./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-064368f-1-111_1a-drivers--media--radio--si4713-i2c.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aef121e0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-064368f-1-111_1a-drivers--media--radio--si4713-i2c.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 56ff1aa7a746f87b9c1b788d1f6729b885abef13666f4b3b25250b45ff5a6786 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-aef121e [2021-11-23 03:33:34,881 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 03:33:34,884 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 03:33:34,952 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 03:33:34,953 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 03:33:34,960 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 03:33:34,964 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 03:33:34,970 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 03:33:34,973 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 03:33:34,983 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 03:33:34,984 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 03:33:34,987 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 03:33:34,987 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 03:33:34,991 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 03:33:34,994 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 03:33:35,001 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 03:33:35,005 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 03:33:35,006 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 03:33:35,009 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 03:33:35,012 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 03:33:35,014 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 03:33:35,020 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 03:33:35,024 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 03:33:35,025 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 03:33:35,037 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 03:33:35,038 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 03:33:35,038 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 03:33:35,041 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 03:33:35,041 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 03:33:35,042 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 03:33:35,043 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 03:33:35,044 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 03:33:35,045 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 03:33:35,046 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 03:33:35,048 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 03:33:35,048 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 03:33:35,049 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 03:33:35,049 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 03:33:35,049 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 03:33:35,050 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 03:33:35,051 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 03:33:35,052 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/config/svcomp-Reach-64bit-Taipan_Default.epf [2021-11-23 03:33:35,107 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 03:33:35,107 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 03:33:35,108 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 03:33:35,108 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 03:33:35,109 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-23 03:33:35,110 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-23 03:33:35,110 INFO L138 SettingsManager]: * User list type=DISABLED [2021-11-23 03:33:35,110 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2021-11-23 03:33:35,110 INFO L138 SettingsManager]: * Explicit value domain=true [2021-11-23 03:33:35,110 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2021-11-23 03:33:35,112 INFO L138 SettingsManager]: * Octagon Domain=false [2021-11-23 03:33:35,112 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2021-11-23 03:33:35,112 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2021-11-23 03:33:35,113 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2021-11-23 03:33:35,113 INFO L138 SettingsManager]: * Interval Domain=false [2021-11-23 03:33:35,113 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2021-11-23 03:33:35,113 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2021-11-23 03:33:35,114 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2021-11-23 03:33:35,114 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 03:33:35,115 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 03:33:35,115 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 03:33:35,115 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 03:33:35,115 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 03:33:35,115 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 03:33:35,116 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 03:33:35,116 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 03:33:35,116 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 03:33:35,116 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 03:33:35,117 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 03:33:35,117 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:33:35,117 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 03:33:35,118 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 03:33:35,118 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 03:33:35,118 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2021-11-23 03:33:35,118 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 03:33:35,118 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 03:33:35,119 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 03:33:35,119 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-23 03:33:35,119 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 56ff1aa7a746f87b9c1b788d1f6729b885abef13666f4b3b25250b45ff5a6786 [2021-11-23 03:33:35,406 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 03:33:35,433 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 03:33:35,437 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 03:33:35,439 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 03:33:35,440 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 03:33:35,441 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-064368f-1-111_1a-drivers--media--radio--si4713-i2c.ko-entry_point.cil.out.i [2021-11-23 03:33:35,555 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/data/769448c15/da698461eb4246e88e4575fc2136aeb5/FLAG66f6aad06 [2021-11-23 03:33:36,358 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 03:33:36,359 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-064368f-1-111_1a-drivers--media--radio--si4713-i2c.ko-entry_point.cil.out.i [2021-11-23 03:33:36,411 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/data/769448c15/da698461eb4246e88e4575fc2136aeb5/FLAG66f6aad06 [2021-11-23 03:33:36,878 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/data/769448c15/da698461eb4246e88e4575fc2136aeb5 [2021-11-23 03:33:36,881 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 03:33:36,883 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 03:33:36,898 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 03:33:36,898 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 03:33:36,902 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 03:33:36,903 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:33:36" (1/1) ... [2021-11-23 03:33:36,904 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3b5b1bd4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:36, skipping insertion in model container [2021-11-23 03:33:36,904 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:33:36" (1/1) ... [2021-11-23 03:33:36,912 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 03:33:37,008 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 03:33:37,741 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-064368f-1-111_1a-drivers--media--radio--si4713-i2c.ko-entry_point.cil.out.i[115668,115681] [2021-11-23 03:33:38,406 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:33:38,428 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 03:33:38,513 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-064368f-1-111_1a-drivers--media--radio--si4713-i2c.ko-entry_point.cil.out.i[115668,115681] [2021-11-23 03:33:38,690 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 03:33:38,796 INFO L208 MainTranslator]: Completed translation [2021-11-23 03:33:38,796 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38 WrapperNode [2021-11-23 03:33:38,796 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 03:33:38,797 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 03:33:38,797 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 03:33:38,798 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 03:33:38,806 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (1/1) ... [2021-11-23 03:33:38,887 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (1/1) ... [2021-11-23 03:33:39,064 INFO L137 Inliner]: procedures = 160, calls = 1221, calls flagged for inlining = 70, calls inlined = 70, statements flattened = 3023 [2021-11-23 03:33:39,065 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 03:33:39,066 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 03:33:39,066 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 03:33:39,067 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 03:33:39,075 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (1/1) ... [2021-11-23 03:33:39,075 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (1/1) ... [2021-11-23 03:33:39,115 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (1/1) ... [2021-11-23 03:33:39,115 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (1/1) ... [2021-11-23 03:33:39,245 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (1/1) ... [2021-11-23 03:33:39,281 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (1/1) ... [2021-11-23 03:33:39,317 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (1/1) ... [2021-11-23 03:33:39,343 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 03:33:39,345 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 03:33:39,346 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 03:33:39,346 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 03:33:39,347 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (1/1) ... [2021-11-23 03:33:39,355 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 03:33:39,366 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/z3 [2021-11-23 03:33:39,383 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 03:33:39,406 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 03:33:39,431 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_set_rds_radio_text [2021-11-23 03:33:39,432 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_set_rds_radio_text [2021-11-23 03:33:39,432 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-23 03:33:39,432 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-23 03:33:39,432 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-23 03:33:39,432 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-23 03:33:39,433 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-23 03:33:39,433 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-23 03:33:39,433 INFO L130 BoogieDeclarations]: Found specification of procedure gpio_is_valid [2021-11-23 03:33:39,433 INFO L138 BoogieDeclarations]: Found implementation of procedure gpio_is_valid [2021-11-23 03:33:39,433 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_wait_stc [2021-11-23 03:33:39,433 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_wait_stc [2021-11-23 03:33:39,434 INFO L130 BoogieDeclarations]: Found specification of procedure dev_to_usecs [2021-11-23 03:33:39,434 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_to_usecs [2021-11-23 03:33:39,434 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_set_mute [2021-11-23 03:33:39,434 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_set_mute [2021-11-23 03:33:39,434 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-23 03:33:39,434 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-23 03:33:39,434 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-11-23 03:33:39,435 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-11-23 03:33:39,435 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-23 03:33:39,435 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-23 03:33:39,435 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_set_power_state [2021-11-23 03:33:39,435 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_set_power_state [2021-11-23 03:33:39,435 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_choose_econtrol_action [2021-11-23 03:33:39,436 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_choose_econtrol_action [2021-11-23 03:33:39,436 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_len [2021-11-23 03:33:39,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_len [2021-11-23 03:33:39,436 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-23 03:33:39,436 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-23 03:33:39,436 INFO L130 BoogieDeclarations]: Found specification of procedure free_irq [2021-11-23 03:33:39,437 INFO L138 BoogieDeclarations]: Found implementation of procedure free_irq [2021-11-23 03:33:39,437 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_write_econtrol_tune [2021-11-23 03:33:39,437 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_write_econtrol_tune [2021-11-23 03:33:39,437 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-23 03:33:39,437 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-11-23 03:33:39,437 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-11-23 03:33:39,438 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2021-11-23 03:33:39,438 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2021-11-23 03:33:39,438 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-23 03:33:39,438 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-23 03:33:39,439 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_irq_1 [2021-11-23 03:33:39,439 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_irq_1 [2021-11-23 03:33:39,439 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__copy_from_user_1 [2021-11-23 03:33:39,439 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__copy_from_user_1 [2021-11-23 03:33:39,439 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-23 03:33:39,439 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-23 03:33:39,440 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_strlen [2021-11-23 03:33:39,440 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_strlen [2021-11-23 03:33:39,441 INFO L130 BoogieDeclarations]: Found specification of procedure gpio_set_value [2021-11-23 03:33:39,441 INFO L138 BoogieDeclarations]: Found implementation of procedure gpio_set_value [2021-11-23 03:33:39,442 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_tx_rds_buff [2021-11-23 03:33:39,442 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_tx_rds_buff [2021-11-23 03:33:39,443 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-23 03:33:39,443 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-23 03:33:39,443 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-23 03:33:39,444 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_ctrl_query_fill [2021-11-23 03:33:39,444 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_ctrl_query_fill [2021-11-23 03:33:39,444 INFO L130 BoogieDeclarations]: Found specification of procedure validate_range [2021-11-23 03:33:39,444 INFO L138 BoogieDeclarations]: Found implementation of procedure validate_range [2021-11-23 03:33:39,445 INFO L130 BoogieDeclarations]: Found specification of procedure regulator_bulk_free [2021-11-23 03:33:39,445 INFO L138 BoogieDeclarations]: Found implementation of procedure regulator_bulk_free [2021-11-23 03:33:39,445 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_write_econtrol_integers [2021-11-23 03:33:39,445 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_write_econtrol_integers [2021-11-23 03:33:39,445 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 03:33:39,445 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-23 03:33:39,446 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-23 03:33:39,446 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-23 03:33:39,446 INFO L130 BoogieDeclarations]: Found specification of procedure regulator_bulk_disable [2021-11-23 03:33:39,446 INFO L138 BoogieDeclarations]: Found implementation of procedure regulator_bulk_disable [2021-11-23 03:33:39,446 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-23 03:33:39,446 INFO L130 BoogieDeclarations]: Found specification of procedure gpio_free [2021-11-23 03:33:39,446 INFO L138 BoogieDeclarations]: Found implementation of procedure gpio_free [2021-11-23 03:33:39,447 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2021-11-23 03:33:39,447 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2021-11-23 03:33:39,447 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_send_command [2021-11-23 03:33:39,447 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_send_command [2021-11-23 03:33:39,448 INFO L130 BoogieDeclarations]: Found specification of procedure v4l2_get_subdevdata [2021-11-23 03:33:39,448 INFO L138 BoogieDeclarations]: Found implementation of procedure v4l2_get_subdevdata [2021-11-23 03:33:39,448 INFO L130 BoogieDeclarations]: Found specification of procedure usecs_to_jiffies [2021-11-23 03:33:39,449 INFO L138 BoogieDeclarations]: Found implementation of procedure usecs_to_jiffies [2021-11-23 03:33:39,449 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_write_property [2021-11-23 03:33:39,449 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_write_property [2021-11-23 03:33:39,449 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-23 03:33:39,450 INFO L130 BoogieDeclarations]: Found specification of procedure strlcpy [2021-11-23 03:33:39,450 INFO L138 BoogieDeclarations]: Found implementation of procedure strlcpy [2021-11-23 03:33:39,450 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-23 03:33:39,450 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-23 03:33:39,450 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_read_property [2021-11-23 03:33:39,451 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_read_property [2021-11-23 03:33:39,451 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2021-11-23 03:33:39,452 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2021-11-23 03:33:39,452 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_s_frequency [2021-11-23 03:33:39,453 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_s_frequency [2021-11-23 03:33:39,453 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_copy_from_user_7 [2021-11-23 03:33:39,453 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_copy_from_user_7 [2021-11-23 03:33:39,453 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-11-23 03:33:39,453 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-11-23 03:33:39,454 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-11-23 03:33:39,454 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-11-23 03:33:39,454 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 03:33:39,454 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_tx_tune_status [2021-11-23 03:33:39,454 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_tx_tune_status [2021-11-23 03:33:39,454 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_ret_val [2021-11-23 03:33:39,455 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_ret_val [2021-11-23 03:33:39,455 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_update_tune_status [2021-11-23 03:33:39,455 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_update_tune_status [2021-11-23 03:33:39,455 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_set_rds_ps_name [2021-11-23 03:33:39,456 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_set_rds_ps_name [2021-11-23 03:33:39,456 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_queryctrl [2021-11-23 03:33:39,456 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_queryctrl [2021-11-23 03:33:39,457 INFO L130 BoogieDeclarations]: Found specification of procedure si4713_s_modulator [2021-11-23 03:33:39,460 INFO L138 BoogieDeclarations]: Found implementation of procedure si4713_s_modulator [2021-11-23 03:33:39,460 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-23 03:33:39,460 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-23 03:33:39,460 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-23 03:33:39,461 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-11-23 03:33:39,462 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 03:33:39,462 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 03:33:40,200 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 03:33:40,206 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 03:33:40,525 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-23 03:33:45,595 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 03:33:46,681 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 03:33:46,681 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-23 03:33:46,688 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:33:46 BoogieIcfgContainer [2021-11-23 03:33:46,688 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 03:33:46,690 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 03:33:46,690 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 03:33:46,694 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 03:33:46,695 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:33:36" (1/3) ... [2021-11-23 03:33:46,696 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1b90f8d9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:33:46, skipping insertion in model container [2021-11-23 03:33:46,696 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:33:38" (2/3) ... [2021-11-23 03:33:46,697 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1b90f8d9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:33:46, skipping insertion in model container [2021-11-23 03:33:46,697 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:33:46" (3/3) ... [2021-11-23 03:33:46,700 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-064368f-1-111_1a-drivers--media--radio--si4713-i2c.ko-entry_point.cil.out.i [2021-11-23 03:33:46,713 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 03:33:46,714 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-23 03:33:46,788 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 03:33:46,802 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 03:33:46,803 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-23 03:33:46,855 INFO L276 IsEmpty]: Start isEmpty. Operand has 808 states, 539 states have (on average 1.4063079777365493) internal successors, (758), 555 states have internal predecessors, (758), 217 states have call successors, (217), 51 states have call predecessors, (217), 50 states have return successors, (210), 210 states have call predecessors, (210), 210 states have call successors, (210) [2021-11-23 03:33:46,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-11-23 03:33:46,887 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:46,888 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:46,889 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:46,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:46,895 INFO L85 PathProgramCache]: Analyzing trace with hash 1673497856, now seen corresponding path program 1 times [2021-11-23 03:33:46,905 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:46,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1914984509] [2021-11-23 03:33:46,906 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:46,907 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:47,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:47,509 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-23 03:33:47,509 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:47,510 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1914984509] [2021-11-23 03:33:47,510 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1914984509] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:47,511 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:33:47,511 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 03:33:47,512 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1145296209] [2021-11-23 03:33:47,513 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:47,518 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 03:33:47,518 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:47,574 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 03:33:47,590 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:33:47,595 INFO L87 Difference]: Start difference. First operand has 808 states, 539 states have (on average 1.4063079777365493) internal successors, (758), 555 states have internal predecessors, (758), 217 states have call successors, (217), 51 states have call predecessors, (217), 50 states have return successors, (210), 210 states have call predecessors, (210), 210 states have call successors, (210) Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-23 03:33:50,159 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:33:50,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:33:50,840 INFO L93 Difference]: Finished difference Result 1941 states and 2839 transitions. [2021-11-23 03:33:50,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 03:33:50,843 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 51 [2021-11-23 03:33:50,844 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:33:50,868 INFO L225 Difference]: With dead ends: 1941 [2021-11-23 03:33:50,869 INFO L226 Difference]: Without dead ends: 1120 [2021-11-23 03:33:50,885 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 03:33:50,889 INFO L933 BasicCegarLoop]: 1142 mSDtfsCounter, 474 mSDsluCounter, 1151 mSDsCounter, 0 mSdLazyCounter, 248 mSolverCounterSat, 2 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 474 SdHoareTripleChecker+Valid, 2181 SdHoareTripleChecker+Invalid, 251 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 248 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2021-11-23 03:33:50,890 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [474 Valid, 2181 Invalid, 251 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 248 Invalid, 1 Unknown, 0 Unchecked, 3.1s Time] [2021-11-23 03:33:50,908 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1120 states. [2021-11-23 03:33:51,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1120 to 1119. [2021-11-23 03:33:51,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1119 states, 755 states have (on average 1.3827814569536423) internal successors, (1044), 767 states have internal predecessors, (1044), 286 states have call successors, (286), 78 states have call predecessors, (286), 77 states have return successors, (285), 284 states have call predecessors, (285), 285 states have call successors, (285) [2021-11-23 03:33:51,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1119 states to 1119 states and 1615 transitions. [2021-11-23 03:33:51,045 INFO L78 Accepts]: Start accepts. Automaton has 1119 states and 1615 transitions. Word has length 51 [2021-11-23 03:33:51,046 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:33:51,046 INFO L470 AbstractCegarLoop]: Abstraction has 1119 states and 1615 transitions. [2021-11-23 03:33:51,046 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-23 03:33:51,047 INFO L276 IsEmpty]: Start isEmpty. Operand 1119 states and 1615 transitions. [2021-11-23 03:33:51,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2021-11-23 03:33:51,057 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:33:51,057 INFO L514 BasicCegarLoop]: trace histogram [10, 10, 10, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:33:51,057 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 03:33:51,058 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:33:51,058 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:33:51,058 INFO L85 PathProgramCache]: Analyzing trace with hash -1742376969, now seen corresponding path program 1 times [2021-11-23 03:33:51,059 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:33:51,059 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [511945454] [2021-11-23 03:33:51,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:33:51,059 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:33:51,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:33:51,580 INFO L134 CoverageAnalysis]: Checked inductivity of 182 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 182 trivial. 0 not checked. [2021-11-23 03:33:51,580 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:33:51,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [511945454] [2021-11-23 03:33:51,581 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [511945454] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:33:51,581 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:33:51,581 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-23 03:33:51,581 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [518903624] [2021-11-23 03:33:51,581 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:33:51,583 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-23 03:33:51,583 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:33:51,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-23 03:33:51,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-11-23 03:33:51,584 INFO L87 Difference]: Start difference. First operand 1119 states and 1615 transitions. Second operand has 8 states, 6 states have (on average 8.0) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 03:33:56,404 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:01,580 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:04,464 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.88s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:07,487 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:08,682 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.19s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:09,738 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:11,208 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.47s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:14,947 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:15,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:34:15,189 INFO L93 Difference]: Finished difference Result 2562 states and 3766 transitions. [2021-11-23 03:34:15,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-23 03:34:15,192 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 8.0) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 103 [2021-11-23 03:34:15,193 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:34:15,209 INFO L225 Difference]: With dead ends: 2562 [2021-11-23 03:34:15,209 INFO L226 Difference]: Without dead ends: 1450 [2021-11-23 03:34:15,216 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2021-11-23 03:34:15,217 INFO L933 BasicCegarLoop]: 1312 mSDtfsCounter, 257 mSDsluCounter, 5919 mSDsCounter, 0 mSdLazyCounter, 1983 mSolverCounterSat, 16 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 22.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 295 SdHoareTripleChecker+Valid, 6744 SdHoareTripleChecker+Invalid, 2004 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 1983 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 23.3s IncrementalHoareTripleChecker+Time [2021-11-23 03:34:15,218 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [295 Valid, 6744 Invalid, 2004 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [16 Valid, 1983 Invalid, 5 Unknown, 0 Unchecked, 23.3s Time] [2021-11-23 03:34:15,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1450 states. [2021-11-23 03:34:15,338 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1450 to 1124. [2021-11-23 03:34:15,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1124 states, 759 states have (on average 1.3820816864295125) internal successors, (1049), 771 states have internal predecessors, (1049), 286 states have call successors, (286), 78 states have call predecessors, (286), 78 states have return successors, (288), 285 states have call predecessors, (288), 285 states have call successors, (288) [2021-11-23 03:34:15,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1124 states to 1124 states and 1623 transitions. [2021-11-23 03:34:15,355 INFO L78 Accepts]: Start accepts. Automaton has 1124 states and 1623 transitions. Word has length 103 [2021-11-23 03:34:15,359 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:34:15,359 INFO L470 AbstractCegarLoop]: Abstraction has 1124 states and 1623 transitions. [2021-11-23 03:34:15,360 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 8.0) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 03:34:15,360 INFO L276 IsEmpty]: Start isEmpty. Operand 1124 states and 1623 transitions. [2021-11-23 03:34:15,368 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2021-11-23 03:34:15,373 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:34:15,374 INFO L514 BasicCegarLoop]: trace histogram [10, 10, 10, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:34:15,374 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 03:34:15,374 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:34:15,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:34:15,376 INFO L85 PathProgramCache]: Analyzing trace with hash 762029701, now seen corresponding path program 1 times [2021-11-23 03:34:15,376 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:34:15,376 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2133271831] [2021-11-23 03:34:15,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:34:15,378 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:34:15,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:34:16,095 INFO L134 CoverageAnalysis]: Checked inductivity of 182 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 182 trivial. 0 not checked. [2021-11-23 03:34:16,095 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:34:16,095 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2133271831] [2021-11-23 03:34:16,096 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2133271831] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:34:16,096 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:34:16,096 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-23 03:34:16,096 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1342164244] [2021-11-23 03:34:16,096 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:34:16,097 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-23 03:34:16,097 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:34:16,098 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-23 03:34:16,098 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2021-11-23 03:34:16,098 INFO L87 Difference]: Start difference. First operand 1124 states and 1623 transitions. Second operand has 9 states, 7 states have (on average 7.0) internal successors, (49), 9 states have internal predecessors, (49), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 03:34:21,849 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:28,408 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:30,517 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.11s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:32,635 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.12s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:35,664 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.59s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:37,695 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:38,985 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.29s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:41,017 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:45,349 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:45,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:34:45,607 INFO L93 Difference]: Finished difference Result 2572 states and 3783 transitions. [2021-11-23 03:34:45,608 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-23 03:34:45,609 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 7.0) internal successors, (49), 9 states have internal predecessors, (49), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 104 [2021-11-23 03:34:45,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:34:45,625 INFO L225 Difference]: With dead ends: 2572 [2021-11-23 03:34:45,625 INFO L226 Difference]: Without dead ends: 1455 [2021-11-23 03:34:45,633 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=38, Invalid=118, Unknown=0, NotChecked=0, Total=156 [2021-11-23 03:34:45,635 INFO L933 BasicCegarLoop]: 1268 mSDtfsCounter, 358 mSDsluCounter, 6635 mSDsCounter, 0 mSdLazyCounter, 2656 mSolverCounterSat, 128 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 27.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 396 SdHoareTripleChecker+Valid, 7330 SdHoareTripleChecker+Invalid, 2791 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 128 IncrementalHoareTripleChecker+Valid, 2656 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 29.0s IncrementalHoareTripleChecker+Time [2021-11-23 03:34:45,635 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [396 Valid, 7330 Invalid, 2791 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [128 Valid, 2656 Invalid, 7 Unknown, 0 Unchecked, 29.0s Time] [2021-11-23 03:34:45,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1455 states. [2021-11-23 03:34:45,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1455 to 1124. [2021-11-23 03:34:45,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1124 states, 759 states have (on average 1.3820816864295125) internal successors, (1049), 771 states have internal predecessors, (1049), 286 states have call successors, (286), 78 states have call predecessors, (286), 78 states have return successors, (288), 285 states have call predecessors, (288), 285 states have call successors, (288) [2021-11-23 03:34:45,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1124 states to 1124 states and 1623 transitions. [2021-11-23 03:34:45,721 INFO L78 Accepts]: Start accepts. Automaton has 1124 states and 1623 transitions. Word has length 104 [2021-11-23 03:34:45,722 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:34:45,722 INFO L470 AbstractCegarLoop]: Abstraction has 1124 states and 1623 transitions. [2021-11-23 03:34:45,723 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 7.0) internal successors, (49), 9 states have internal predecessors, (49), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 03:34:45,723 INFO L276 IsEmpty]: Start isEmpty. Operand 1124 states and 1623 transitions. [2021-11-23 03:34:45,729 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2021-11-23 03:34:45,730 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:34:45,730 INFO L514 BasicCegarLoop]: trace histogram [10, 10, 10, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:34:45,730 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 03:34:45,731 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:34:45,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:34:45,732 INFO L85 PathProgramCache]: Analyzing trace with hash -301847313, now seen corresponding path program 1 times [2021-11-23 03:34:45,732 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:34:45,732 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1286278925] [2021-11-23 03:34:45,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:34:45,733 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:34:45,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:34:46,305 INFO L134 CoverageAnalysis]: Checked inductivity of 182 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 182 trivial. 0 not checked. [2021-11-23 03:34:46,305 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:34:46,305 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1286278925] [2021-11-23 03:34:46,305 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1286278925] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:34:46,306 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:34:46,306 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-23 03:34:46,306 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [417952500] [2021-11-23 03:34:46,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:34:46,307 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-23 03:34:46,307 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:34:46,307 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-23 03:34:46,308 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2021-11-23 03:34:46,308 INFO L87 Difference]: Start difference. First operand 1124 states and 1623 transitions. Second operand has 9 states, 7 states have (on average 7.0) internal successors, (49), 9 states have internal predecessors, (49), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 03:34:52,025 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:34:59,837 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:02,785 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:04,902 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.12s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:09,065 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.79s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:11,101 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:12,571 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.47s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:14,599 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:18,227 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.67s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:20,259 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:21,738 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.48s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:24,217 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:24,499 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:35:24,499 INFO L93 Difference]: Finished difference Result 3368 states and 5076 transitions. [2021-11-23 03:35:24,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-11-23 03:35:24,502 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 7.0) internal successors, (49), 9 states have internal predecessors, (49), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 104 [2021-11-23 03:35:24,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:35:24,528 INFO L225 Difference]: With dead ends: 3368 [2021-11-23 03:35:24,528 INFO L226 Difference]: Without dead ends: 2251 [2021-11-23 03:35:24,537 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=41, Invalid=115, Unknown=0, NotChecked=0, Total=156 [2021-11-23 03:35:24,538 INFO L933 BasicCegarLoop]: 1996 mSDtfsCounter, 658 mSDsluCounter, 10408 mSDsCounter, 0 mSdLazyCounter, 3129 mSolverCounterSat, 102 mSolverCounterUnsat, 8 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 35.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 792 SdHoareTripleChecker+Valid, 11623 SdHoareTripleChecker+Invalid, 3239 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 3129 IncrementalHoareTripleChecker+Invalid, 8 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 37.7s IncrementalHoareTripleChecker+Time [2021-11-23 03:35:24,539 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [792 Valid, 11623 Invalid, 3239 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [102 Valid, 3129 Invalid, 8 Unknown, 0 Unchecked, 37.7s Time] [2021-11-23 03:35:24,545 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2251 states. [2021-11-23 03:35:24,645 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2251 to 1130. [2021-11-23 03:35:24,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1130 states, 764 states have (on average 1.380890052356021) internal successors, (1055), 776 states have internal predecessors, (1055), 286 states have call successors, (286), 78 states have call predecessors, (286), 79 states have return successors, (291), 286 states have call predecessors, (291), 285 states have call successors, (291) [2021-11-23 03:35:24,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1130 states to 1130 states and 1632 transitions. [2021-11-23 03:35:24,662 INFO L78 Accepts]: Start accepts. Automaton has 1130 states and 1632 transitions. Word has length 104 [2021-11-23 03:35:24,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:35:24,663 INFO L470 AbstractCegarLoop]: Abstraction has 1130 states and 1632 transitions. [2021-11-23 03:35:24,663 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 7.0) internal successors, (49), 9 states have internal predecessors, (49), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 03:35:24,663 INFO L276 IsEmpty]: Start isEmpty. Operand 1130 states and 1632 transitions. [2021-11-23 03:35:24,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2021-11-23 03:35:24,670 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:35:24,670 INFO L514 BasicCegarLoop]: trace histogram [10, 10, 10, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:35:24,670 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-23 03:35:24,671 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:35:24,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:35:24,672 INFO L85 PathProgramCache]: Analyzing trace with hash 25348129, now seen corresponding path program 1 times [2021-11-23 03:35:24,672 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:35:24,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [496867445] [2021-11-23 03:35:24,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:35:24,673 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:35:24,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 03:35:25,393 INFO L134 CoverageAnalysis]: Checked inductivity of 182 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 182 trivial. 0 not checked. [2021-11-23 03:35:25,393 INFO L139 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2021-11-23 03:35:25,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [496867445] [2021-11-23 03:35:25,394 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [496867445] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 03:35:25,394 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 03:35:25,394 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-23 03:35:25,394 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1730849027] [2021-11-23 03:35:25,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 03:35:25,395 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-23 03:35:25,395 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2021-11-23 03:35:25,396 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-23 03:35:25,396 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-11-23 03:35:25,396 INFO L87 Difference]: Start difference. First operand 1130 states and 1632 transitions. Second operand has 10 states, 8 states have (on average 6.25) internal successors, (50), 10 states have internal predecessors, (50), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 03:35:31,858 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:40,727 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:42,840 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.11s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:44,949 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.11s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:47,057 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.11s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:49,174 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.12s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:54,606 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:56,097 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.49s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:57,773 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.67s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:35:59,161 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.39s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:36:01,192 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:36:05,215 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.71s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:36:06,540 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.32s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:36:08,570 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:36:10,072 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.50s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:36:12,633 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-23 03:36:12,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 03:36:12,906 INFO L93 Difference]: Finished difference Result 3396 states and 5126 transitions. [2021-11-23 03:36:12,908 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-23 03:36:12,908 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 6.25) internal successors, (50), 10 states have internal predecessors, (50), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 105 [2021-11-23 03:36:12,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 03:36:12,934 INFO L225 Difference]: With dead ends: 3396 [2021-11-23 03:36:12,935 INFO L226 Difference]: Without dead ends: 2273 [2021-11-23 03:36:12,942 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=54, Invalid=186, Unknown=0, NotChecked=0, Total=240 [2021-11-23 03:36:12,944 INFO L933 BasicCegarLoop]: 1953 mSDtfsCounter, 765 mSDsluCounter, 11676 mSDsCounter, 0 mSdLazyCounter, 3987 mSolverCounterSat, 242 mSolverCounterUnsat, 10 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 44.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 899 SdHoareTripleChecker+Valid, 12740 SdHoareTripleChecker+Invalid, 4239 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 242 IncrementalHoareTripleChecker+Valid, 3987 IncrementalHoareTripleChecker+Invalid, 10 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 46.9s IncrementalHoareTripleChecker+Time [2021-11-23 03:36:12,944 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [899 Valid, 12740 Invalid, 4239 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [242 Valid, 3987 Invalid, 10 Unknown, 0 Unchecked, 46.9s Time] [2021-11-23 03:36:12,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2273 states. [2021-11-23 03:36:13,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2273 to 1135. [2021-11-23 03:36:13,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1135 states, 768 states have (on average 1.3815104166666667) internal successors, (1061), 780 states have internal predecessors, (1061), 286 states have call successors, (286), 78 states have call predecessors, (286), 80 states have return successors, (294), 287 states have call predecessors, (294), 285 states have call successors, (294) [2021-11-23 03:36:13,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1135 states to 1135 states and 1641 transitions. [2021-11-23 03:36:13,045 INFO L78 Accepts]: Start accepts. Automaton has 1135 states and 1641 transitions. Word has length 105 [2021-11-23 03:36:13,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 03:36:13,047 INFO L470 AbstractCegarLoop]: Abstraction has 1135 states and 1641 transitions. [2021-11-23 03:36:13,048 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 6.25) internal successors, (50), 10 states have internal predecessors, (50), 4 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2021-11-23 03:36:13,048 INFO L276 IsEmpty]: Start isEmpty. Operand 1135 states and 1641 transitions. [2021-11-23 03:36:13,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2021-11-23 03:36:13,055 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 03:36:13,055 INFO L514 BasicCegarLoop]: trace histogram [10, 10, 10, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 03:36:13,055 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-23 03:36:13,056 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-23 03:36:13,057 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 03:36:13,057 INFO L85 PathProgramCache]: Analyzing trace with hash 1481844061, now seen corresponding path program 1 times [2021-11-23 03:36:13,057 INFO L121 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2021-11-23 03:36:13,057 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [389364735] [2021-11-23 03:36:13,058 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 03:36:13,058 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 03:36:13,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-23 03:36:13,339 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-23 03:36:13,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-23 03:36:13,958 INFO L133 FreeRefinementEngine]: Strategy SIFA_TAIPAN found a feasible trace [2021-11-23 03:36:13,958 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-23 03:36:13,960 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-23 03:36:13,962 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-23 03:36:13,967 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2021-11-23 03:36:13,972 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-23 03:36:14,266 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:36:14 BoogieIcfgContainer [2021-11-23 03:36:14,266 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-23 03:36:14,267 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-23 03:36:14,267 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-23 03:36:14,267 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-23 03:36:14,268 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:33:46" (3/4) ... [2021-11-23 03:36:14,270 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2021-11-23 03:36:14,588 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/witness.graphml [2021-11-23 03:36:14,589 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-23 03:36:14,589 INFO L158 Benchmark]: Toolchain (without parser) took 157706.56ms. Allocated memory was 92.3MB in the beginning and 568.3MB in the end (delta: 476.1MB). Free memory was 66.6MB in the beginning and 434.4MB in the end (delta: -367.9MB). Peak memory consumption was 404.5MB. Max. memory is 16.1GB. [2021-11-23 03:36:14,590 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 92.3MB. Free memory was 64.3MB in the beginning and 64.3MB in the end (delta: 26.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-23 03:36:14,591 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1898.56ms. Allocated memory was 92.3MB in the beginning and 136.3MB in the end (delta: 44.0MB). Free memory was 66.3MB in the beginning and 64.5MB in the end (delta: 1.8MB). Peak memory consumption was 63.9MB. Max. memory is 16.1GB. [2021-11-23 03:36:14,592 INFO L158 Benchmark]: Boogie Procedure Inliner took 267.87ms. Allocated memory is still 136.3MB. Free memory was 64.5MB in the beginning and 79.5MB in the end (delta: -15.0MB). Peak memory consumption was 20.7MB. Max. memory is 16.1GB. [2021-11-23 03:36:14,593 INFO L158 Benchmark]: Boogie Preprocessor took 277.41ms. Allocated memory is still 136.3MB. Free memory was 79.5MB in the beginning and 61.3MB in the end (delta: 18.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-23 03:36:14,593 INFO L158 Benchmark]: RCFGBuilder took 7343.24ms. Allocated memory was 136.3MB in the beginning and 394.3MB in the end (delta: 257.9MB). Free memory was 61.3MB in the beginning and 300.8MB in the end (delta: -239.4MB). Peak memory consumption was 217.7MB. Max. memory is 16.1GB. [2021-11-23 03:36:14,594 INFO L158 Benchmark]: TraceAbstraction took 147576.31ms. Allocated memory was 394.3MB in the beginning and 568.3MB in the end (delta: 174.1MB). Free memory was 300.8MB in the beginning and 151.3MB in the end (delta: 149.4MB). Peak memory consumption was 324.6MB. Max. memory is 16.1GB. [2021-11-23 03:36:14,595 INFO L158 Benchmark]: Witness Printer took 321.98ms. Allocated memory is still 568.3MB. Free memory was 151.3MB in the beginning and 434.4MB in the end (delta: -283.1MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-11-23 03:36:14,599 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 92.3MB. Free memory was 64.3MB in the beginning and 64.3MB in the end (delta: 26.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1898.56ms. Allocated memory was 92.3MB in the beginning and 136.3MB in the end (delta: 44.0MB). Free memory was 66.3MB in the beginning and 64.5MB in the end (delta: 1.8MB). Peak memory consumption was 63.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 267.87ms. Allocated memory is still 136.3MB. Free memory was 64.5MB in the beginning and 79.5MB in the end (delta: -15.0MB). Peak memory consumption was 20.7MB. Max. memory is 16.1GB. * Boogie Preprocessor took 277.41ms. Allocated memory is still 136.3MB. Free memory was 79.5MB in the beginning and 61.3MB in the end (delta: 18.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * RCFGBuilder took 7343.24ms. Allocated memory was 136.3MB in the beginning and 394.3MB in the end (delta: 257.9MB). Free memory was 61.3MB in the beginning and 300.8MB in the end (delta: -239.4MB). Peak memory consumption was 217.7MB. Max. memory is 16.1GB. * TraceAbstraction took 147576.31ms. Allocated memory was 394.3MB in the beginning and 568.3MB in the end (delta: 174.1MB). Free memory was 300.8MB in the beginning and 151.3MB in the end (delta: 149.4MB). Peak memory consumption was 324.6MB. Max. memory is 16.1GB. * Witness Printer took 321.98ms. Allocated memory is still 568.3MB. Free memory was 151.3MB in the beginning and 434.4MB in the end (delta: -283.1MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 3957]: a call to reach_error is reachable a call to reach_error is reachable We found a FailurePath: [L3980] struct v4l2_subdev *si4713_subdev_tuner_ops_group1 ; [L3981] int ldv_irq_1_3 = 0; [L3982] void *ldv_irq_data_1_1 ; [L3983] int ldv_irq_1_0 = 0; [L3984] void *ldv_irq_data_1_0 ; [L3985] int ldv_state_variable_0 ; [L3986] struct v4l2_frequency *si4713_subdev_tuner_ops_group0 ; [L3987] struct v4l2_control *si4713_subdev_core_ops_group2 ; [L3988] int ldv_state_variable_2 ; [L3989] void *ldv_irq_data_1_3 ; [L3990] void *ldv_irq_data_1_2 ; [L3991] int ldv_irq_1_2 = 0; [L3992] int LDV_IN_INTERRUPT = 1; [L3993] int ldv_irq_1_1 = 0; [L3994] int ldv_irq_line_1_3 ; [L3995] struct v4l2_subdev *si4713_subdev_core_ops_group1 ; [L3996] struct v4l2_ext_controls *si4713_subdev_core_ops_group0 ; [L3997] int ldv_state_variable_3 ; [L3998] int ldv_irq_line_1_0 ; [L3999] int ref_cnt ; [L4000] struct v4l2_modulator *si4713_subdev_tuner_ops_group2 ; [L4001] int ldv_irq_line_1_1 ; [L4002] struct i2c_client *si4713_i2c_driver_group0 ; [L4003] int ldv_state_variable_1 ; [L4004] int ldv_irq_line_1_2 ; [L4005] int ldv_state_variable_4 ; [L4144] static int debug ; [L4145] static char const *si4713_supply_names[2U] = { "vio", "vdd"}; [L4146-L4156] static long limiter_times[40U] = { 2000L, 250L, 1000L, 500L, 510L, 1000L, 255L, 2000L, 170L, 3000L, 127L, 4020L, 102L, 5010L, 85L, 6020L, 73L, 7010L, 64L, 7990L, 57L, 8970L, 51L, 10030L, 25L, 20470L, 17L, 30110L, 13L, 39380L, 10L, 51190L, 8L, 63690L, 7L, 73140L, 6L, 85330L, 5L, 102390L}; [L4157-L4160] static unsigned long acomp_rtimes[10U] = { 0UL, 100000UL, 1UL, 200000UL, 2UL, 350000UL, 3UL, 525000UL, 4UL, 1000000UL}; [L4161-L4162] static unsigned long preemphasis_values[6U] = { 2UL, 0UL, 1UL, 1UL, 0UL, 2UL}; [L5779-L5781] static struct v4l2_subdev_core_ops const si4713_subdev_core_ops = {0, 0, 0, 0, 0, 0, 0, & si4713_queryctrl, & si4713_g_ctrl, & si4713_s_ctrl, & si4713_g_ext_ctrls, & si4713_s_ext_ctrls, 0, 0, 0, & si4713_ioctl, 0, 0, 0, 0, 0, 0}; [L5949-L5951] static struct v4l2_subdev_tuner_ops const si4713_subdev_tuner_ops = {0, 0, & si4713_s_frequency, & si4713_g_frequency, 0, 0, & si4713_g_modulator, & si4713_s_modulator, 0, 0}; [L5952-L5953] static struct v4l2_subdev_ops const si4713_subdev_ops = {& si4713_subdev_core_ops, & si4713_subdev_tuner_ops, 0, 0, 0, 0, 0, 0}; [L6083] static struct i2c_device_id const si4713_id[2U] = { {{'s', 'i', '4', '7', '1', '3', '\000'}, 0UL}}; [L6084] struct i2c_device_id const __mod_i2c_device_table ; [L6085-L6089] static struct i2c_driver si4713_i2c_driver = {0U, 0, 0, & si4713_probe, & si4713_remove, 0, 0, 0, 0, 0, {"si4713", 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, (struct i2c_device_id const *)(& si4713_id), 0, 0, {0, 0}}; [L6105] int ldv_retval_0 ; [L6106] int ldv_retval_1 ; [L6271] unsigned int ldvarg1 ; [L6272] unsigned int tmp ; [L6273] void *ldvarg0 ; [L6274] void *tmp___0 ; [L6275] struct v4l2_queryctrl *ldvarg2 ; [L6276] void *tmp___1 ; [L6277] struct i2c_device_id *ldvarg3 ; [L6278] void *tmp___2 ; [L6279] int tmp___3 ; [L6280] int tmp___4 ; [L6281] int tmp___5 ; [L6282] int tmp___6 ; [L6283] int tmp___7 ; [L6285] tmp = __VERIFIER_nondet_uint() [L6286] ldvarg1 = tmp VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg1=16, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16] [L6287] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3922] void *p ; [L3923] void *tmp ; [L3924] int tmp___0 ; [L3926] tmp___0 = __VERIFIER_nondet_int() [L3927] COND TRUE tmp___0 != 0 [L3928] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, size=1, tmp___0=-2] [L6287] RET, EXPR ldv_zalloc(1UL) VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1UL)={0:0}, ldvarg1=16, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16] [L6287] tmp___0 = ldv_zalloc(1UL) [L6288] ldvarg0 = tmp___0 VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=16, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16, tmp___0={0:0}] [L6289] CALL, EXPR ldv_zalloc(68UL) VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3922] void *p ; [L3923] void *tmp ; [L3924] int tmp___0 ; [L3926] tmp___0 = __VERIFIER_nondet_int() [L3927] COND TRUE tmp___0 != 0 [L3928] return ((void *)0); VAL [\old(size)=68, \result={0:0}, __mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, size=68, tmp___0=-3] [L6289] RET, EXPR ldv_zalloc(68UL) VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(68UL)={0:0}, ldvarg0={0:0}, ldvarg1=16, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16, tmp___0={0:0}] [L6289] tmp___1 = ldv_zalloc(68UL) [L6290] ldvarg2 = (struct v4l2_queryctrl *)tmp___1 VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=16, ldvarg2={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16, tmp___0={0:0}, tmp___1={0:0}] [L6291] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3922] void *p ; [L3923] void *tmp ; [L3924] int tmp___0 ; [L3926] tmp___0 = __VERIFIER_nondet_int() [L3927] COND TRUE tmp___0 != 0 [L3928] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, size=32, tmp___0=-4] [L6291] RET, EXPR ldv_zalloc(32UL) VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=16, ldvarg2={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16, tmp___0={0:0}, tmp___1={0:0}] [L6291] tmp___2 = ldv_zalloc(32UL) [L6292] ldvarg3 = (struct i2c_device_id *)tmp___2 [L6293] FCALL ldv_initialize() [L6294] ldv_state_variable_4 = 0 [L6295] ldv_state_variable_1 = 1 [L6296] ref_cnt = 0 [L6297] ldv_state_variable_0 = 1 [L6298] ldv_state_variable_3 = 0 [L6299] ldv_state_variable_2 = 0 VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=16, ldvarg2={0:0}, ldvarg3={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}] [L6301] tmp___3 = __VERIFIER_nondet_int() [L6303] case 0: [L6356] case 1: [L6362] case 2: VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=16, ldvarg2={0:0}, ldvarg3={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=2] [L6363] COND TRUE ldv_state_variable_0 != 0 [L6364] tmp___5 = __VERIFIER_nondet_int() [L6366] case 0: [L6374] case 1: VAL [__mod_i2c_device_table=0, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=16, ldvarg2={0:0}, ldvarg3={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=2, tmp___5=1] [L6375] COND TRUE ldv_state_variable_0 == 1 [L6376] CALL, EXPR si4713_module_init() [L6092] int tmp ; [L6094] CALL, EXPR i2c_add_driver(& si4713_i2c_driver) [L4108] int tmp ; [L4110] CALL, EXPR i2c_register_driver(& __this_module, driver) [L6677] return __VERIFIER_nondet_int(); [L4110] RET, EXPR i2c_register_driver(& __this_module, driver) [L4110] tmp = i2c_register_driver(& __this_module, driver) [L4111] return (tmp); [L6094] RET, EXPR i2c_add_driver(& si4713_i2c_driver) [L6094] tmp = i2c_add_driver(& si4713_i2c_driver) [L6095] return (tmp); [L6376] RET, EXPR si4713_module_init() [L6376] ldv_retval_0 = si4713_module_init() [L6377] COND TRUE ldv_retval_0 == 0 [L6378] ldv_state_variable_0 = 3 [L6379] ldv_state_variable_2 = 1 [L6380] CALL ldv_initialize_i2c_driver_2() [L6111] void *tmp ; VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L6113] CALL, EXPR ldv_zalloc(1168UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3922] void *p ; [L3923] void *tmp ; [L3924] int tmp___0 ; [L3926] tmp___0 = __VERIFIER_nondet_int() [L3927] COND TRUE tmp___0 != 0 [L3928] return ((void *)0); VAL [\old(size)=1168, \result={0:0}, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, size=1168, tmp___0=-5] [L6113] RET, EXPR ldv_zalloc(1168UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(1168UL)={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L6113] tmp = ldv_zalloc(1168UL) [L6114] si4713_i2c_driver_group0 = (struct i2c_client *)tmp [L6380] RET ldv_initialize_i2c_driver_2() [L6381] ldv_state_variable_3 = 1 [L6382] CALL ldv_initialize_v4l2_subdev_tuner_ops_3() [L6256] void *tmp ; [L6257] void *tmp___0 ; [L6258] void *tmp___1 ; VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L6260] CALL, EXPR ldv_zalloc(44UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3922] void *p ; [L3923] void *tmp ; [L3924] int tmp___0 ; [L3926] tmp___0 = __VERIFIER_nondet_int() [L3927] COND TRUE tmp___0 != 0 [L3928] return ((void *)0); VAL [\old(size)=44, \result={0:0}, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, size=44, tmp___0=-6] [L6260] RET, EXPR ldv_zalloc(44UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(44UL)={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L6260] tmp = ldv_zalloc(44UL) [L6261] si4713_subdev_tuner_ops_group0 = (struct v4l2_frequency *)tmp VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp={0:0}] [L6262] CALL, EXPR ldv_zalloc(1736UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3922] void *p ; [L3923] void *tmp ; [L3924] int tmp___0 ; [L3926] tmp___0 = __VERIFIER_nondet_int() [L3927] COND TRUE tmp___0 != 0 [L3928] return ((void *)0); VAL [\old(size)=1736, \result={0:0}, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, size=1736, tmp___0=-7] [L6262] RET, EXPR ldv_zalloc(1736UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(1736UL)={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp={0:0}] [L6262] tmp___0 = ldv_zalloc(1736UL) [L6263] si4713_subdev_tuner_ops_group1 = (struct v4l2_subdev *)tmp___0 VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp={0:0}, tmp___0={0:0}] [L6264] CALL, EXPR ldv_zalloc(68UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3922] void *p ; [L3923] void *tmp ; [L3924] int tmp___0 ; [L3926] tmp___0 = __VERIFIER_nondet_int() [L3927] COND TRUE tmp___0 != 0 [L3928] return ((void *)0); VAL [\old(size)=68, \result={0:0}, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, size=68, tmp___0=-8] [L6264] RET, EXPR ldv_zalloc(68UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(68UL)={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp={0:0}, tmp___0={0:0}] [L6264] tmp___1 = ldv_zalloc(68UL) [L6265] si4713_subdev_tuner_ops_group2 = (struct v4l2_modulator *)tmp___1 [L6382] RET ldv_initialize_v4l2_subdev_tuner_ops_3() [L6383] ldv_state_variable_4 = 1 [L6384] CALL ldv_initialize_v4l2_subdev_core_ops_4() [L6120] void *tmp ; [L6121] void *tmp___0 ; [L6122] void *tmp___1 ; VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L6124] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3922] void *p ; [L3923] void *tmp ; [L3924] int tmp___0 ; [L3926] tmp___0 = __VERIFIER_nondet_int() [L3927] COND TRUE tmp___0 != 0 [L3928] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, size=32, tmp___0=-9] [L6124] RET, EXPR ldv_zalloc(32UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(32UL)={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L6124] tmp = ldv_zalloc(32UL) [L6125] si4713_subdev_core_ops_group0 = (struct v4l2_ext_controls *)tmp VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp={0:0}] [L6126] CALL, EXPR ldv_zalloc(1736UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3922] void *p ; [L3923] void *tmp ; [L3924] int tmp___0 ; [L3926] tmp___0 = __VERIFIER_nondet_int() [L3927] COND TRUE tmp___0 != 0 [L3928] return ((void *)0); VAL [\old(size)=1736, \result={0:0}, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, size=1736, tmp___0=-10] [L6126] RET, EXPR ldv_zalloc(1736UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1736UL)={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp={0:0}] [L6126] tmp___0 = ldv_zalloc(1736UL) [L6127] si4713_subdev_core_ops_group1 = (struct v4l2_subdev *)tmp___0 VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp={0:0}, tmp___0={0:0}] [L6128] CALL, EXPR ldv_zalloc(8UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3922] void *p ; [L3923] void *tmp ; [L3924] int tmp___0 ; [L3926] tmp___0 = __VERIFIER_nondet_int() [L3927] COND TRUE tmp___0 != 0 [L3928] return ((void *)0); VAL [\old(size)=8, \result={0:0}, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, size=8, tmp___0=-11] [L6128] RET, EXPR ldv_zalloc(8UL) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(8UL)={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp={0:0}, tmp___0={0:0}] [L6128] tmp___1 = ldv_zalloc(8UL) [L6129] si4713_subdev_core_ops_group2 = (struct v4l2_control *)tmp___1 [L6384] RET ldv_initialize_v4l2_subdev_core_ops_4() [L6387] COND FALSE !(ldv_retval_0 != 0) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=16, ldvarg2={0:0}, ldvarg3={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=2, tmp___5=1] [L6301] tmp___3 = __VERIFIER_nondet_int() [L6303] case 0: VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=16, ldvarg2={0:0}, ldvarg3={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1] [L6304] COND TRUE ldv_state_variable_4 != 0 [L6305] tmp___4 = __VERIFIER_nondet_int() [L6307] case 0: [L6314] case 1: [L6321] case 2: [L6328] case 3: VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=16, ldvarg2={0:0}, ldvarg3={0:0}, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, tmp=16, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=3, tmp___5=1] [L6329] COND TRUE ldv_state_variable_4 == 1 [L6330] CALL si4713_s_ext_ctrls(si4713_subdev_core_ops_group1, si4713_subdev_core_ops_group0) [L5502] struct si4713_device *sdev ; [L5503] struct v4l2_subdev const *__mptr ; [L5504] int i ; [L5505] int err ; [L5507] __mptr = (struct v4l2_subdev const *)sd [L5508] sdev = (struct si4713_device *)__mptr [L5509] EXPR ctrls->ctrl_class VAL [__mod_i2c_device_table=0, __mptr={0:0}, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, ctrls={0:0}, ctrls={0:0}, ctrls->ctrl_class=10158080, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, sd={0:0}, sd={0:0}, sdev={0:0}, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L5509] COND FALSE !(ctrls->ctrl_class != 10158080U) [L5513] i = 0 VAL [__mod_i2c_device_table=0, __mptr={0:0}, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, ctrls={0:0}, ctrls={0:0}, debug=0, i=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, sd={0:0}, sd={0:0}, sdev={0:0}, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L5536] EXPR ctrls->count VAL [__mod_i2c_device_table=0, __mptr={0:0}, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, ctrls={0:0}, ctrls={0:0}, ctrls->count=4294967297, debug=0, i=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, sd={0:0}, sd={0:0}, sdev={0:0}, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L5536] COND TRUE (__u32 )i < ctrls->count [L5516] EXPR ctrls->controls [L5516] (ctrls->controls + (unsigned long )i)->id [L5517] case 10160389U: [L5518] case 10160390U: [L5519] EXPR ctrls->controls [L5519] CALL si4713_write_econtrol_string(sdev, ctrls->controls + (unsigned long )i) [L4924] struct v4l2_queryctrl vqc ; [L4925] int len ; [L4926] s32 rval ; [L4927] char ps_name[97U] ; [L4928] unsigned long tmp ; [L4929] size_t tmp___0 ; [L4930] char radio_text[385U] ; [L4931] unsigned long tmp___1 ; [L4932] size_t tmp___2 ; [L4934] rval = 0 [L4935] EXPR control->id [L4935] vqc.id = control->id [L4936] CALL, EXPR si4713_queryctrl(& sdev->sd, & vqc) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, qc={69:0}, ref_cnt=0, sd={0:0}, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L5588] int rval ; [L5590] rval = 0 [L5591] qc->id [L5592] case 9963785U: [L5595] case 10160386U: [L5598] case 10160387U: [L5601] case 10160385U: [L5604] case 10160389U: VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, qc={69:0}, qc={69:0}, qc->id=10160389, ref_cnt=0, rval=0, sd={0:0}, sd={0:0}, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L5605] CALL, EXPR v4l2_ctrl_query_fill(qc, 0, 96, 8, 0) VAL [\old(arg1)=0, \old(arg2)=96, \old(arg3)=8, \old(arg4)=0, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, arg0={69:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L6730] return __VERIFIER_nondet_int(); [L5605] RET, EXPR v4l2_ctrl_query_fill(qc, 0, 96, 8, 0) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, qc={69:0}, qc={69:0}, qc->id=10160389, ref_cnt=0, rval=0, sd={0:0}, sd={0:0}, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, v4l2_ctrl_query_fill(qc, 0, 96, 8, 0)=0] [L5605] rval = v4l2_ctrl_query_fill(qc, 0, 96, 8, 0) [L5657] return (rval); [L4936] RET, EXPR si4713_queryctrl(& sdev->sd, & vqc) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, control={69:74}, control={69:74}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ps_name={71:0}, radio_text={70:0}, ref_cnt=0, rval=0, sdev={0:0}, sdev={0:0}, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_queryctrl(& sdev->sd, & vqc)=0, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, vqc={69:0}] [L4936] rval = si4713_queryctrl(& sdev->sd, & vqc) [L4937] COND FALSE !(rval < 0) [L4941] control->id [L4942] case 10160389U: [L4943] EXPR control->size [L4943] len = (int )(control->size - 1U) [L4944] COND FALSE !(len > 96) [L4949] EXPR control->ldv_23757.string VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, control={69:74}, control={69:74}, control->id=10160389, control->ldv_23757.string={4294967308:4294967300}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len=-1, limiter_times={60:0}, preemphasis_values={62:0}, ps_name={71:0}, radio_text={70:0}, ref_cnt=0, rval=0, sdev={0:0}, sdev={0:0}, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, vqc={69:0}] [L4949-L4950] CALL ldv_copy_from_user_7((void *)(& ps_name), (void const *)control->ldv_23757.string, (unsigned long )len) VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L6524] unsigned long tmp ; VAL [\old(n)=-1, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, from={4294967308:4294967300}, from={4294967308:4294967300}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, n=-1, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}, to={71:0}, to={71:0}] [L6526] CALL ldv_check_len((long )n) VAL [\old(n)=-1, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L6599] COND FALSE !(n >= 0L) VAL [\old(n)=-1, __mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, n=-1, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L6601] CALL ldv_error() VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] [L3957] reach_error() VAL [__mod_i2c_device_table=0, __this_module={4294967320:4294967319}, acomp_rtimes={61:0}, debug=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, limiter_times={60:0}, preemphasis_values={62:0}, ref_cnt=0, si4713_i2c_driver={67:0}, si4713_i2c_driver_group0={0:0}, si4713_id={66:0}, si4713_subdev_core_ops={63:0}, si4713_subdev_core_ops_group0={0:0}, si4713_subdev_core_ops_group1={0:0}, si4713_subdev_core_ops_group2={0:0}, si4713_subdev_ops={65:0}, si4713_subdev_tuner_ops={64:0}, si4713_subdev_tuner_ops_group0={0:0}, si4713_subdev_tuner_ops_group1={0:0}, si4713_subdev_tuner_ops_group2={0:0}, si4713_supply_names={59:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 52 procedures, 809 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 147.2s, OverallIterations: 6, TraceHistogramMax: 10, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 142.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 31 mSolverCounterUnknown, 2856 SdHoareTripleChecker+Valid, 139.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2512 mSDsluCounter, 40618 SdHoareTripleChecker+Invalid, 132.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 35789 mSDsCounter, 490 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 12003 IncrementalHoareTripleChecker+Invalid, 12524 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 490 mSolverCounterUnsat, 7671 mSDtfsCounter, 12003 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 61 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 56 ImplicationChecksByTransitivity, 1.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1135occurred in iteration=5, InterpolantAutomatonStates: 43, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 5 MinimizatonAttempts, 2917 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 574 NumberOfCodeBlocks, 574 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 462 ConstructedInterpolants, 0 QuantifiedInterpolants, 816 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 5 InterpolantComputations, 5 PerfectInterpolantSequences, 740/740 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2021-11-23 03:36:14,774 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3679dd48-50c5-4add-8048-890e9897884f/bin/utaipan-EQgc7hIp5V/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE