-23 02:07:04,791 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 3095 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 1 Unknown, 0 Unchecked, 2.3s Time] [2021-11-23 02:07:04,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5248 states. [2021-11-23 02:07:05,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5248 to 5248. [2021-11-23 02:07:05,052 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5248 states, 4164 states have (on average 1.420749279538905) internal successors, (5916), 4186 states have internal predecessors, (5916), 851 states have call successors, (851), 221 states have call predecessors, (851), 232 states have return successors, (880), 856 states have call predecessors, (880), 850 states have call successors, (880) [2021-11-23 02:07:05,066 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5248 states to 5248 states and 7647 transitions. [2021-11-23 02:07:05,068 INFO L78 Accepts]: Start accepts. Automaton has 5248 states and 7647 transitions. Word has length 200 [2021-11-23 02:07:05,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:07:05,068 INFO L470 AbstractCegarLoop]: Abstraction has 5248 states and 7647 transitions. [2021-11-23 02:07:05,069 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 49.0) internal successors, (147), 3 states have internal predecessors, (147), 2 states have call successors, (27), 2 states have call predecessors, (27), 2 states have return successors, (26), 2 states have call predecessors, (26), 2 states have call successors, (26) [2021-11-23 02:07:05,069 INFO L276 IsEmpty]: Start isEmpty. Operand 5248 states and 7647 transitions. [2021-11-23 02:07:05,082 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-11-23 02:07:05,082 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:07:05,083 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:07:05,128 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-11-23 02:07:05,297 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:07:05,297 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:07:05,298 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:07:05,298 INFO L85 PathProgramCache]: Analyzing trace with hash 1848459873, now seen corresponding path program 1 times [2021-11-23 02:07:05,300 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:07:05,300 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1305845699] [2021-11-23 02:07:05,300 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:07:05,300 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:07:05,300 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:07:05,302 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:07:05,341 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-11-23 02:07:07,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:07:07,313 INFO L263 TraceCheckSpWp]: Trace formula consists of 1784 conjuncts, 10 conjunts are in the unsatisfiable core [2021-11-23 02:07:07,317 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:07:08,124 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 59 proven. 0 refuted. 0 times theorem prover too weak. 127 trivial. 0 not checked. [2021-11-23 02:07:08,124 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:07:09,089 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 169 trivial. 0 not checked. [2021-11-23 02:07:09,089 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:07:09,089 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1305845699] [2021-11-23 02:07:09,089 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1305845699] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-23 02:07:09,089 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-23 02:07:09,090 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 8 [2021-11-23 02:07:09,090 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [493174514] [2021-11-23 02:07:09,090 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 02:07:09,090 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-23 02:07:09,090 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:07:09,091 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-23 02:07:09,091 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-23 02:07:09,091 INFO L87 Difference]: Start difference. First operand 5248 states and 7647 transitions. Second operand has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2021-11-23 02:07:12,958 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:07:12,958 INFO L93 Difference]: Finished difference Result 13470 states and 20068 transitions. [2021-11-23 02:07:12,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 02:07:12,959 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) Word has length 200 [2021-11-23 02:07:12,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:07:12,989 INFO L225 Difference]: With dead ends: 13470 [2021-11-23 02:07:12,990 INFO L226 Difference]: Without dead ends: 8451 [2021-11-23 02:07:13,002 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 399 GetRequests, 392 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-11-23 02:07:13,002 INFO L933 BasicCegarLoop]: 2429 mSDtfsCounter, 794 mSDsluCounter, 8837 mSDsCounter, 0 mSdLazyCounter, 415 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 929 SdHoareTripleChecker+Valid, 11266 SdHoareTripleChecker+Invalid, 415 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 415 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2021-11-23 02:07:13,003 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [929 Valid, 11266 Invalid, 415 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 415 Invalid, 0 Unknown, 0 Unchecked, 3.5s Time] [2021-11-23 02:07:13,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8451 states. [2021-11-23 02:07:13,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8451 to 5248. [2021-11-23 02:07:13,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5248 states, 4164 states have (on average 1.4197886647454372) internal successors, (5912), 4186 states have internal predecessors, (5912), 851 states have call successors, (851), 221 states have call predecessors, (851), 232 states have return successors, (880), 856 states have call predecessors, (880), 850 states have call successors, (880) [2021-11-23 02:07:13,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5248 states to 5248 states and 7643 transitions. [2021-11-23 02:07:13,434 INFO L78 Accepts]: Start accepts. Automaton has 5248 states and 7643 transitions. Word has length 200 [2021-11-23 02:07:13,434 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:07:13,435 INFO L470 AbstractCegarLoop]: Abstraction has 5248 states and 7643 transitions. [2021-11-23 02:07:13,435 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2021-11-23 02:07:13,435 INFO L276 IsEmpty]: Start isEmpty. Operand 5248 states and 7643 transitions. [2021-11-23 02:07:13,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-11-23 02:07:13,450 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:07:13,450 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:07:13,497 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-11-23 02:07:13,672 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:07:13,673 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:07:13,673 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:07:13,673 INFO L85 PathProgramCache]: Analyzing trace with hash 2050283807, now seen corresponding path program 1 times [2021-11-23 02:07:13,675 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:07:13,676 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2074546932] [2021-11-23 02:07:13,676 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:07:13,676 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:07:13,676 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:07:13,677 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:07:13,716 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-11-23 02:07:15,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:07:15,974 INFO L263 TraceCheckSpWp]: Trace formula consists of 1784 conjuncts, 10 conjunts are in the unsatisfiable core [2021-11-23 02:07:15,979 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:07:16,732 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-23 02:07:16,733 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:07:17,701 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 169 trivial. 0 not checked. [2021-11-23 02:07:17,701 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:07:17,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2074546932] [2021-11-23 02:07:17,702 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2074546932] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-23 02:07:17,702 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:07:17,702 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 8 [2021-11-23 02:07:17,702 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [571221388] [2021-11-23 02:07:17,702 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-23 02:07:17,705 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 02:07:17,705 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:07:17,706 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 02:07:17,706 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-23 02:07:17,706 INFO L87 Difference]: Start difference. First operand 5248 states and 7643 transitions. Second operand has 8 states, 6 states have (on average 25.0) internal successors, (150), 7 states have internal predecessors, (150), 4 states have call successors, (26), 2 states have call predecessors, (26), 4 states have return successors, (25), 3 states have call predecessors, (25), 4 states have call successors, (25) [2021-11-23 02:07:21,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:07:21,815 INFO L93 Difference]: Finished difference Result 12886 states and 19112 transitions. [2021-11-23 02:07:21,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-23 02:07:21,817 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 25.0) internal successors, (150), 7 states have internal predecessors, (150), 4 states have call successors, (26), 2 states have call predecessors, (26), 4 states have return successors, (25), 3 states have call predecessors, (25), 4 states have call successors, (25) Word has length 200 [2021-11-23 02:07:21,817 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:07:21,840 INFO L225 Difference]: With dead ends: 12886 [2021-11-23 02:07:21,840 INFO L226 Difference]: Without dead ends: 7867 [2021-11-23 02:07:21,852 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 401 GetRequests, 392 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=33, Invalid=77, Unknown=0, NotChecked=0, Total=110 [2021-11-23 02:07:21,853 INFO L933 BasicCegarLoop]: 2310 mSDtfsCounter, 757 mSDsluCounter, 10560 mSDsCounter, 0 mSdLazyCounter, 363 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 882 SdHoareTripleChecker+Valid, 12870 SdHoareTripleChecker+Invalid, 494 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 363 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 127 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2021-11-23 02:07:21,853 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [882 Valid, 12870 Invalid, 494 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 363 Invalid, 0 Unknown, 127 Unchecked, 3.5s Time] [2021-11-23 02:07:21,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7867 states. [2021-11-23 02:07:22,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7867 to 5248. [2021-11-23 02:07:22,201 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5248 states, 4164 states have (on average 1.4188280499519692) internal successors, (5908), 4186 states have internal predecessors, (5908), 851 states have call successors, (851), 221 states have call predecessors, (851), 232 states have return successors, (880), 856 states have call predecessors, (880), 850 states have call successors, (880) [2021-11-23 02:07:22,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5248 states to 5248 states and 7639 transitions. [2021-11-23 02:07:22,217 INFO L78 Accepts]: Start accepts. Automaton has 5248 states and 7639 transitions. Word has length 200 [2021-11-23 02:07:22,218 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:07:22,218 INFO L470 AbstractCegarLoop]: Abstraction has 5248 states and 7639 transitions. [2021-11-23 02:07:22,218 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 25.0) internal successors, (150), 7 states have internal predecessors, (150), 4 states have call successors, (26), 2 states have call predecessors, (26), 4 states have return successors, (25), 3 states have call predecessors, (25), 4 states have call successors, (25) [2021-11-23 02:07:22,219 INFO L276 IsEmpty]: Start isEmpty. Operand 5248 states and 7639 transitions. [2021-11-23 02:07:22,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2021-11-23 02:07:22,232 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:07:22,232 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:07:22,279 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-11-23 02:07:22,445 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:07:22,445 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:07:22,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:07:22,446 INFO L85 PathProgramCache]: Analyzing trace with hash 21697697, now seen corresponding path program 1 times [2021-11-23 02:07:22,482 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:07:22,482 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [359889332] [2021-11-23 02:07:22,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:07:22,482 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:07:22,483 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:07:22,484 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:07:22,489 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-11-23 02:07:24,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:07:24,776 INFO L263 TraceCheckSpWp]: Trace formula consists of 1784 conjuncts, 24 conjunts are in the unsatisfiable core [2021-11-23 02:07:24,782 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:07:26,658 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 161 trivial. 0 not checked. [2021-11-23 02:07:26,658 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:07:30,212 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 161 trivial. 0 not checked. [2021-11-23 02:07:30,212 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:07:30,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [359889332] [2021-11-23 02:07:30,212 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [359889332] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-23 02:07:30,212 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:07:30,212 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13, 13] imperfect sequences [] total 14 [2021-11-23 02:07:30,213 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [847609961] [2021-11-23 02:07:30,213 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-23 02:07:30,213 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-11-23 02:07:30,213 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:07:30,214 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-11-23 02:07:30,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=155, Unknown=0, NotChecked=0, Total=182 [2021-11-23 02:07:30,214 INFO L87 Difference]: Start difference. First operand 5248 states and 7639 transitions. Second operand has 14 states, 14 states have (on average 9.214285714285714) internal successors, (129), 10 states have internal predecessors, (129), 2 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 1 states have call successors, (20) [2021-11-23 02:07:34,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:07:34,671 INFO L93 Difference]: Finished difference Result 12952 states and 19205 transitions. [2021-11-23 02:07:34,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-11-23 02:07:34,678 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 9.214285714285714) internal successors, (129), 10 states have internal predecessors, (129), 2 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 1 states have call successors, (20) Word has length 200 [2021-11-23 02:07:34,683 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:07:34,701 INFO L225 Difference]: With dead ends: 12952 [2021-11-23 02:07:34,701 INFO L226 Difference]: Without dead ends: 7933 [2021-11-23 02:07:34,710 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 403 GetRequests, 387 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=44, Invalid=262, Unknown=0, NotChecked=0, Total=306 [2021-11-23 02:07:34,712 INFO L933 BasicCegarLoop]: 2385 mSDtfsCounter, 811 mSDsluCounter, 27655 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 946 SdHoareTripleChecker+Valid, 30040 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2021-11-23 02:07:34,712 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [946 Valid, 30040 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 3.5s Time] [2021-11-23 02:07:34,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7933 states. [2021-11-23 02:07:35,051 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7933 to 5256. [2021-11-23 02:07:35,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5256 states, 4172 states have (on average 1.4180249280920423) internal successors, (5916), 4190 states have internal predecessors, (5916), 851 states have call successors, (851), 221 states have call predecessors, (851), 232 states have return successors, (880), 860 states have call predecessors, (880), 850 states have call successors, (880) [2021-11-23 02:07:35,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5256 states to 5256 states and 7647 transitions. [2021-11-23 02:07:35,073 INFO L78 Accepts]: Start accepts. Automaton has 5256 states and 7647 transitions. Word has length 200 [2021-11-23 02:07:35,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:07:35,074 INFO L470 AbstractCegarLoop]: Abstraction has 5256 states and 7647 transitions. [2021-11-23 02:07:35,074 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 9.214285714285714) internal successors, (129), 10 states have internal predecessors, (129), 2 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 1 states have call successors, (20) [2021-11-23 02:07:35,074 INFO L276 IsEmpty]: Start isEmpty. Operand 5256 states and 7647 transitions. [2021-11-23 02:07:35,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 203 [2021-11-23 02:07:35,088 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:07:35,088 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:07:35,140 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-11-23 02:07:35,309 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:07:35,309 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:07:35,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:07:35,310 INFO L85 PathProgramCache]: Analyzing trace with hash -1602293502, now seen corresponding path program 1 times [2021-11-23 02:07:35,311 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:07:35,311 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1736785469] [2021-11-23 02:07:35,311 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:07:35,311 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:07:35,312 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:07:35,312 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:07:35,315 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-11-23 02:07:36,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 02:07:36,885 INFO L263 TraceCheckSpWp]: Trace formula consists of 1790 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-23 02:07:36,888 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-23 02:07:37,541 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2021-11-23 02:07:37,541 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-23 02:07:38,391 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2021-11-23 02:07:38,391 INFO L139 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2021-11-23 02:07:38,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1736785469] [2021-11-23 02:07:38,391 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1736785469] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-23 02:07:38,391 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-23 02:07:38,392 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2021-11-23 02:07:38,392 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1800576104] [2021-11-23 02:07:38,392 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-23 02:07:38,392 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 02:07:38,392 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2021-11-23 02:07:38,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 02:07:38,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-23 02:07:38,393 INFO L87 Difference]: Start difference. First operand 5256 states and 7647 transitions. Second operand has 8 states, 8 states have (on average 19.5) internal successors, (156), 6 states have internal predecessors, (156), 2 states have call successors, (26), 2 states have call predecessors, (26), 4 states have return successors, (26), 4 states have call predecessors, (26), 2 states have call successors, (26) [2021-11-23 02:07:41,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 02:07:41,634 INFO L93 Difference]: Finished difference Result 15277 states and 22910 transitions. [2021-11-23 02:07:41,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-23 02:07:41,635 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 19.5) internal successors, (156), 6 states have internal predecessors, (156), 2 states have call successors, (26), 2 states have call predecessors, (26), 4 states have return successors, (26), 4 states have call predecessors, (26), 2 states have call successors, (26) Word has length 202 [2021-11-23 02:07:41,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 02:07:41,654 INFO L225 Difference]: With dead ends: 15277 [2021-11-23 02:07:41,654 INFO L226 Difference]: Without dead ends: 10250 [2021-11-23 02:07:41,663 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 402 GetRequests, 396 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-23 02:07:41,663 INFO L933 BasicCegarLoop]: 2404 mSDtfsCounter, 1742 mSDsluCounter, 11823 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 104 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1944 SdHoareTripleChecker+Valid, 14227 SdHoareTripleChecker+Invalid, 226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 104 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2021-11-23 02:07:41,664 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1944 Valid, 14227 Invalid, 226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [104 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2021-11-23 02:07:41,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10250 states. [2021-11-23 02:07:42,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10250 to 5272. [2021-11-23 02:07:42,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5272 states, 4184 states have (on average 1.4168260038240919) internal successors, (5928), 4202 states have internal predecessors, (5928), 851 states have call successors, (851), 221 states have call predecessors, (851), 236 states have return successors, (888), 864 states have call predecessors, (888), 850 states have call successors, (888) [2021-11-23 02:07:42,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5272 states to 5272 states and 7667 transitions. [2021-11-23 02:07:42,135 INFO L78 Accepts]: Start accepts. Automaton has 5272 states and 7667 transitions. Word has length 202 [2021-11-23 02:07:42,136 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 02:07:42,136 INFO L470 AbstractCegarLoop]: Abstraction has 5272 states and 7667 transitions. [2021-11-23 02:07:42,136 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 19.5) internal successors, (156), 6 states have internal predecessors, (156), 2 states have call successors, (26), 2 states have call predecessors, (26), 4 states have return successors, (26), 4 states have call predecessors, (26), 2 states have call successors, (26) [2021-11-23 02:07:42,136 INFO L276 IsEmpty]: Start isEmpty. Operand 5272 states and 7667 transitions. [2021-11-23 02:07:42,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 227 [2021-11-23 02:07:42,152 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 02:07:42,152 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 02:07:42,198 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-11-23 02:07:42,365 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 [2021-11-23 02:07:42,365 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 02:07:42,366 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 02:07:42,366 INFO L85 PathProgramCache]: Analyzing trace with hash 1917943735, now seen corresponding path program 1 times [2021-11-23 02:07:42,368 INFO L121 FreeRefinementEngine]: Executing refinement strategy WALRUS [2021-11-23 02:07:42,368 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1753586981] [2021-11-23 02:07:42,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 02:07:42,368 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-23 02:07:42,368 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat [2021-11-23 02:07:42,370 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-23 02:07:42,410 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de2c81e6-224d-4703-b326-9e26b32e2e0f/bin/utaipan-EQgc7hIp5V/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process