./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 20:35:42,179 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 20:35:42,182 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 20:35:42,236 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 20:35:42,237 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 20:35:42,242 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 20:35:42,244 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 20:35:42,247 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 20:35:42,252 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 20:35:42,258 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 20:35:42,259 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 20:35:42,261 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 20:35:42,262 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 20:35:42,264 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 20:35:42,266 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 20:35:42,268 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 20:35:42,270 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 20:35:42,271 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 20:35:42,273 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 20:35:42,281 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 20:35:42,283 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 20:35:42,284 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 20:35:42,288 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 20:35:42,289 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 20:35:42,298 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 20:35:42,298 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 20:35:42,299 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 20:35:42,301 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 20:35:42,301 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 20:35:42,304 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 20:35:42,304 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 20:35:42,305 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 20:35:42,307 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 20:35:42,309 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 20:35:42,310 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 20:35:42,310 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 20:35:42,311 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 20:35:42,311 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 20:35:42,311 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 20:35:42,312 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 20:35:42,313 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 20:35:42,314 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-11-02 20:35:42,351 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 20:35:42,351 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 20:35:42,351 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 20:35:42,352 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 20:35:42,353 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-02 20:35:42,353 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-02 20:35:42,354 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 20:35:42,354 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 20:35:42,354 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 20:35:42,355 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 20:35:42,356 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 20:35:42,356 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 20:35:42,356 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-02 20:35:42,357 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-02 20:35:42,357 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-02 20:35:42,357 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 20:35:42,357 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 20:35:42,357 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-02 20:35:42,358 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 20:35:42,358 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 20:35:42,358 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-02 20:35:42,358 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:35:42,359 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 20:35:42,359 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-02 20:35:42,359 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-02 20:35:42,359 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 20:35:42,360 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-02 20:35:42,360 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-02 20:35:42,360 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-02 20:35:42,360 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-02 20:35:42,362 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2022-11-02 20:35:42,698 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 20:35:42,733 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 20:35:42,737 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 20:35:42,739 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 20:35:42,740 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 20:35:42,742 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-02 20:35:42,826 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/data/696fd83d5/a7d9f64d464441bcb915b76004bda544/FLAG04637e1c7 [2022-11-02 20:35:43,768 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 20:35:43,768 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-02 20:35:43,827 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/data/696fd83d5/a7d9f64d464441bcb915b76004bda544/FLAG04637e1c7 [2022-11-02 20:35:44,214 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/data/696fd83d5/a7d9f64d464441bcb915b76004bda544 [2022-11-02 20:35:44,218 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 20:35:44,221 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 20:35:44,225 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 20:35:44,225 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 20:35:44,229 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 20:35:44,230 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:35:44" (1/1) ... [2022-11-02 20:35:44,231 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@66c60413 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:44, skipping insertion in model container [2022-11-02 20:35:44,232 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:35:44" (1/1) ... [2022-11-02 20:35:44,240 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 20:35:44,402 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 20:35:45,484 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-11-02 20:35:46,276 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:35:46,312 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 20:35:46,575 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-11-02 20:35:46,755 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:35:46,897 INFO L208 MainTranslator]: Completed translation [2022-11-02 20:35:46,897 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46 WrapperNode [2022-11-02 20:35:46,899 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 20:35:46,901 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 20:35:46,901 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 20:35:46,902 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 20:35:46,910 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:46,997 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:47,104 INFO L138 Inliner]: procedures = 157, calls = 1181, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2337 [2022-11-02 20:35:47,105 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 20:35:47,106 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 20:35:47,106 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 20:35:47,106 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 20:35:47,115 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:47,116 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:47,140 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:47,146 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:47,222 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:47,234 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:47,245 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:47,254 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:47,315 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 20:35:47,329 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 20:35:47,329 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 20:35:47,329 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 20:35:47,331 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (1/1) ... [2022-11-02 20:35:47,339 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:35:47,352 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:35:47,367 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-02 20:35:47,399 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-02 20:35:47,420 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-11-02 20:35:47,420 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-11-02 20:35:47,420 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-11-02 20:35:47,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-11-02 20:35:47,421 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-02 20:35:47,421 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2022-11-02 20:35:47,421 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2022-11-02 20:35:47,421 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2022-11-02 20:35:47,422 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2022-11-02 20:35:47,422 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2022-11-02 20:35:47,422 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2022-11-02 20:35:47,422 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-02 20:35:47,422 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-02 20:35:47,423 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2022-11-02 20:35:47,423 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2022-11-02 20:35:47,423 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-02 20:35:47,423 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-02 20:35:47,424 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-02 20:35:47,424 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-11-02 20:35:47,424 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-11-02 20:35:47,425 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-02 20:35:47,425 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-02 20:35:47,425 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2022-11-02 20:35:47,425 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2022-11-02 20:35:47,426 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-02 20:35:47,426 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-02 20:35:47,426 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-11-02 20:35:47,426 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-11-02 20:35:47,426 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-02 20:35:47,427 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-02 20:35:47,427 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-11-02 20:35:47,427 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-11-02 20:35:47,427 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-02 20:35:47,428 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-02 20:35:47,428 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2022-11-02 20:35:47,428 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2022-11-02 20:35:47,428 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-11-02 20:35:47,429 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-11-02 20:35:47,429 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-02 20:35:47,429 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-02 20:35:47,430 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-02 20:35:47,430 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2022-11-02 20:35:47,430 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2022-11-02 20:35:47,430 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-02 20:35:47,431 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-02 20:35:47,431 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-11-02 20:35:47,431 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-11-02 20:35:47,431 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-02 20:35:47,432 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-02 20:35:47,432 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-11-02 20:35:47,432 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-11-02 20:35:47,432 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-02 20:35:47,433 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-02 20:35:47,433 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-02 20:35:47,433 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-02 20:35:47,434 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-02 20:35:47,434 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-02 20:35:47,436 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-02 20:35:47,436 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 20:35:47,436 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2022-11-02 20:35:47,437 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2022-11-02 20:35:47,438 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-02 20:35:47,438 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-02 20:35:47,438 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2022-11-02 20:35:47,438 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2022-11-02 20:35:47,438 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-02 20:35:47,438 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2022-11-02 20:35:47,438 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2022-11-02 20:35:47,439 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-11-02 20:35:47,439 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-11-02 20:35:47,439 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2022-11-02 20:35:47,439 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2022-11-02 20:35:47,439 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-02 20:35:47,439 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-02 20:35:47,439 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-11-02 20:35:47,440 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-11-02 20:35:47,440 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2022-11-02 20:35:47,440 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2022-11-02 20:35:47,440 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 20:35:47,440 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2022-11-02 20:35:47,440 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2022-11-02 20:35:47,441 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-11-02 20:35:47,441 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-11-02 20:35:47,441 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2022-11-02 20:35:47,441 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2022-11-02 20:35:47,441 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-02 20:35:47,441 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-02 20:35:47,442 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-02 20:35:47,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-02 20:35:47,442 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 20:35:47,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 20:35:47,442 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2022-11-02 20:35:47,442 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2022-11-02 20:35:48,134 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 20:35:48,140 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 20:35:48,332 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-02 20:35:53,258 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 20:35:53,283 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 20:35:53,283 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-02 20:35:53,289 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:35:53 BoogieIcfgContainer [2022-11-02 20:35:53,290 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 20:35:53,293 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-02 20:35:53,293 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-02 20:35:53,297 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-02 20:35:53,298 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 08:35:44" (1/3) ... [2022-11-02 20:35:53,298 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12496e0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:35:53, skipping insertion in model container [2022-11-02 20:35:53,299 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:35:46" (2/3) ... [2022-11-02 20:35:53,299 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12496e0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:35:53, skipping insertion in model container [2022-11-02 20:35:53,299 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:35:53" (3/3) ... [2022-11-02 20:35:53,301 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-02 20:35:53,324 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-02 20:35:53,324 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-02 20:35:53,448 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-02 20:35:53,458 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@538d6703, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-02 20:35:53,458 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-02 20:35:53,467 INFO L276 IsEmpty]: Start isEmpty. Operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) [2022-11-02 20:35:53,490 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-02 20:35:53,490 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:35:53,491 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:35:53,492 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:35:53,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:35:53,497 INFO L85 PathProgramCache]: Analyzing trace with hash -1998328016, now seen corresponding path program 1 times [2022-11-02 20:35:53,510 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:35:53,510 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [26550780] [2022-11-02 20:35:53,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:35:53,512 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:35:53,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:35:54,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:35:54,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:35:54,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:35:54,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:35:54,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:35:54,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:35:54,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:35:54,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:35:54,323 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-02 20:35:54,323 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:35:54,324 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [26550780] [2022-11-02 20:35:54,324 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [26550780] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:35:54,325 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:35:54,325 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:35:54,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1561454717] [2022-11-02 20:35:54,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:35:54,334 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 20:35:54,334 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:35:54,370 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:35:54,372 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:35:54,375 INFO L87 Difference]: Start difference. First operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-02 20:35:56,934 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:35:58,959 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:03,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:36:03,283 INFO L93 Difference]: Finished difference Result 2121 states and 3115 transitions. [2022-11-02 20:36:03,286 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:36:03,287 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 45 [2022-11-02 20:36:03,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:36:03,325 INFO L225 Difference]: With dead ends: 2121 [2022-11-02 20:36:03,326 INFO L226 Difference]: Without dead ends: 1432 [2022-11-02 20:36:03,340 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:36:03,345 INFO L413 NwaCegarLoop]: 1044 mSDtfsCounter, 1384 mSDsluCounter, 1680 mSDsCounter, 0 mSdLazyCounter, 1070 mSolverCounterSat, 685 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1492 SdHoareTripleChecker+Valid, 2724 SdHoareTripleChecker+Invalid, 1757 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 685 IncrementalHoareTripleChecker+Valid, 1070 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.5s IncrementalHoareTripleChecker+Time [2022-11-02 20:36:03,346 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1492 Valid, 2724 Invalid, 1757 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [685 Valid, 1070 Invalid, 2 Unknown, 0 Unchecked, 8.5s Time] [2022-11-02 20:36:03,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1432 states. [2022-11-02 20:36:03,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1432 to 1286. [2022-11-02 20:36:03,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1286 states, 957 states have (on average 1.3657262277951934) internal successors, (1307), 971 states have internal predecessors, (1307), 256 states have call successors, (256), 73 states have call predecessors, (256), 72 states have return successors, (255), 249 states have call predecessors, (255), 255 states have call successors, (255) [2022-11-02 20:36:03,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1286 states to 1286 states and 1818 transitions. [2022-11-02 20:36:03,596 INFO L78 Accepts]: Start accepts. Automaton has 1286 states and 1818 transitions. Word has length 45 [2022-11-02 20:36:03,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:36:03,597 INFO L495 AbstractCegarLoop]: Abstraction has 1286 states and 1818 transitions. [2022-11-02 20:36:03,598 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-02 20:36:03,599 INFO L276 IsEmpty]: Start isEmpty. Operand 1286 states and 1818 transitions. [2022-11-02 20:36:03,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-02 20:36:03,609 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:36:03,609 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:36:03,609 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-02 20:36:03,610 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:36:03,611 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:36:03,611 INFO L85 PathProgramCache]: Analyzing trace with hash -1828543170, now seen corresponding path program 1 times [2022-11-02 20:36:03,611 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:36:03,611 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [603710061] [2022-11-02 20:36:03,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:36:03,612 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:36:03,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:04,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:36:04,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:04,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:36:04,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:04,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:36:04,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:04,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:36:04,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:04,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-02 20:36:04,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:04,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-02 20:36:04,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:04,505 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-02 20:36:04,505 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:36:04,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [603710061] [2022-11-02 20:36:04,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [603710061] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:36:04,507 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:36:04,507 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:36:04,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [514867294] [2022-11-02 20:36:04,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:36:04,514 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:36:04,514 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:36:04,515 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:36:04,515 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:36:04,515 INFO L87 Difference]: Start difference. First operand 1286 states and 1818 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-02 20:36:06,897 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:08,914 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:13,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:36:13,619 INFO L93 Difference]: Finished difference Result 4123 states and 5934 transitions. [2022-11-02 20:36:13,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-02 20:36:13,620 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2022-11-02 20:36:13,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:36:13,639 INFO L225 Difference]: With dead ends: 4123 [2022-11-02 20:36:13,640 INFO L226 Difference]: Without dead ends: 2839 [2022-11-02 20:36:13,646 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-11-02 20:36:13,647 INFO L413 NwaCegarLoop]: 1086 mSDtfsCounter, 1367 mSDsluCounter, 3389 mSDsCounter, 0 mSdLazyCounter, 1806 mSolverCounterSat, 662 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1474 SdHoareTripleChecker+Valid, 4475 SdHoareTripleChecker+Invalid, 2470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 662 IncrementalHoareTripleChecker+Valid, 1806 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.7s IncrementalHoareTripleChecker+Time [2022-11-02 20:36:13,648 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1474 Valid, 4475 Invalid, 2470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [662 Valid, 1806 Invalid, 2 Unknown, 0 Unchecked, 8.7s Time] [2022-11-02 20:36:13,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2839 states. [2022-11-02 20:36:13,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2839 to 2591. [2022-11-02 20:36:13,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2591 states, 1927 states have (on average 1.3642968344577062) internal successors, (2629), 1963 states have internal predecessors, (2629), 507 states have call successors, (507), 145 states have call predecessors, (507), 156 states have return successors, (561), 498 states have call predecessors, (561), 506 states have call successors, (561) [2022-11-02 20:36:13,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2591 states to 2591 states and 3697 transitions. [2022-11-02 20:36:13,813 INFO L78 Accepts]: Start accepts. Automaton has 2591 states and 3697 transitions. Word has length 63 [2022-11-02 20:36:13,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:36:13,814 INFO L495 AbstractCegarLoop]: Abstraction has 2591 states and 3697 transitions. [2022-11-02 20:36:13,814 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-02 20:36:13,814 INFO L276 IsEmpty]: Start isEmpty. Operand 2591 states and 3697 transitions. [2022-11-02 20:36:13,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2022-11-02 20:36:13,826 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:36:13,826 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:36:13,826 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-02 20:36:13,827 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:36:13,827 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:36:13,827 INFO L85 PathProgramCache]: Analyzing trace with hash -1080085425, now seen corresponding path program 1 times [2022-11-02 20:36:13,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:36:13,828 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1964545716] [2022-11-02 20:36:13,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:36:13,828 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:36:13,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:36:14,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:36:14,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:36:14,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:36:14,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-02 20:36:14,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:14,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-02 20:36:14,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:14,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:14,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-11-02 20:36:14,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-11-02 20:36:14,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:14,379 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-02 20:36:14,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:36:14,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1964545716] [2022-11-02 20:36:14,380 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1964545716] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:36:14,380 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:36:14,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:36:14,381 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [13267522] [2022-11-02 20:36:14,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:36:14,381 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:36:14,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:36:14,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:36:14,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:36:14,383 INFO L87 Difference]: Start difference. First operand 2591 states and 3697 transitions. Second operand has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-02 20:36:16,639 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:18,666 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:20,685 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:23,819 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:25,850 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:27,881 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:32,160 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:36:32,161 INFO L93 Difference]: Finished difference Result 7632 states and 10965 transitions. [2022-11-02 20:36:32,162 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-02 20:36:32,162 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 113 [2022-11-02 20:36:32,162 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:36:32,200 INFO L225 Difference]: With dead ends: 7632 [2022-11-02 20:36:32,201 INFO L226 Difference]: Without dead ends: 5053 [2022-11-02 20:36:32,213 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-02 20:36:32,219 INFO L413 NwaCegarLoop]: 1031 mSDtfsCounter, 1308 mSDsluCounter, 2221 mSDsCounter, 0 mSdLazyCounter, 1467 mSolverCounterSat, 882 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1409 SdHoareTripleChecker+Valid, 3252 SdHoareTripleChecker+Invalid, 2355 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 882 IncrementalHoareTripleChecker+Valid, 1467 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:36:32,220 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1409 Valid, 3252 Invalid, 2355 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [882 Valid, 1467 Invalid, 6 Unknown, 0 Unchecked, 17.3s Time] [2022-11-02 20:36:32,228 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5053 states. [2022-11-02 20:36:32,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5053 to 4275. [2022-11-02 20:36:32,468 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4275 states, 3162 states have (on average 1.3488298545224542) internal successors, (4265), 3224 states have internal predecessors, (4265), 829 states have call successors, (829), 262 states have call predecessors, (829), 283 states have return successors, (918), 816 states have call predecessors, (918), 828 states have call successors, (918) [2022-11-02 20:36:32,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4275 states to 4275 states and 6012 transitions. [2022-11-02 20:36:32,494 INFO L78 Accepts]: Start accepts. Automaton has 4275 states and 6012 transitions. Word has length 113 [2022-11-02 20:36:32,496 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:36:32,497 INFO L495 AbstractCegarLoop]: Abstraction has 4275 states and 6012 transitions. [2022-11-02 20:36:32,497 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-02 20:36:32,497 INFO L276 IsEmpty]: Start isEmpty. Operand 4275 states and 6012 transitions. [2022-11-02 20:36:32,511 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2022-11-02 20:36:32,512 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:36:32,512 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:36:32,512 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-02 20:36:32,513 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:36:32,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:36:32,514 INFO L85 PathProgramCache]: Analyzing trace with hash 265725666, now seen corresponding path program 1 times [2022-11-02 20:36:32,514 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:36:32,514 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [20738404] [2022-11-02 20:36:32,514 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:36:32,515 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:36:32,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:32,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:36:32,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:32,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:36:32,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:32,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:36:32,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:32,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:36:32,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:32,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-02 20:36:32,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:32,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:32,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:32,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-11-02 20:36:32,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:32,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-02 20:36:32,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:32,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-02 20:36:32,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:32,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-02 20:36:32,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:33,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:33,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:33,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:33,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:33,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-11-02 20:36:33,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:33,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-11-02 20:36:33,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:33,098 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-11-02 20:36:33,099 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:36:33,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [20738404] [2022-11-02 20:36:33,099 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [20738404] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:36:33,099 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:36:33,100 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:36:33,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [76546329] [2022-11-02 20:36:33,100 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:36:33,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:36:33,102 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:36:33,103 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:36:33,104 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:36:33,104 INFO L87 Difference]: Start difference. First operand 4275 states and 6012 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-02 20:36:35,296 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:37,326 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:39,891 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:41,921 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:46,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:36:46,022 INFO L93 Difference]: Finished difference Result 10577 states and 14962 transitions. [2022-11-02 20:36:46,023 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 20:36:46,023 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 130 [2022-11-02 20:36:46,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:36:46,073 INFO L225 Difference]: With dead ends: 10577 [2022-11-02 20:36:46,073 INFO L226 Difference]: Without dead ends: 6318 [2022-11-02 20:36:46,094 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2022-11-02 20:36:46,096 INFO L413 NwaCegarLoop]: 1212 mSDtfsCounter, 826 mSDsluCounter, 2909 mSDsCounter, 0 mSdLazyCounter, 1463 mSolverCounterSat, 417 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 890 SdHoareTripleChecker+Valid, 4121 SdHoareTripleChecker+Invalid, 1884 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 417 IncrementalHoareTripleChecker+Valid, 1463 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.5s IncrementalHoareTripleChecker+Time [2022-11-02 20:36:46,097 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [890 Valid, 4121 Invalid, 1884 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [417 Valid, 1463 Invalid, 4 Unknown, 0 Unchecked, 12.5s Time] [2022-11-02 20:36:46,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6318 states. [2022-11-02 20:36:46,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6318 to 5704. [2022-11-02 20:36:46,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5704 states, 4250 states have (on average 1.3538823529411765) internal successors, (5754), 4336 states have internal predecessors, (5754), 1066 states have call successors, (1066), 358 states have call predecessors, (1066), 387 states have return successors, (1183), 1041 states have call predecessors, (1183), 1065 states have call successors, (1183) [2022-11-02 20:36:46,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5704 states to 5704 states and 8003 transitions. [2022-11-02 20:36:46,490 INFO L78 Accepts]: Start accepts. Automaton has 5704 states and 8003 transitions. Word has length 130 [2022-11-02 20:36:46,491 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:36:46,491 INFO L495 AbstractCegarLoop]: Abstraction has 5704 states and 8003 transitions. [2022-11-02 20:36:46,491 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-02 20:36:46,495 INFO L276 IsEmpty]: Start isEmpty. Operand 5704 states and 8003 transitions. [2022-11-02 20:36:46,507 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2022-11-02 20:36:46,507 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:36:46,508 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:36:46,508 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-02 20:36:46,508 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:36:46,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:36:46,509 INFO L85 PathProgramCache]: Analyzing trace with hash -1355234686, now seen corresponding path program 1 times [2022-11-02 20:36:46,509 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:36:46,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1417126839] [2022-11-02 20:36:46,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:36:46,510 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:36:46,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:46,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:36:46,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:36:47,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:36:47,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:36:47,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-02 20:36:47,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-02 20:36:47,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-11-02 20:36:47,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-02 20:36:47,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-11-02 20:36:47,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:47,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-11-02 20:36:47,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:47,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:47,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:47,211 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2022-11-02 20:36:47,211 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:36:47,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1417126839] [2022-11-02 20:36:47,211 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1417126839] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:36:47,212 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:36:47,212 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-02 20:36:47,214 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [455022083] [2022-11-02 20:36:47,214 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:36:47,216 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-02 20:36:47,216 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:36:47,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-02 20:36:47,217 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-11-02 20:36:47,217 INFO L87 Difference]: Start difference. First operand 5704 states and 8003 transitions. Second operand has 9 states, 9 states have (on average 10.222222222222221) internal successors, (92), 5 states have internal predecessors, (92), 2 states have call successors, (14), 6 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-11-02 20:36:49,489 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:51,520 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:53,541 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:36:57,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:36:57,493 INFO L93 Difference]: Finished difference Result 9240 states and 13053 transitions. [2022-11-02 20:36:57,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-02 20:36:57,494 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.222222222222221) internal successors, (92), 5 states have internal predecessors, (92), 2 states have call successors, (14), 6 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 138 [2022-11-02 20:36:57,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:36:57,522 INFO L225 Difference]: With dead ends: 9240 [2022-11-02 20:36:57,522 INFO L226 Difference]: Without dead ends: 3553 [2022-11-02 20:36:57,541 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-11-02 20:36:57,542 INFO L413 NwaCegarLoop]: 894 mSDtfsCounter, 488 mSDsluCounter, 3536 mSDsCounter, 0 mSdLazyCounter, 1674 mSolverCounterSat, 518 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 511 SdHoareTripleChecker+Valid, 4430 SdHoareTripleChecker+Invalid, 2195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 518 IncrementalHoareTripleChecker+Valid, 1674 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:36:57,542 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [511 Valid, 4430 Invalid, 2195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [518 Valid, 1674 Invalid, 3 Unknown, 0 Unchecked, 10.0s Time] [2022-11-02 20:36:57,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3553 states. [2022-11-02 20:36:57,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3553 to 2926. [2022-11-02 20:36:57,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2926 states, 2183 states have (on average 1.3518094365551994) internal successors, (2951), 2226 states have internal predecessors, (2951), 540 states have call successors, (540), 188 states have call predecessors, (540), 202 states have return successors, (598), 527 states have call predecessors, (598), 539 states have call successors, (598) [2022-11-02 20:36:57,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2926 states to 2926 states and 4089 transitions. [2022-11-02 20:36:57,724 INFO L78 Accepts]: Start accepts. Automaton has 2926 states and 4089 transitions. Word has length 138 [2022-11-02 20:36:57,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:36:57,726 INFO L495 AbstractCegarLoop]: Abstraction has 2926 states and 4089 transitions. [2022-11-02 20:36:57,727 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 10.222222222222221) internal successors, (92), 5 states have internal predecessors, (92), 2 states have call successors, (14), 6 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-11-02 20:36:57,727 INFO L276 IsEmpty]: Start isEmpty. Operand 2926 states and 4089 transitions. [2022-11-02 20:36:57,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2022-11-02 20:36:57,736 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:36:57,736 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:36:57,736 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-02 20:36:57,737 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:36:57,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:36:57,737 INFO L85 PathProgramCache]: Analyzing trace with hash 874391015, now seen corresponding path program 1 times [2022-11-02 20:36:57,738 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:36:57,738 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1859145671] [2022-11-02 20:36:57,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:36:57,738 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:36:57,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:36:58,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:36:58,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:36:58,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:36:58,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-02 20:36:58,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-02 20:36:58,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-02 20:36:58,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-02 20:36:58,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-02 20:36:58,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-02 20:36:58,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:58,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-11-02 20:36:58,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:58,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:58,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:36:58,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:36:59,001 INFO L134 CoverageAnalysis]: Checked inductivity of 96 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 77 trivial. 0 not checked. [2022-11-02 20:36:59,002 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:36:59,002 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1859145671] [2022-11-02 20:36:59,002 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1859145671] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:36:59,002 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:36:59,003 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-02 20:36:59,003 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1018586123] [2022-11-02 20:36:59,003 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:36:59,004 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-02 20:36:59,004 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:36:59,004 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-02 20:36:59,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-11-02 20:36:59,005 INFO L87 Difference]: Start difference. First operand 2926 states and 4089 transitions. Second operand has 9 states, 9 states have (on average 10.666666666666666) internal successors, (96), 4 states have internal predecessors, (96), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2022-11-02 20:37:01,270 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:37:05,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:37:05,944 INFO L93 Difference]: Finished difference Result 6300 states and 9026 transitions. [2022-11-02 20:37:05,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-02 20:37:05,945 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.666666666666666) internal successors, (96), 4 states have internal predecessors, (96), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) Word has length 144 [2022-11-02 20:37:05,947 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:37:05,969 INFO L225 Difference]: With dead ends: 6300 [2022-11-02 20:37:05,970 INFO L226 Difference]: Without dead ends: 3416 [2022-11-02 20:37:05,984 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-02 20:37:05,985 INFO L413 NwaCegarLoop]: 922 mSDtfsCounter, 212 mSDsluCounter, 3663 mSDsCounter, 0 mSdLazyCounter, 1716 mSolverCounterSat, 180 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 235 SdHoareTripleChecker+Valid, 4585 SdHoareTripleChecker+Invalid, 1897 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 180 IncrementalHoareTripleChecker+Valid, 1716 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.6s IncrementalHoareTripleChecker+Time [2022-11-02 20:37:05,986 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [235 Valid, 4585 Invalid, 1897 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [180 Valid, 1716 Invalid, 1 Unknown, 0 Unchecked, 6.6s Time] [2022-11-02 20:37:05,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3416 states. [2022-11-02 20:37:06,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3416 to 3050. [2022-11-02 20:37:06,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3050 states, 2256 states have (on average 1.3457446808510638) internal successors, (3036), 2308 states have internal predecessors, (3036), 578 states have call successors, (578), 188 states have call predecessors, (578), 215 states have return successors, (671), 569 states have call predecessors, (671), 577 states have call successors, (671) [2022-11-02 20:37:06,213 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3050 states to 3050 states and 4285 transitions. [2022-11-02 20:37:06,214 INFO L78 Accepts]: Start accepts. Automaton has 3050 states and 4285 transitions. Word has length 144 [2022-11-02 20:37:06,215 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:37:06,215 INFO L495 AbstractCegarLoop]: Abstraction has 3050 states and 4285 transitions. [2022-11-02 20:37:06,216 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 10.666666666666666) internal successors, (96), 4 states have internal predecessors, (96), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2022-11-02 20:37:06,217 INFO L276 IsEmpty]: Start isEmpty. Operand 3050 states and 4285 transitions. [2022-11-02 20:37:06,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2022-11-02 20:37:06,229 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:37:06,229 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:37:06,229 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-02 20:37:06,229 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:37:06,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:37:06,230 INFO L85 PathProgramCache]: Analyzing trace with hash 1123820233, now seen corresponding path program 1 times [2022-11-02 20:37:06,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:37:06,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1457412528] [2022-11-02 20:37:06,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:37:06,231 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:37:06,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:07,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:37:07,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:07,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:37:07,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:07,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:37:07,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:07,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:37:08,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-02 20:37:08,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-02 20:37:08,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-02 20:37:08,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-02 20:37:08,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-02 20:37:08,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-02 20:37:08,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:08,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-11-02 20:37:08,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:08,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:08,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:37:08,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:08,323 INFO L134 CoverageAnalysis]: Checked inductivity of 96 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2022-11-02 20:37:08,323 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:37:08,324 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1457412528] [2022-11-02 20:37:08,324 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1457412528] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:37:08,324 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:37:08,324 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-02 20:37:08,324 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [375485096] [2022-11-02 20:37:08,325 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:37:08,325 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-02 20:37:08,325 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:37:08,326 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-02 20:37:08,326 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2022-11-02 20:37:08,326 INFO L87 Difference]: Start difference. First operand 3050 states and 4285 transitions. Second operand has 11 states, 11 states have (on average 9.090909090909092) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (16), 6 states have call predecessors, (16), 3 states have return successors, (15), 4 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-02 20:37:10,564 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:37:12,590 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:37:17,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:37:17,274 INFO L93 Difference]: Finished difference Result 6426 states and 9090 transitions. [2022-11-02 20:37:17,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-02 20:37:17,282 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 9.090909090909092) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (16), 6 states have call predecessors, (16), 3 states have return successors, (15), 4 states have call predecessors, (15), 2 states have call successors, (15) Word has length 151 [2022-11-02 20:37:17,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:37:17,314 INFO L225 Difference]: With dead ends: 6426 [2022-11-02 20:37:17,315 INFO L226 Difference]: Without dead ends: 3418 [2022-11-02 20:37:17,324 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-11-02 20:37:17,325 INFO L413 NwaCegarLoop]: 918 mSDtfsCounter, 319 mSDsluCounter, 5108 mSDsCounter, 0 mSdLazyCounter, 2173 mSolverCounterSat, 333 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 342 SdHoareTripleChecker+Valid, 6026 SdHoareTripleChecker+Invalid, 2508 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 333 IncrementalHoareTripleChecker+Valid, 2173 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.7s IncrementalHoareTripleChecker+Time [2022-11-02 20:37:17,326 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [342 Valid, 6026 Invalid, 2508 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [333 Valid, 2173 Invalid, 2 Unknown, 0 Unchecked, 8.7s Time] [2022-11-02 20:37:17,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3418 states. [2022-11-02 20:37:17,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3418 to 3074. [2022-11-02 20:37:17,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3074 states, 2274 states have (on average 1.3430079155672823) internal successors, (3054), 2324 states have internal predecessors, (3054), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2022-11-02 20:37:17,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3074 states to 3074 states and 4326 transitions. [2022-11-02 20:37:17,490 INFO L78 Accepts]: Start accepts. Automaton has 3074 states and 4326 transitions. Word has length 151 [2022-11-02 20:37:17,492 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:37:17,492 INFO L495 AbstractCegarLoop]: Abstraction has 3074 states and 4326 transitions. [2022-11-02 20:37:17,492 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 9.090909090909092) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (16), 6 states have call predecessors, (16), 3 states have return successors, (15), 4 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-02 20:37:17,492 INFO L276 IsEmpty]: Start isEmpty. Operand 3074 states and 4326 transitions. [2022-11-02 20:37:17,501 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2022-11-02 20:37:17,501 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:37:17,501 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:37:17,502 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-02 20:37:17,502 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:37:17,502 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:37:17,502 INFO L85 PathProgramCache]: Analyzing trace with hash -52186779, now seen corresponding path program 1 times [2022-11-02 20:37:17,503 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:37:17,503 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [219026348] [2022-11-02 20:37:17,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:37:17,503 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:37:18,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:37:18,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:37:18,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:37:18,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:37:18,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-02 20:37:18,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-02 20:37:18,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-02 20:37:18,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-02 20:37:18,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-02 20:37:18,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-02 20:37:18,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:18,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:37:18,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2022-11-02 20:37:18,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:18,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:18,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:37:18,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:18,914 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-11-02 20:37:18,915 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:37:18,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [219026348] [2022-11-02 20:37:18,915 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [219026348] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:37:18,915 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:37:18,915 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:37:18,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [590949148] [2022-11-02 20:37:18,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:37:18,916 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 20:37:18,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:37:18,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 20:37:18,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:37:18,917 INFO L87 Difference]: Start difference. First operand 3074 states and 4326 transitions. Second operand has 8 states, 8 states have (on average 12.125) internal successors, (97), 4 states have internal predecessors, (97), 2 states have call successors, (17), 6 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-02 20:37:21,148 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:37:23,184 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:37:26,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:37:26,317 INFO L93 Difference]: Finished difference Result 6466 states and 9148 transitions. [2022-11-02 20:37:26,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:37:26,318 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.125) internal successors, (97), 4 states have internal predecessors, (97), 2 states have call successors, (17), 6 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 157 [2022-11-02 20:37:26,318 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:37:26,338 INFO L225 Difference]: With dead ends: 6466 [2022-11-02 20:37:26,338 INFO L226 Difference]: Without dead ends: 3408 [2022-11-02 20:37:26,349 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-02 20:37:26,350 INFO L413 NwaCegarLoop]: 921 mSDtfsCounter, 323 mSDsluCounter, 2517 mSDsCounter, 0 mSdLazyCounter, 1153 mSolverCounterSat, 332 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 346 SdHoareTripleChecker+Valid, 3438 SdHoareTripleChecker+Invalid, 1487 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 332 IncrementalHoareTripleChecker+Valid, 1153 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:37:26,350 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [346 Valid, 3438 Invalid, 1487 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [332 Valid, 1153 Invalid, 2 Unknown, 0 Unchecked, 7.1s Time] [2022-11-02 20:37:26,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3408 states. [2022-11-02 20:37:26,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3408 to 3079. [2022-11-02 20:37:26,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3079 states, 2279 states have (on average 1.3422553751645458) internal successors, (3059), 2329 states have internal predecessors, (3059), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2022-11-02 20:37:26,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3079 states to 3079 states and 4331 transitions. [2022-11-02 20:37:26,519 INFO L78 Accepts]: Start accepts. Automaton has 3079 states and 4331 transitions. Word has length 157 [2022-11-02 20:37:26,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:37:26,520 INFO L495 AbstractCegarLoop]: Abstraction has 3079 states and 4331 transitions. [2022-11-02 20:37:26,520 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.125) internal successors, (97), 4 states have internal predecessors, (97), 2 states have call successors, (17), 6 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-02 20:37:26,521 INFO L276 IsEmpty]: Start isEmpty. Operand 3079 states and 4331 transitions. [2022-11-02 20:37:26,530 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2022-11-02 20:37:26,530 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:37:26,530 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:37:26,530 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-02 20:37:26,531 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:37:26,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:37:26,531 INFO L85 PathProgramCache]: Analyzing trace with hash -1205243631, now seen corresponding path program 1 times [2022-11-02 20:37:26,532 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:37:26,532 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1064822425] [2022-11-02 20:37:26,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:37:26,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:37:26,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:37:27,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:37:27,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:37:27,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:37:27,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-11-02 20:37:27,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-02 20:37:27,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-11-02 20:37:27,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-11-02 20:37:27,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-11-02 20:37:27,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-11-02 20:37:27,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:27,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:37:27,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2022-11-02 20:37:27,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:27,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:27,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:37:27,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:27,890 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-11-02 20:37:27,890 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:37:27,890 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1064822425] [2022-11-02 20:37:27,891 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1064822425] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:37:27,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [396812686] [2022-11-02 20:37:27,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:37:27,891 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:37:27,892 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:37:27,894 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:37:27,904 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-02 20:37:29,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:29,389 INFO L263 TraceCheckSpWp]: Trace formula consists of 2467 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-02 20:37:29,447 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:37:29,740 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-11-02 20:37:29,741 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 20:37:29,741 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [396812686] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:37:29,741 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 20:37:29,741 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [9] total 15 [2022-11-02 20:37:29,742 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [726965645] [2022-11-02 20:37:29,742 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:37:29,743 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 20:37:29,743 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:37:29,743 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 20:37:29,744 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2022-11-02 20:37:29,744 INFO L87 Difference]: Start difference. First operand 3079 states and 4331 transitions. Second operand has 8 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 4 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) [2022-11-02 20:37:30,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:37:30,222 INFO L93 Difference]: Finished difference Result 6120 states and 8615 transitions. [2022-11-02 20:37:30,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 20:37:30,223 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 4 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) Word has length 158 [2022-11-02 20:37:30,223 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:37:30,238 INFO L225 Difference]: With dead ends: 6120 [2022-11-02 20:37:30,239 INFO L226 Difference]: Without dead ends: 3084 [2022-11-02 20:37:30,249 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 195 GetRequests, 180 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=39, Invalid=233, Unknown=0, NotChecked=0, Total=272 [2022-11-02 20:37:30,250 INFO L413 NwaCegarLoop]: 945 mSDtfsCounter, 419 mSDsluCounter, 5148 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 503 SdHoareTripleChecker+Valid, 6093 SdHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:37:30,250 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [503 Valid, 6093 Invalid, 135 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:37:30,255 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3084 states. [2022-11-02 20:37:30,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3084 to 3079. [2022-11-02 20:37:30,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3079 states, 2279 states have (on average 1.3413777972795085) internal successors, (3057), 2329 states have internal predecessors, (3057), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2022-11-02 20:37:30,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3079 states to 3079 states and 4329 transitions. [2022-11-02 20:37:30,419 INFO L78 Accepts]: Start accepts. Automaton has 3079 states and 4329 transitions. Word has length 158 [2022-11-02 20:37:30,420 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:37:30,420 INFO L495 AbstractCegarLoop]: Abstraction has 3079 states and 4329 transitions. [2022-11-02 20:37:30,420 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 4 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) [2022-11-02 20:37:30,420 INFO L276 IsEmpty]: Start isEmpty. Operand 3079 states and 4329 transitions. [2022-11-02 20:37:30,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2022-11-02 20:37:30,429 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:37:30,430 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:37:30,483 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-02 20:37:30,649 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:37:30,650 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:37:30,650 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:37:30,650 INFO L85 PathProgramCache]: Analyzing trace with hash 1183320399, now seen corresponding path program 1 times [2022-11-02 20:37:30,650 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:37:30,650 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1228475156] [2022-11-02 20:37:30,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:37:30,651 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:37:30,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:37:31,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:37:31,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:37:31,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:37:31,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-11-02 20:37:31,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-02 20:37:31,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-11-02 20:37:31,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-11-02 20:37:31,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-11-02 20:37:31,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-11-02 20:37:31,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:31,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:37:31,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2022-11-02 20:37:31,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:31,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:31,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:37:31,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:31,872 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-11-02 20:37:31,872 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:37:31,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1228475156] [2022-11-02 20:37:31,873 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1228475156] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:37:31,873 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [624772789] [2022-11-02 20:37:31,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:37:31,873 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:37:31,874 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:37:31,875 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:37:31,905 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-02 20:37:32,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:32,953 INFO L263 TraceCheckSpWp]: Trace formula consists of 2468 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-02 20:37:32,962 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:37:33,082 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2022-11-02 20:37:33,083 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 20:37:33,083 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [624772789] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:37:33,083 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 20:37:33,083 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [9] total 13 [2022-11-02 20:37:33,084 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [48851790] [2022-11-02 20:37:33,084 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:37:33,085 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:37:33,085 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:37:33,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:37:33,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2022-11-02 20:37:33,086 INFO L87 Difference]: Start difference. First operand 3079 states and 4329 transitions. Second operand has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-02 20:37:33,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:37:33,508 INFO L93 Difference]: Finished difference Result 6115 states and 8606 transitions. [2022-11-02 20:37:33,509 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-02 20:37:33,509 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 158 [2022-11-02 20:37:33,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:37:33,525 INFO L225 Difference]: With dead ends: 6115 [2022-11-02 20:37:33,525 INFO L226 Difference]: Without dead ends: 3079 [2022-11-02 20:37:33,538 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 182 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-11-02 20:37:33,539 INFO L413 NwaCegarLoop]: 943 mSDtfsCounter, 430 mSDsluCounter, 3245 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 515 SdHoareTripleChecker+Valid, 4188 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 20:37:33,540 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [515 Valid, 4188 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 20:37:33,545 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3079 states. [2022-11-02 20:37:33,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3079 to 3079. [2022-11-02 20:37:33,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3079 states, 2279 states have (on average 1.3405002193944713) internal successors, (3055), 2329 states have internal predecessors, (3055), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2022-11-02 20:37:33,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3079 states to 3079 states and 4327 transitions. [2022-11-02 20:37:33,724 INFO L78 Accepts]: Start accepts. Automaton has 3079 states and 4327 transitions. Word has length 158 [2022-11-02 20:37:33,724 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:37:33,725 INFO L495 AbstractCegarLoop]: Abstraction has 3079 states and 4327 transitions. [2022-11-02 20:37:33,725 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-02 20:37:33,725 INFO L276 IsEmpty]: Start isEmpty. Operand 3079 states and 4327 transitions. [2022-11-02 20:37:33,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2022-11-02 20:37:33,735 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:37:33,735 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:37:33,781 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-02 20:37:33,949 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:37:33,949 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:37:33,950 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:37:33,950 INFO L85 PathProgramCache]: Analyzing trace with hash -538682287, now seen corresponding path program 1 times [2022-11-02 20:37:33,950 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:37:33,950 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1846629893] [2022-11-02 20:37:33,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:37:33,950 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:37:34,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:34,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:37:34,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:34,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:37:34,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:34,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:37:34,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:34,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:37:34,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-11-02 20:37:35,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-02 20:37:35,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-11-02 20:37:35,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-11-02 20:37:35,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-11-02 20:37:35,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-11-02 20:37:35,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:35,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:37:35,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2022-11-02 20:37:35,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:35,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:37:35,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:37:35,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:35,265 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-11-02 20:37:35,266 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:37:35,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1846629893] [2022-11-02 20:37:35,266 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1846629893] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:37:35,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1652249340] [2022-11-02 20:37:35,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:37:35,267 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:37:35,267 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:37:35,270 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:37:35,293 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-02 20:37:37,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:37:37,325 INFO L263 TraceCheckSpWp]: Trace formula consists of 2469 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-02 20:37:37,330 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:37:37,433 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 48 proven. 1 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-11-02 20:37:37,433 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 20:37:37,676 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-11-02 20:37:37,677 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1652249340] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 20:37:37,677 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 20:37:37,677 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2022-11-02 20:37:37,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [461274452] [2022-11-02 20:37:37,678 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 20:37:37,679 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-02 20:37:37,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:37:37,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-02 20:37:37,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=139, Unknown=0, NotChecked=0, Total=182 [2022-11-02 20:37:37,682 INFO L87 Difference]: Start difference. First operand 3079 states and 4327 transitions. Second operand has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2022-11-02 20:37:40,380 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:37:42,405 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:37:44,431 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:37:46,461 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:37:53,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:37:53,803 INFO L93 Difference]: Finished difference Result 6479 states and 9155 transitions. [2022-11-02 20:37:53,803 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-02 20:37:53,804 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 158 [2022-11-02 20:37:53,804 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:37:53,821 INFO L225 Difference]: With dead ends: 6479 [2022-11-02 20:37:53,822 INFO L226 Difference]: Without dead ends: 3415 [2022-11-02 20:37:53,832 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 359 GetRequests, 337 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=135, Invalid=371, Unknown=0, NotChecked=0, Total=506 [2022-11-02 20:37:53,832 INFO L413 NwaCegarLoop]: 918 mSDtfsCounter, 224 mSDsluCounter, 7010 mSDsCounter, 0 mSdLazyCounter, 3050 mSolverCounterSat, 186 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 247 SdHoareTripleChecker+Valid, 7928 SdHoareTripleChecker+Invalid, 3240 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 186 IncrementalHoareTripleChecker+Valid, 3050 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.4s IncrementalHoareTripleChecker+Time [2022-11-02 20:37:53,833 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [247 Valid, 7928 Invalid, 3240 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [186 Valid, 3050 Invalid, 4 Unknown, 0 Unchecked, 15.4s Time] [2022-11-02 20:37:53,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3415 states. [2022-11-02 20:37:54,069 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3415 to 3086. [2022-11-02 20:37:54,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3086 states, 2286 states have (on average 1.3394575678040246) internal successors, (3062), 2336 states have internal predecessors, (3062), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2022-11-02 20:37:54,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3086 states to 3086 states and 4334 transitions. [2022-11-02 20:37:54,088 INFO L78 Accepts]: Start accepts. Automaton has 3086 states and 4334 transitions. Word has length 158 [2022-11-02 20:37:54,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:37:54,089 INFO L495 AbstractCegarLoop]: Abstraction has 3086 states and 4334 transitions. [2022-11-02 20:37:54,089 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2022-11-02 20:37:54,090 INFO L276 IsEmpty]: Start isEmpty. Operand 3086 states and 4334 transitions. [2022-11-02 20:37:54,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2022-11-02 20:37:54,100 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:37:54,100 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:37:54,162 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-02 20:37:54,313 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:37:54,314 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:37:54,314 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:37:54,314 INFO L85 PathProgramCache]: Analyzing trace with hash -1478023259, now seen corresponding path program 2 times [2022-11-02 20:37:54,314 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:37:54,314 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1225108216] [2022-11-02 20:37:54,314 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:37:54,315 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:37:57,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:38:00,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:38:00,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:38:00,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:38:00,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-02 20:38:00,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-02 20:38:00,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-11-02 20:38:00,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-11-02 20:38:00,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-02 20:38:00,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2022-11-02 20:38:00,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:38:00,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:38:00,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:00,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-11-02 20:38:00,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:01,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:38:01,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:01,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:38:01,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:02,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:38:02,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:02,280 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 88 trivial. 0 not checked. [2022-11-02 20:38:02,281 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:38:02,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1225108216] [2022-11-02 20:38:02,281 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1225108216] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:38:02,281 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:38:02,281 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2022-11-02 20:38:02,281 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [868913023] [2022-11-02 20:38:02,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:38:02,282 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-11-02 20:38:02,282 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:38:02,282 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-11-02 20:38:02,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=302, Unknown=0, NotChecked=0, Total=342 [2022-11-02 20:38:02,283 INFO L87 Difference]: Start difference. First operand 3086 states and 4334 transitions. Second operand has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-02 20:38:05,109 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:07,146 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:09,169 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:17,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:38:17,786 INFO L93 Difference]: Finished difference Result 6457 states and 9213 transitions. [2022-11-02 20:38:17,787 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-02 20:38:17,787 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2022-11-02 20:38:17,788 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:38:17,806 INFO L225 Difference]: With dead ends: 6457 [2022-11-02 20:38:17,806 INFO L226 Difference]: Without dead ends: 3417 [2022-11-02 20:38:17,817 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=78, Invalid=522, Unknown=0, NotChecked=0, Total=600 [2022-11-02 20:38:17,818 INFO L413 NwaCegarLoop]: 925 mSDtfsCounter, 442 mSDsluCounter, 10270 mSDsCounter, 0 mSdLazyCounter, 4150 mSolverCounterSat, 481 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 465 SdHoareTripleChecker+Valid, 11195 SdHoareTripleChecker+Invalid, 4634 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 481 IncrementalHoareTripleChecker+Valid, 4150 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.9s IncrementalHoareTripleChecker+Time [2022-11-02 20:38:17,819 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [465 Valid, 11195 Invalid, 4634 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [481 Valid, 4150 Invalid, 3 Unknown, 0 Unchecked, 14.9s Time] [2022-11-02 20:38:17,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3417 states. [2022-11-02 20:38:18,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3417 to 3098. [2022-11-02 20:38:18,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3098 states, 2297 states have (on average 1.3352198519808445) internal successors, (3067), 2342 states have internal predecessors, (3067), 578 states have call successors, (578), 188 states have call predecessors, (578), 222 states have return successors, (698), 583 states have call predecessors, (698), 577 states have call successors, (698) [2022-11-02 20:38:18,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3098 states to 3098 states and 4343 transitions. [2022-11-02 20:38:18,024 INFO L78 Accepts]: Start accepts. Automaton has 3098 states and 4343 transitions. Word has length 161 [2022-11-02 20:38:18,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:38:18,024 INFO L495 AbstractCegarLoop]: Abstraction has 3098 states and 4343 transitions. [2022-11-02 20:38:18,025 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-02 20:38:18,025 INFO L276 IsEmpty]: Start isEmpty. Operand 3098 states and 4343 transitions. [2022-11-02 20:38:18,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 171 [2022-11-02 20:38:18,035 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:38:18,035 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:38:18,036 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-02 20:38:18,036 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:38:18,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:38:18,037 INFO L85 PathProgramCache]: Analyzing trace with hash 561002325, now seen corresponding path program 1 times [2022-11-02 20:38:18,037 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:38:18,037 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1327671420] [2022-11-02 20:38:18,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:38:18,037 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:38:18,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:20,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:38:20,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:20,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:38:20,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:20,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:38:20,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:38:21,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-02 20:38:21,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-02 20:38:21,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-11-02 20:38:21,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-11-02 20:38:21,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-02 20:38:21,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-02 20:38:21,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:38:21,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-11-02 20:38:21,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:38:21,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-02 20:38:21,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:21,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 20:38:21,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:22,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:38:22,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:22,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:38:22,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:22,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:38:22,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:23,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:38:23,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:23,349 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2022-11-02 20:38:23,349 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:38:23,349 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1327671420] [2022-11-02 20:38:23,349 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1327671420] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:38:23,350 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:38:23,350 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2022-11-02 20:38:23,350 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [389545560] [2022-11-02 20:38:23,350 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:38:23,350 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-02 20:38:23,351 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:38:23,351 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-02 20:38:23,351 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=237, Unknown=0, NotChecked=0, Total=272 [2022-11-02 20:38:23,352 INFO L87 Difference]: Start difference. First operand 3098 states and 4343 transitions. Second operand has 17 states, 17 states have (on average 6.411764705882353) internal successors, (109), 9 states have internal predecessors, (109), 2 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) [2022-11-02 20:38:25,989 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:28,024 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:36,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:38:36,090 INFO L93 Difference]: Finished difference Result 6469 states and 9208 transitions. [2022-11-02 20:38:36,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-02 20:38:36,091 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 6.411764705882353) internal successors, (109), 9 states have internal predecessors, (109), 2 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) Word has length 170 [2022-11-02 20:38:36,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:38:36,110 INFO L225 Difference]: With dead ends: 6469 [2022-11-02 20:38:36,111 INFO L226 Difference]: Without dead ends: 3417 [2022-11-02 20:38:36,121 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 59 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=59, Invalid=361, Unknown=0, NotChecked=0, Total=420 [2022-11-02 20:38:36,122 INFO L413 NwaCegarLoop]: 919 mSDtfsCounter, 437 mSDsluCounter, 9464 mSDsCounter, 0 mSdLazyCounter, 3852 mSolverCounterSat, 475 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 460 SdHoareTripleChecker+Valid, 10383 SdHoareTripleChecker+Invalid, 4329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 475 IncrementalHoareTripleChecker+Valid, 3852 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:38:36,123 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [460 Valid, 10383 Invalid, 4329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [475 Valid, 3852 Invalid, 2 Unknown, 0 Unchecked, 12.3s Time] [2022-11-02 20:38:36,128 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3417 states. [2022-11-02 20:38:36,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3417 to 3109. [2022-11-02 20:38:36,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3109 states, 2306 states have (on average 1.3326105810928013) internal successors, (3073), 2349 states have internal predecessors, (3073), 578 states have call successors, (578), 188 states have call predecessors, (578), 224 states have return successors, (701), 587 states have call predecessors, (701), 577 states have call successors, (701) [2022-11-02 20:38:36,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3109 states to 3109 states and 4352 transitions. [2022-11-02 20:38:36,380 INFO L78 Accepts]: Start accepts. Automaton has 3109 states and 4352 transitions. Word has length 170 [2022-11-02 20:38:36,380 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:38:36,380 INFO L495 AbstractCegarLoop]: Abstraction has 3109 states and 4352 transitions. [2022-11-02 20:38:36,381 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 6.411764705882353) internal successors, (109), 9 states have internal predecessors, (109), 2 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) [2022-11-02 20:38:36,381 INFO L276 IsEmpty]: Start isEmpty. Operand 3109 states and 4352 transitions. [2022-11-02 20:38:36,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2022-11-02 20:38:36,390 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:38:36,391 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:38:36,391 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-11-02 20:38:36,391 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:38:36,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:38:36,392 INFO L85 PathProgramCache]: Analyzing trace with hash 1195665736, now seen corresponding path program 1 times [2022-11-02 20:38:36,392 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:38:36,392 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [464159369] [2022-11-02 20:38:36,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:38:36,393 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:38:36,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:38:36,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:38:36,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:38:36,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:38:36,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-02 20:38:36,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-02 20:38:36,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-11-02 20:38:36,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-11-02 20:38:36,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-02 20:38:36,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2022-11-02 20:38:36,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:38:36,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-11-02 20:38:36,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-02 20:38:36,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-02 20:38:36,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-02 20:38:36,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:38:36,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:38:36,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:36,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:38:37,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:38:37,008 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2022-11-02 20:38:37,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:38:37,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [464159369] [2022-11-02 20:38:37,009 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [464159369] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:38:37,009 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:38:37,009 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:38:37,009 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1753137270] [2022-11-02 20:38:37,010 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:38:37,010 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:38:37,010 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:38:37,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:38:37,011 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:38:37,012 INFO L87 Difference]: Start difference. First operand 3109 states and 4352 transitions. Second operand has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-02 20:38:39,222 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:41,260 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:43,295 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:47,424 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:49,465 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:51,494 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-02 20:38:54,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:38:54,272 INFO L93 Difference]: Finished difference Result 7313 states and 10253 transitions. [2022-11-02 20:38:54,273 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:38:54,273 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 172 [2022-11-02 20:38:54,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:38:54,298 INFO L225 Difference]: With dead ends: 7313 [2022-11-02 20:38:54,298 INFO L226 Difference]: Without dead ends: 4250 [2022-11-02 20:38:54,309 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:38:54,310 INFO L413 NwaCegarLoop]: 1062 mSDtfsCounter, 817 mSDsluCounter, 2134 mSDsCounter, 0 mSdLazyCounter, 1324 mSolverCounterSat, 268 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 903 SdHoareTripleChecker+Valid, 3196 SdHoareTripleChecker+Invalid, 1598 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 268 IncrementalHoareTripleChecker+Valid, 1324 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.9s IncrementalHoareTripleChecker+Time [2022-11-02 20:38:54,310 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [903 Valid, 3196 Invalid, 1598 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [268 Valid, 1324 Invalid, 6 Unknown, 0 Unchecked, 16.9s Time] [2022-11-02 20:38:54,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4250 states. [2022-11-02 20:38:54,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4250 to 3968. [2022-11-02 20:38:54,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3968 states, 2966 states have (on average 1.3341200269723534) internal successors, (3957), 3018 states have internal predecessors, (3957), 704 states have call successors, (704), 248 states have call predecessors, (704), 297 states have return successors, (864), 719 states have call predecessors, (864), 703 states have call successors, (864) [2022-11-02 20:38:54,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3968 states to 3968 states and 5525 transitions. [2022-11-02 20:38:54,672 INFO L78 Accepts]: Start accepts. Automaton has 3968 states and 5525 transitions. Word has length 172 [2022-11-02 20:38:54,673 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:38:54,673 INFO L495 AbstractCegarLoop]: Abstraction has 3968 states and 5525 transitions. [2022-11-02 20:38:54,673 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-02 20:38:54,674 INFO L276 IsEmpty]: Start isEmpty. Operand 3968 states and 5525 transitions. [2022-11-02 20:38:54,686 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2022-11-02 20:38:54,686 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:38:54,686 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:38:54,686 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-02 20:38:54,687 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:38:54,687 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:38:54,687 INFO L85 PathProgramCache]: Analyzing trace with hash -1401601602, now seen corresponding path program 1 times [2022-11-02 20:38:54,688 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:38:54,688 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [279766436] [2022-11-02 20:38:54,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:38:54,688 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:38:55,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:38:55,310 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:38:56,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:38:57,119 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:38:57,119 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-02 20:38:57,121 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-02 20:38:57,124 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-02 20:38:57,128 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:38:57,135 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-02 20:38:57,197 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-02 20:38:57,235 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-02 20:38:57,236 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-02 20:38:57,236 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-02 20:38:57,236 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-02 20:38:57,237 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-02 20:38:57,238 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-02 20:38:57,239 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-02 20:38:57,240 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-02 20:38:57,240 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-02 20:38:57,240 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-02 20:38:57,524 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 08:38:57 BoogieIcfgContainer [2022-11-02 20:38:57,524 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-02 20:38:57,525 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-02 20:38:57,526 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-02 20:38:57,526 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-02 20:38:57,527 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:35:53" (3/4) ... [2022-11-02 20:38:57,531 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-11-02 20:38:57,531 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-02 20:38:57,533 INFO L158 Benchmark]: Toolchain (without parser) took 193311.46ms. Allocated memory was 127.9MB in the beginning and 897.6MB in the end (delta: 769.7MB). Free memory was 78.9MB in the beginning and 297.6MB in the end (delta: -218.7MB). Peak memory consumption was 550.8MB. Max. memory is 16.1GB. [2022-11-02 20:38:57,534 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 127.9MB. Free memory is still 106.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 20:38:57,534 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2675.34ms. Allocated memory was 127.9MB in the beginning and 169.9MB in the end (delta: 41.9MB). Free memory was 78.7MB in the beginning and 91.2MB in the end (delta: -12.4MB). Peak memory consumption was 61.2MB. Max. memory is 16.1GB. [2022-11-02 20:38:57,534 INFO L158 Benchmark]: Boogie Procedure Inliner took 204.42ms. Allocated memory is still 169.9MB. Free memory was 91.2MB in the beginning and 77.7MB in the end (delta: 13.5MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-11-02 20:38:57,535 INFO L158 Benchmark]: Boogie Preprocessor took 222.61ms. Allocated memory was 169.9MB in the beginning and 293.6MB in the end (delta: 123.7MB). Free memory was 77.7MB in the beginning and 223.2MB in the end (delta: -145.5MB). Peak memory consumption was 27.2MB. Max. memory is 16.1GB. [2022-11-02 20:38:57,538 INFO L158 Benchmark]: RCFGBuilder took 5961.21ms. Allocated memory is still 293.6MB. Free memory was 223.2MB in the beginning and 187.1MB in the end (delta: 36.1MB). Peak memory consumption was 119.8MB. Max. memory is 16.1GB. [2022-11-02 20:38:57,539 INFO L158 Benchmark]: TraceAbstraction took 184231.51ms. Allocated memory was 293.6MB in the beginning and 897.6MB in the end (delta: 604.0MB). Free memory was 186.1MB in the beginning and 297.6MB in the end (delta: -111.6MB). Peak memory consumption was 521.8MB. Max. memory is 16.1GB. [2022-11-02 20:38:57,540 INFO L158 Benchmark]: Witness Printer took 6.08ms. Allocated memory is still 897.6MB. Free memory is still 297.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 20:38:57,543 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 127.9MB. Free memory is still 106.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2675.34ms. Allocated memory was 127.9MB in the beginning and 169.9MB in the end (delta: 41.9MB). Free memory was 78.7MB in the beginning and 91.2MB in the end (delta: -12.4MB). Peak memory consumption was 61.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 204.42ms. Allocated memory is still 169.9MB. Free memory was 91.2MB in the beginning and 77.7MB in the end (delta: 13.5MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 222.61ms. Allocated memory was 169.9MB in the beginning and 293.6MB in the end (delta: 123.7MB). Free memory was 77.7MB in the beginning and 223.2MB in the end (delta: -145.5MB). Peak memory consumption was 27.2MB. Max. memory is 16.1GB. * RCFGBuilder took 5961.21ms. Allocated memory is still 293.6MB. Free memory was 223.2MB in the beginning and 187.1MB in the end (delta: 36.1MB). Peak memory consumption was 119.8MB. Max. memory is 16.1GB. * TraceAbstraction took 184231.51ms. Allocated memory was 293.6MB in the beginning and 897.6MB in the end (delta: 604.0MB). Free memory was 186.1MB in the beginning and 297.6MB in the end (delta: -111.6MB). Peak memory consumption was 521.8MB. Max. memory is 16.1GB. * Witness Printer took 6.08ms. Allocated memory is still 897.6MB. Free memory is still 297.6MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7323]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8887. Possible FailurePath: [L7346] int LDV_IN_INTERRUPT = 1; [L7347] struct usb_interface *mwifiex_usb_driver_group1 ; [L7348] int ldv_state_variable_2 ; [L7349] int ref_cnt ; [L7350] struct mwifiex_adapter *usb_ops_group0 ; [L7351] int ldv_state_variable_1 ; [L7352] int usb_counter ; [L7353] struct sk_buff *usb_ops_group1 ; [L7354] int ldv_state_variable_0 ; [L7514] static u8 user_rmmod ; [L7516] static struct semaphore add_remove_card_sem ; [L7517-L7527] static struct usb_device_id mwifiex_usb_table[5U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}, {3U, 4742U, 8261U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8262U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7528] struct usb_device_id const __mod_usb__mwifiex_usb_table_device_table ; [L8349-L8355] static struct usb_driver mwifiex_usb_driver = {"mwifiex_usb", & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1U}; [L8862-L8866] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0, 0}; [L8920] int ldv_retval_0 ; [L8921] int ldv_retval_4 ; [L8922] int ldv_retval_1 ; [L8926] int ldv_retval_3 ; [L8927] int ldv_retval_2 ; [L9241] Element set_impl[15] ; [L9242] int last_index = 0; [L9376] Set LDV_SKBS ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8951] u8 ldvarg1 ; [L8952] u8 tmp ; [L8953] struct mwifiex_tx_param *ldvarg0 ; [L8954] void *tmp___0 ; [L8955] struct mwifiex_fw_image *ldvarg2 ; [L8956] void *tmp___1 ; [L8957] struct usb_device_id *ldvarg4 ; [L8958] void *tmp___2 ; [L8959] pm_message_t ldvarg3 ; [L8960] int tmp___3 ; [L8961] int tmp___4 ; [L8962] int tmp___5 ; [L8963] int tmp___6 ; [L8965] tmp = __VERIFIER_nondet_u8() [L8966] ldvarg1 = tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=2, ldvarg3={182:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=4, tmp___0=-8, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] RET, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=2, ldvarg3={182:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] tmp___0 = ldv_zalloc(4UL) [L8968] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg3={182:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=-3, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=2, ldvarg3={182:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] tmp___1 = ldv_zalloc(32UL) [L8970] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=-4, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] tmp___2 = ldv_zalloc(32UL) [L8972] ldvarg4 = (struct usb_device_id *)tmp___2 [L8973] CALL ldv_initialize() [L9395] CALL ldv_set_init(LDV_SKBS) [L9247] set = set_impl [L9248] last_index = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={167:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9395] RET ldv_set_init(LDV_SKBS) [L8973] RET ldv_initialize() [L8974] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={182:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8975] ldv_state_variable_1 = 0 [L8976] ref_cnt = 0 [L8977] ldv_state_variable_0 = 1 [L8978] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: [L9068] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9069] COND TRUE ldv_state_variable_0 == 1 [L9070] CALL, EXPR mwifiex_usb_init_module() [L8869] int ret ; [L8870] struct _ddebug descriptor ; [L8871] long tmp ; [L8872] struct _ddebug descriptor___0 ; [L8873] long tmp___0 ; [L8875] descriptor.modname = "mwifiex_usb" [L8876] descriptor.function = "mwifiex_usb_init_module" [L8877] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8878] descriptor.format = "Marvell USB8797 Driver\n" [L8879] descriptor.lineno = 1046U [L8880] descriptor.flags = 0U [L8881] EXPR descriptor.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={185:0}, descriptor.flags=0, descriptor___0={171:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={185:0}, descriptor.flags=0, descriptor___0={171:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8882] COND FALSE !(tmp != 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={185:0}, descriptor___0={171:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8886] CALL sema_init(& add_remove_card_sem, 1) [L7359] struct lock_class_key __key ; [L7360] struct semaphore __constr_expr_0 ; [L7362] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7363] __constr_expr_0.lock.magic = 3735899821U [L7364] __constr_expr_0.lock.owner_cpu = 4294967295U [L7365] __constr_expr_0.lock.owner = (void *)-1 [L7366] __constr_expr_0.lock.dep_map.key = 0 [L7367] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7368] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7369] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7370] __constr_expr_0.lock.dep_map.cpu = 0 [L7371] __constr_expr_0.lock.dep_map.ip = 0UL [L7372] __constr_expr_0.count = (unsigned int )val [L7373] __constr_expr_0.wait_list.next = & sem->wait_list [L7374] __constr_expr_0.wait_list.prev = & sem->wait_list [L7375] *sem = __constr_expr_0 [L7376] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7377] return; [L7377] return; VAL [\old(val)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, sem={163:0}, sem={163:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0, val=1] [L8886] RET sema_init(& add_remove_card_sem, 1) [L8887] CALL, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L9221] ldv_func_ret_type ldv_func_res ; [L9222] int tmp ; [L9224] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9571] return __VERIFIER_nondet_int(); [L9224] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9224] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9225] ldv_func_res = tmp [L9226] ldv_state_variable_2 = 1 [L9227] usb_counter = 0 [L9228] CALL ldv_usb_driver_2() [L8930] void *tmp ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=1560, tmp___0=-5, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1560UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] tmp = ldv_zalloc(1560UL) [L8933] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9228] RET ldv_usb_driver_2() [L9229] return (ldv_func_res); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, ldv_func_arg1={165:0}, ldv_func_arg1={165:0}, ldv_func_arg2={4294967352:4294967321}, ldv_func_arg2={4294967352:4294967321}, ldv_func_arg3={156:0}, ldv_func_arg3={156:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8887] RET, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8887] ret = ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8888] COND FALSE !(ret != 0) [L8891] descriptor___0.modname = "mwifiex_usb" [L8892] descriptor___0.function = "mwifiex_usb_init_module" [L8893] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8894] descriptor___0.format = "info: Driver registered successfully!\n" [L8895] descriptor___0.lineno = 1054U [L8896] descriptor___0.flags = 0U [L8897] EXPR descriptor___0.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, descriptor={185:0}, descriptor___0={171:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, descriptor={185:0}, descriptor___0={171:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8898] COND FALSE !(tmp___0 != 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, descriptor={185:0}, descriptor___0={171:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8903] return (ret); [L8903] return (ret); [L8903] return (ret); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9070] RET, EXPR mwifiex_usb_init_module() [L9070] ldv_retval_0 = mwifiex_usb_init_module() [L9071] COND TRUE ldv_retval_0 == 0 [L9072] ldv_state_variable_0 = 3 [L9073] ldv_state_variable_1 = 1 [L9074] CALL ldv_initialize_mwifiex_if_ops_1() [L8939] void *tmp ; [L8940] void *tmp___0 ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=6864, tmp___0=-6, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(6864UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] tmp = ldv_zalloc(6864UL) [L8943] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=232, tmp___0=-7, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] tmp___0 = ldv_zalloc(232UL) [L8945] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9074] RET ldv_initialize_mwifiex_if_ops_1() [L9077] COND FALSE !(ldv_retval_0 != 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8983] COND TRUE ldv_state_variable_1 != 0 [L8984] tmp___4 = __VERIFIER_nondet_int() [L8986] case 0: [L8993] case 1: [L9000] case 2: [L9007] case 3: [L9014] case 4: [L9021] case 5: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9022] COND TRUE ldv_state_variable_1 == 1 [L9023] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8796] int ret ; [L8797] struct usb_card_rec *card ; [L8799] EXPR adapter->card [L8799] card = (struct usb_card_rec *)adapter->card [L8800] EXPR card->usb_boot_state VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->usb_boot_state=0, fw={0:0}, fw={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8800] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8812] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8393] struct usb_card_rec *card ; [L8394] int i ; [L8395] int tmp ; [L8396] int tmp___0 ; [L8398] EXPR adapter->card [L8398] card = (struct usb_card_rec *)adapter->card [L8399] card->rx_cmd.adapter = adapter [L8400] EXPR card->rx_cmd_ep [L8400] card->rx_cmd.ep = card->rx_cmd_ep [L8401] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7271] void *p ; [L7272] void *tmp ; [L7273] int tmp___0 ; [L7275] tmp___0 = __VERIFIER_nondet_int() [L7276] COND FALSE !(tmp___0 != 0) [L7279] tmp = malloc(size) [L7280] p = tmp VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551617:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551617:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7282] return (p); VAL [\old(size)=184, \result={-18446744073709551617:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551617:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, arg0=0, arg1=208, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] return ldv_malloc(sizeof(struct urb)); [L8401] RET, EXPR usb_alloc_urb(0, 208U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_alloc_urb(0, 208U)={-18446744073709551617:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8401] card->rx_cmd.urb = usb_alloc_urb(0, 208U) [L8402] EXPR card->rx_cmd.urb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->rx_cmd.urb={-18446744073709551617:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8402] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8407] CALL, EXPR ldv_dev_alloc_skb_14(2048U) VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND FALSE !(tmp___0 != 0) [L7296] EXPR, FCALL calloc(1UL, size) [L7296] tmp = calloc(1UL, size) [L7297] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7299] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551615:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, calloc(1UL, size)={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551615:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND FALSE !(! skb) [L9387] CALL ldv_set_add(LDV_SKBS, skb) [L9255] int i ; [L9257] i = 0 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9258] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9259] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9269] COND TRUE last_index < 15 [L9270] set_impl[last_index] = e [L9271] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, e={-18446744073709551615:0}, e={-18446744073709551615:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9387] RET ldv_set_add(LDV_SKBS, skb) [L9388] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551615:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={-18446744073709551615:0}, tmp___7={-18446744073709551615:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={-18446744073709551615:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=0, \old(length)=2048, \result={-18446744073709551615:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={-18446744073709551615:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] RET, EXPR ldv_dev_alloc_skb_14(2048U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, ldv_dev_alloc_skb_14(2048U)={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] card->rx_cmd.skb = ldv_dev_alloc_skb_14(2048U) [L8408] EXPR card->rx_cmd.skb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->rx_cmd.skb={-18446744073709551615:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8408] COND FALSE !((unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0)) [L8413] CALL, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, ctx={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7841] struct mwifiex_adapter *adapter ; [L7842] struct usb_card_rec *card ; [L7843] unsigned int tmp ; [L7844] int tmp___0 ; [L7846] EXPR ctx->adapter [L7846] adapter = ctx->adapter [L7847] EXPR adapter->card [L7847] card = (struct usb_card_rec *)adapter->card [L7848] EXPR card->rx_cmd_ep [L7848] EXPR ctx->ep VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={-18446744073709551615:0}, add_remove_card_sem={163:0}, card={167:-26}, card->rx_cmd_ep=257, ctx={167:0}, ctx={167:0}, ctx->ep=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7848] COND TRUE (int )card->rx_cmd_ep != (int )ctx->ep [L7849] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(last_index)=1, \old(size)=248, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp___0=-10, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND TRUE ! skb [L9385] return ((void *)0); VAL [\old(last_index)=1, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=1, \old(length)=2048, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={-18446744073709551615:0}, add_remove_card_sem={163:0}, card={167:-26}, ctx={167:0}, ctx={167:0}, last_index=1, ldv_dev_alloc_skb_14((unsigned int )size)={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] ctx->skb = ldv_dev_alloc_skb_14((unsigned int )size) [L7850] EXPR ctx->skb VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={-18446744073709551615:0}, add_remove_card_sem={163:0}, card={167:-26}, ctx={167:0}, ctx={167:0}, ctx->skb={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7850] COND TRUE (unsigned long )ctx->skb == (unsigned long )((struct sk_buff *)0) [L7851] adapter->dev [L7853] return (-12); VAL [\old(last_index)=1, \old(size)=2048, \result=-12, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={-18446744073709551615:0}, add_remove_card_sem={163:0}, card={167:-26}, ctx={167:0}, ctx={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] RET, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048)=-12, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] tmp = mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) [L8414] COND TRUE tmp != 0 [L8415] return (-1); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=-12, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8812] RET, EXPR mwifiex_usb_rx_init(adapter) [L8812] ret = mwifiex_usb_rx_init(adapter) [L8813] COND FALSE !(ret == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=-1, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8817] return (ret); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=-1, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9023] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L9024] ldv_state_variable_1 = 1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9061] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L9062] CALL mwifiex_usb_cleanup_module() [L8908] int tmp ; [L8910] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9477] return __VERIFIER_nondet_int(); [L8910] RET, EXPR down_interruptible(& add_remove_card_sem) [L8910] tmp = down_interruptible(& add_remove_card_sem) [L8911] COND FALSE !(tmp == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8915] user_rmmod = 1U [L8916] CALL ldv_usb_deregister_18(& mwifiex_usb_driver) [L9235] FCALL usb_deregister(arg) [L9236] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, arg={165:0}, arg={165:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L8916] RET ldv_usb_deregister_18(& mwifiex_usb_driver) [L9062] RET mwifiex_usb_cleanup_module() [L9063] ldv_state_variable_0 = 2 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=2, ldvarg2={0:0}, ldvarg3={182:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=2, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9164] CALL ldv_check_final_state() [L9446] int tmp___7 ; [L9448] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L9337] return (last_index == 0); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9448] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L9448] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L9449] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp___7=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9451] CALL ldv_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L7323] reach_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967352:4294967321}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 39 procedures, 679 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 183.7s, OverallIterations: 15, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.2s, AutomataDifference: 145.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 37 mSolverCounterUnknown, 9792 SdHoareTripleChecker+Valid, 139.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8996 mSDsluCounter, 76034 SdHoareTripleChecker+Invalid, 130.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 62294 mSDsCounter, 5419 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 25119 IncrementalHoareTripleChecker+Invalid, 30575 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5419 mSolverCounterUnsat, 13740 mSDtfsCounter, 25119 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1160 GetRequests, 991 SyntacticMatches, 1 SemanticMatches, 168 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 204 ImplicationChecksByTransitivity, 4.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=5704occurred in iteration=4, InterpolantAutomatonStates: 138, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.2s AutomataMinimizationTime, 14 MinimizatonAttempts, 4695 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.6s SsaConstructionTime, 8.9s SatisfiabilityAnalysisTime, 20.0s InterpolantComputationTime, 2578 NumberOfCodeBlocks, 2578 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 2532 ConstructedInterpolants, 0 QuantifiedInterpolants, 5107 SizeOfPredicates, 17 NumberOfNonLiveVariables, 7404 ConjunctsInSsa, 79 ConjunctsInUnsatCore, 18 InterpolantComputations, 13 PerfectInterpolantSequences, 1547/1552 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-11-02 20:38:57,785 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 20:39:00,401 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 20:39:00,404 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 20:39:00,452 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 20:39:00,453 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 20:39:00,459 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 20:39:00,463 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 20:39:00,472 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 20:39:00,478 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 20:39:00,483 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 20:39:00,485 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 20:39:00,488 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 20:39:00,489 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 20:39:00,495 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 20:39:00,497 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 20:39:00,499 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 20:39:00,501 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 20:39:00,504 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 20:39:00,506 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 20:39:00,512 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 20:39:00,517 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 20:39:00,519 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 20:39:00,522 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 20:39:00,524 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 20:39:00,533 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 20:39:00,538 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 20:39:00,539 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 20:39:00,540 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 20:39:00,542 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 20:39:00,544 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 20:39:00,545 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 20:39:00,546 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 20:39:00,548 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 20:39:00,550 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 20:39:00,551 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 20:39:00,551 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 20:39:00,553 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 20:39:00,553 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 20:39:00,553 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 20:39:00,556 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 20:39:00,556 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 20:39:00,558 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-11-02 20:39:00,610 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 20:39:00,610 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 20:39:00,612 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 20:39:00,612 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 20:39:00,613 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-02 20:39:00,614 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-02 20:39:00,616 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 20:39:00,616 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 20:39:00,616 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 20:39:00,617 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 20:39:00,618 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 20:39:00,618 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-02 20:39:00,619 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-02 20:39:00,619 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-02 20:39:00,619 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-02 20:39:00,620 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-11-02 20:39:00,620 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-11-02 20:39:00,620 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 20:39:00,620 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 20:39:00,621 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-02 20:39:00,621 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 20:39:00,621 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 20:39:00,622 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-02 20:39:00,622 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:39:00,622 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 20:39:00,622 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-02 20:39:00,623 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-02 20:39:00,623 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-11-02 20:39:00,624 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-11-02 20:39:00,624 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-02 20:39:00,624 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-02 20:39:00,624 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-02 20:39:00,625 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-02 20:39:00,625 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2022-11-02 20:39:01,105 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 20:39:01,131 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 20:39:01,135 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 20:39:01,136 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 20:39:01,137 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 20:39:01,139 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-02 20:39:01,239 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/data/7007ec5b5/b58e5fccd4424624bd7682f7283c15b8/FLAG325eec90d [2022-11-02 20:39:02,459 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 20:39:02,460 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-02 20:39:02,503 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/data/7007ec5b5/b58e5fccd4424624bd7682f7283c15b8/FLAG325eec90d [2022-11-02 20:39:02,760 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/bin/uautomizer-Dbtcem3rbc/data/7007ec5b5/b58e5fccd4424624bd7682f7283c15b8 [2022-11-02 20:39:02,763 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 20:39:02,765 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 20:39:02,767 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 20:39:02,768 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 20:39:02,772 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 20:39:02,773 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:39:02" (1/1) ... [2022-11-02 20:39:02,775 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6f56e0b6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:39:02, skipping insertion in model container [2022-11-02 20:39:02,775 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:39:02" (1/1) ... [2022-11-02 20:39:02,784 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 20:39:02,996 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 20:39:04,159 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-11-02 20:39:04,907 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:39:04,965 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-11-02 20:39:05,040 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 20:39:05,244 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-11-02 20:39:05,459 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:39:05,490 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 20:39:05,911 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9240a12-e7a9-4087-b4d5-f7a93d8420c1/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-11-02 20:39:06,068 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:39:06,233 INFO L208 MainTranslator]: Completed translation [2022-11-02 20:39:06,234 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:39:06 WrapperNode [2022-11-02 20:39:06,235 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 20:39:06,236 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 20:39:06,237 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 20:39:06,237 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 20:39:06,246 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:39:06" (1/1) ... [2022-11-02 20:39:06,380 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:39:06" (1/1) ...