./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 11:10:51,196 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 11:10:51,198 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 11:10:51,245 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 11:10:51,245 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 11:10:51,246 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 11:10:51,248 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 11:10:51,250 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 11:10:51,255 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 11:10:51,261 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 11:10:51,263 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 11:10:51,266 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 11:10:51,267 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 11:10:51,269 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 11:10:51,272 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 11:10:51,274 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 11:10:51,276 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 11:10:51,277 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 11:10:51,282 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 11:10:51,287 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 11:10:51,288 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 11:10:51,290 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 11:10:51,293 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 11:10:51,294 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 11:10:51,304 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 11:10:51,304 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 11:10:51,304 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 11:10:51,306 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 11:10:51,306 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 11:10:51,307 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 11:10:51,308 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 11:10:51,308 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 11:10:51,309 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 11:10:51,310 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 11:10:51,311 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 11:10:51,311 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 11:10:51,312 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 11:10:51,312 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 11:10:51,312 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 11:10:51,313 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 11:10:51,314 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 11:10:51,317 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-11-16 11:10:51,362 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 11:10:51,362 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 11:10:51,363 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 11:10:51,363 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 11:10:51,364 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-16 11:10:51,364 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-16 11:10:51,365 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 11:10:51,365 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 11:10:51,365 INFO L138 SettingsManager]: * Use SBE=true [2022-11-16 11:10:51,365 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 11:10:51,366 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 11:10:51,366 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 11:10:51,367 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-16 11:10:51,367 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-16 11:10:51,367 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-16 11:10:51,367 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 11:10:51,367 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 11:10:51,367 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-16 11:10:51,368 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 11:10:51,368 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-16 11:10:51,368 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-16 11:10:51,368 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 11:10:51,368 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 11:10:51,368 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-16 11:10:51,369 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-16 11:10:51,369 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-16 11:10:51,370 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-16 11:10:51,370 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-16 11:10:51,371 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-16 11:10:51,371 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-16 11:10:51,371 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 [2022-11-16 11:10:51,660 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 11:10:51,697 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 11:10:51,701 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 11:10:51,702 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 11:10:51,703 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 11:10:51,704 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-16 11:10:51,788 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/data/f78fd0357/661ff879bad44dae80e1f260da0fddfd/FLAGf6e768d4d [2022-11-16 11:10:52,652 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 11:10:52,652 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-16 11:10:52,702 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/data/f78fd0357/661ff879bad44dae80e1f260da0fddfd/FLAGf6e768d4d [2022-11-16 11:10:53,215 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/data/f78fd0357/661ff879bad44dae80e1f260da0fddfd [2022-11-16 11:10:53,217 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 11:10:53,219 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 11:10:53,221 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 11:10:53,221 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 11:10:53,234 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 11:10:53,235 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 11:10:53" (1/1) ... [2022-11-16 11:10:53,237 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3ae87b67 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:53, skipping insertion in model container [2022-11-16 11:10:53,237 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 11:10:53" (1/1) ... [2022-11-16 11:10:53,246 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 11:10:53,411 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 11:10:54,685 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-11-16 11:10:55,332 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:10:55,366 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 11:10:55,592 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-11-16 11:10:55,796 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:10:55,963 INFO L208 MainTranslator]: Completed translation [2022-11-16 11:10:55,963 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55 WrapperNode [2022-11-16 11:10:55,965 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 11:10:55,966 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 11:10:55,967 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 11:10:55,967 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 11:10:55,975 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,054 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,210 INFO L138 Inliner]: procedures = 163, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 3077 [2022-11-16 11:10:56,211 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 11:10:56,213 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 11:10:56,213 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 11:10:56,213 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 11:10:56,223 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,223 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,253 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,254 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,418 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,449 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,470 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,482 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,506 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 11:10:56,506 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 11:10:56,507 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 11:10:56,507 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 11:10:56,517 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (1/1) ... [2022-11-16 11:10:56,536 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 11:10:56,548 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:10:56,574 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-16 11:10:56,592 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-16 11:10:56,628 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-11-16 11:10:56,628 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-11-16 11:10:56,628 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2022-11-16 11:10:56,628 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2022-11-16 11:10:56,629 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2022-11-16 11:10:56,629 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2022-11-16 11:10:56,629 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2022-11-16 11:10:56,629 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2022-11-16 11:10:56,629 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-16 11:10:56,629 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2022-11-16 11:10:56,629 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2022-11-16 11:10:56,629 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-16 11:10:56,630 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-16 11:10:56,630 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2022-11-16 11:10:56,630 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2022-11-16 11:10:56,630 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-16 11:10:56,630 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-16 11:10:56,630 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-16 11:10:56,630 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-11-16 11:10:56,630 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-11-16 11:10:56,631 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-16 11:10:56,631 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-16 11:10:56,631 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-11-16 11:10:56,631 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-11-16 11:10:56,631 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-16 11:10:56,631 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-16 11:10:56,632 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2022-11-16 11:10:56,632 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2022-11-16 11:10:56,632 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-11-16 11:10:56,632 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-11-16 11:10:56,632 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-16 11:10:56,632 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-16 11:10:56,632 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-11-16 11:10:56,633 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-11-16 11:10:56,633 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-11-16 11:10:56,633 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-11-16 11:10:56,633 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-16 11:10:56,633 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-16 11:10:56,634 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2022-11-16 11:10:56,634 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2022-11-16 11:10:56,634 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-16 11:10:56,634 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-16 11:10:56,634 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-16 11:10:56,634 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-16 11:10:56,635 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-16 11:10:56,635 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2022-11-16 11:10:56,635 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2022-11-16 11:10:56,635 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-11-16 11:10:56,635 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-11-16 11:10:56,635 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2022-11-16 11:10:56,636 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2022-11-16 11:10:56,636 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-16 11:10:56,636 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-16 11:10:56,636 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-11-16 11:10:56,636 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-11-16 11:10:56,637 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-16 11:10:56,637 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-16 11:10:56,638 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-16 11:10:56,639 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-16 11:10:56,639 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-16 11:10:56,640 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-11-16 11:10:56,640 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-11-16 11:10:56,640 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-16 11:10:56,640 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-16 11:10:56,641 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 11:10:56,641 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2022-11-16 11:10:56,641 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2022-11-16 11:10:56,641 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-11-16 11:10:56,641 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-11-16 11:10:56,642 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-16 11:10:56,642 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-16 11:10:56,643 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-11-16 11:10:56,643 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-11-16 11:10:56,643 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2022-11-16 11:10:56,643 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2022-11-16 11:10:56,643 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2022-11-16 11:10:56,643 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2022-11-16 11:10:56,643 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-16 11:10:56,643 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2022-11-16 11:10:56,644 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2022-11-16 11:10:56,644 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-11-16 11:10:56,644 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-11-16 11:10:56,644 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-16 11:10:56,645 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-16 11:10:56,645 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2022-11-16 11:10:56,645 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2022-11-16 11:10:56,645 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-11-16 11:10:56,645 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-11-16 11:10:56,645 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-11-16 11:10:56,645 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-11-16 11:10:56,646 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-16 11:10:56,646 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2022-11-16 11:10:56,646 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2022-11-16 11:10:56,646 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2022-11-16 11:10:56,647 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2022-11-16 11:10:56,647 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-11-16 11:10:56,648 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-11-16 11:10:56,648 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-16 11:10:56,648 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-16 11:10:56,648 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-16 11:10:56,649 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-16 11:10:56,649 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 11:10:56,649 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 11:10:56,649 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2022-11-16 11:10:56,649 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2022-11-16 11:10:57,373 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 11:10:57,379 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 11:10:57,898 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-16 11:10:58,914 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-11-16 11:11:02,828 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 11:11:02,841 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 11:11:02,841 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-16 11:11:02,844 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:11:02 BoogieIcfgContainer [2022-11-16 11:11:02,844 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 11:11:02,846 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-16 11:11:02,847 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-16 11:11:02,850 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-16 11:11:02,850 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.11 11:10:53" (1/3) ... [2022-11-16 11:11:02,852 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@38da601c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 11:11:02, skipping insertion in model container [2022-11-16 11:11:02,853 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:10:55" (2/3) ... [2022-11-16 11:11:02,854 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@38da601c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 11:11:02, skipping insertion in model container [2022-11-16 11:11:02,854 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:11:02" (3/3) ... [2022-11-16 11:11:02,856 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-16 11:11:02,877 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-16 11:11:02,878 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-16 11:11:02,990 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-16 11:11:02,997 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5f078b6a, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-16 11:11:02,997 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-16 11:11:03,013 INFO L276 IsEmpty]: Start isEmpty. Operand has 853 states, 629 states have (on average 1.3847376788553258) internal successors, (871), 655 states have internal predecessors, (871), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2022-11-16 11:11:03,040 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-16 11:11:03,041 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:11:03,041 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:11:03,042 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:11:03,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:11:03,047 INFO L85 PathProgramCache]: Analyzing trace with hash -2002313727, now seen corresponding path program 1 times [2022-11-16 11:11:03,060 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:11:03,061 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105375166] [2022-11-16 11:11:03,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:11:03,061 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:11:03,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:03,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:11:03,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:03,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:11:03,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:03,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:11:03,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:03,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:11:03,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:03,798 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-16 11:11:03,799 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:11:03,799 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2105375166] [2022-11-16 11:11:03,800 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2105375166] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:11:03,800 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:11:03,800 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:11:03,802 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [222499701] [2022-11-16 11:11:03,803 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:11:03,808 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:11:03,809 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:11:03,847 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:11:03,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:11:03,855 INFO L87 Difference]: Start difference. First operand has 853 states, 629 states have (on average 1.3847376788553258) internal successors, (871), 655 states have internal predecessors, (871), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-16 11:11:06,311 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:08,319 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:14,291 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:11:14,291 INFO L93 Difference]: Finished difference Result 2748 states and 4114 transitions. [2022-11-16 11:11:14,293 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 11:11:14,294 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 44 [2022-11-16 11:11:14,294 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:11:14,341 INFO L225 Difference]: With dead ends: 2748 [2022-11-16 11:11:14,341 INFO L226 Difference]: Without dead ends: 1876 [2022-11-16 11:11:14,355 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:11:14,359 INFO L413 NwaCegarLoop]: 1199 mSDtfsCounter, 1928 mSDsluCounter, 2043 mSDsCounter, 0 mSdLazyCounter, 1672 mSolverCounterSat, 982 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2078 SdHoareTripleChecker+Valid, 3242 SdHoareTripleChecker+Invalid, 2656 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 982 IncrementalHoareTripleChecker+Valid, 1672 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.9s IncrementalHoareTripleChecker+Time [2022-11-16 11:11:14,362 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2078 Valid, 3242 Invalid, 2656 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [982 Valid, 1672 Invalid, 2 Unknown, 0 Unchecked, 9.9s Time] [2022-11-16 11:11:14,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1876 states. [2022-11-16 11:11:14,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1876 to 1608. [2022-11-16 11:11:14,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1608 states, 1193 states have (on average 1.374685666387259) internal successors, (1640), 1225 states have internal predecessors, (1640), 332 states have call successors, (332), 83 states have call predecessors, (332), 82 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2022-11-16 11:11:14,574 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1608 states to 1608 states and 2299 transitions. [2022-11-16 11:11:14,576 INFO L78 Accepts]: Start accepts. Automaton has 1608 states and 2299 transitions. Word has length 44 [2022-11-16 11:11:14,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:11:14,577 INFO L495 AbstractCegarLoop]: Abstraction has 1608 states and 2299 transitions. [2022-11-16 11:11:14,577 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-16 11:11:14,578 INFO L276 IsEmpty]: Start isEmpty. Operand 1608 states and 2299 transitions. [2022-11-16 11:11:14,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-16 11:11:14,582 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:11:14,582 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:11:14,582 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-16 11:11:14,583 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:11:14,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:11:14,584 INFO L85 PathProgramCache]: Analyzing trace with hash 1296792476, now seen corresponding path program 1 times [2022-11-16 11:11:14,584 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:11:14,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [703935768] [2022-11-16 11:11:14,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:11:14,585 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:11:14,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:15,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:11:15,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:15,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:11:15,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:16,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:11:16,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:16,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:11:16,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:16,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-16 11:11:16,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:16,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-16 11:11:16,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:16,112 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-16 11:11:16,113 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:11:16,113 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [703935768] [2022-11-16 11:11:16,113 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [703935768] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:11:16,114 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:11:16,114 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-16 11:11:16,114 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1561268904] [2022-11-16 11:11:16,114 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:11:16,117 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-16 11:11:16,117 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:11:16,117 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 11:11:16,119 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:11:16,119 INFO L87 Difference]: Start difference. First operand 1608 states and 2299 transitions. Second operand has 8 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 3 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-16 11:11:18,567 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:20,585 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:27,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:11:27,265 INFO L93 Difference]: Finished difference Result 3820 states and 5608 transitions. [2022-11-16 11:11:27,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 11:11:27,266 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 3 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 61 [2022-11-16 11:11:27,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:11:27,280 INFO L225 Difference]: With dead ends: 3820 [2022-11-16 11:11:27,280 INFO L226 Difference]: Without dead ends: 2223 [2022-11-16 11:11:27,285 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2022-11-16 11:11:27,287 INFO L413 NwaCegarLoop]: 1493 mSDtfsCounter, 902 mSDsluCounter, 6523 mSDsCounter, 0 mSdLazyCounter, 2805 mSolverCounterSat, 467 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1028 SdHoareTripleChecker+Valid, 8016 SdHoareTripleChecker+Invalid, 3274 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 467 IncrementalHoareTripleChecker+Valid, 2805 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.7s IncrementalHoareTripleChecker+Time [2022-11-16 11:11:27,287 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1028 Valid, 8016 Invalid, 3274 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [467 Valid, 2805 Invalid, 2 Unknown, 0 Unchecked, 10.7s Time] [2022-11-16 11:11:27,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2223 states. [2022-11-16 11:11:27,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2223 to 1608. [2022-11-16 11:11:27,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1608 states, 1193 states have (on average 1.3738474434199497) internal successors, (1639), 1225 states have internal predecessors, (1639), 332 states have call successors, (332), 83 states have call predecessors, (332), 82 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2022-11-16 11:11:27,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1608 states to 1608 states and 2298 transitions. [2022-11-16 11:11:27,387 INFO L78 Accepts]: Start accepts. Automaton has 1608 states and 2298 transitions. Word has length 61 [2022-11-16 11:11:27,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:11:27,389 INFO L495 AbstractCegarLoop]: Abstraction has 1608 states and 2298 transitions. [2022-11-16 11:11:27,389 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 3 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-16 11:11:27,389 INFO L276 IsEmpty]: Start isEmpty. Operand 1608 states and 2298 transitions. [2022-11-16 11:11:27,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-16 11:11:27,394 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:11:27,395 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:11:27,395 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-16 11:11:27,395 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:11:27,397 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:11:27,400 INFO L85 PathProgramCache]: Analyzing trace with hash 1515647194, now seen corresponding path program 1 times [2022-11-16 11:11:27,401 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:11:27,401 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1165254271] [2022-11-16 11:11:27,402 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:11:27,402 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:11:27,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:28,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:11:28,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:28,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:11:28,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:28,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:11:28,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:28,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:11:28,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:28,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-16 11:11:28,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:28,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-16 11:11:28,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:28,157 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-16 11:11:28,157 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:11:28,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1165254271] [2022-11-16 11:11:28,157 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1165254271] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:11:28,157 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:11:28,158 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:11:28,159 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1534328714] [2022-11-16 11:11:28,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:11:28,160 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:11:28,160 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:11:28,161 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:11:28,163 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:11:28,164 INFO L87 Difference]: Start difference. First operand 1608 states and 2298 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:11:30,466 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:32,471 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:36,052 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:38,060 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:42,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:11:42,248 INFO L93 Difference]: Finished difference Result 5337 states and 7924 transitions. [2022-11-16 11:11:42,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 11:11:42,249 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-11-16 11:11:42,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:11:42,276 INFO L225 Difference]: With dead ends: 5337 [2022-11-16 11:11:42,276 INFO L226 Difference]: Without dead ends: 3740 [2022-11-16 11:11:42,284 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:11:42,285 INFO L413 NwaCegarLoop]: 1249 mSDtfsCounter, 1979 mSDsluCounter, 2092 mSDsCounter, 0 mSdLazyCounter, 1658 mSolverCounterSat, 979 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2108 SdHoareTripleChecker+Valid, 3341 SdHoareTripleChecker+Invalid, 2641 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 979 IncrementalHoareTripleChecker+Valid, 1658 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.7s IncrementalHoareTripleChecker+Time [2022-11-16 11:11:42,286 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2108 Valid, 3341 Invalid, 2641 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [979 Valid, 1658 Invalid, 4 Unknown, 0 Unchecked, 13.7s Time] [2022-11-16 11:11:42,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3740 states. [2022-11-16 11:11:42,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3740 to 3278. [2022-11-16 11:11:42,468 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3278 states, 2426 states have (on average 1.368507831821929) internal successors, (3320), 2496 states have internal predecessors, (3320), 671 states have call successors, (671), 165 states have call predecessors, (671), 180 states have return successors, (762), 642 states have call predecessors, (762), 666 states have call successors, (762) [2022-11-16 11:11:42,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3278 states to 3278 states and 4753 transitions. [2022-11-16 11:11:42,534 INFO L78 Accepts]: Start accepts. Automaton has 3278 states and 4753 transitions. Word has length 61 [2022-11-16 11:11:42,537 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:11:42,537 INFO L495 AbstractCegarLoop]: Abstraction has 3278 states and 4753 transitions. [2022-11-16 11:11:42,537 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:11:42,537 INFO L276 IsEmpty]: Start isEmpty. Operand 3278 states and 4753 transitions. [2022-11-16 11:11:42,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-11-16 11:11:42,539 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:11:42,539 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:11:42,540 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-16 11:11:42,540 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:11:42,541 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:11:42,542 INFO L85 PathProgramCache]: Analyzing trace with hash -259943975, now seen corresponding path program 1 times [2022-11-16 11:11:42,542 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:11:42,542 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539243085] [2022-11-16 11:11:42,542 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:11:42,542 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:11:42,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:43,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:11:43,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:43,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:11:43,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:43,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:11:43,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:43,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:11:43,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:43,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-16 11:11:43,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:43,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-16 11:11:43,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:43,238 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-16 11:11:43,238 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:11:43,238 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539243085] [2022-11-16 11:11:43,239 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539243085] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:11:43,239 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:11:43,239 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:11:43,239 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [986823646] [2022-11-16 11:11:43,239 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:11:43,240 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:11:43,240 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:11:43,241 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:11:43,241 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:11:43,241 INFO L87 Difference]: Start difference. First operand 3278 states and 4753 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:11:45,554 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:47,567 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:53,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:11:53,122 INFO L93 Difference]: Finished difference Result 10707 states and 16155 transitions. [2022-11-16 11:11:53,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 11:11:53,123 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 62 [2022-11-16 11:11:53,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:11:53,183 INFO L225 Difference]: With dead ends: 10707 [2022-11-16 11:11:53,183 INFO L226 Difference]: Without dead ends: 7440 [2022-11-16 11:11:53,200 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:11:53,203 INFO L413 NwaCegarLoop]: 1193 mSDtfsCounter, 2035 mSDsluCounter, 2024 mSDsCounter, 0 mSdLazyCounter, 1626 mSolverCounterSat, 999 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2174 SdHoareTripleChecker+Valid, 3217 SdHoareTripleChecker+Invalid, 2627 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 999 IncrementalHoareTripleChecker+Valid, 1626 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.4s IncrementalHoareTripleChecker+Time [2022-11-16 11:11:53,204 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2174 Valid, 3217 Invalid, 2627 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [999 Valid, 1626 Invalid, 2 Unknown, 0 Unchecked, 9.4s Time] [2022-11-16 11:11:53,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7440 states. [2022-11-16 11:11:53,663 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7440 to 6611. [2022-11-16 11:11:53,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6611 states, 4885 states have (on average 1.3637666325486182) internal successors, (6662), 5031 states have internal predecessors, (6662), 1349 states have call successors, (1349), 329 states have call predecessors, (1349), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2022-11-16 11:11:53,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6611 states to 6611 states and 9713 transitions. [2022-11-16 11:11:53,709 INFO L78 Accepts]: Start accepts. Automaton has 6611 states and 9713 transitions. Word has length 62 [2022-11-16 11:11:53,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:11:53,711 INFO L495 AbstractCegarLoop]: Abstraction has 6611 states and 9713 transitions. [2022-11-16 11:11:53,711 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:11:53,711 INFO L276 IsEmpty]: Start isEmpty. Operand 6611 states and 9713 transitions. [2022-11-16 11:11:53,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-16 11:11:53,715 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:11:53,716 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:11:53,716 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-16 11:11:53,716 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:11:53,716 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:11:53,717 INFO L85 PathProgramCache]: Analyzing trace with hash 531309501, now seen corresponding path program 1 times [2022-11-16 11:11:53,717 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:11:53,717 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1776610107] [2022-11-16 11:11:53,717 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:11:53,717 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:11:53,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:53,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:11:53,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:53,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:11:53,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:53,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:11:53,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:54,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:11:54,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:54,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-16 11:11:54,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:54,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-16 11:11:54,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:11:54,045 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-16 11:11:54,046 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:11:54,046 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1776610107] [2022-11-16 11:11:54,046 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1776610107] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:11:54,046 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:11:54,046 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:11:54,046 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1621140470] [2022-11-16 11:11:54,047 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:11:54,048 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:11:54,048 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:11:54,049 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:11:54,049 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:11:54,049 INFO L87 Difference]: Start difference. First operand 6611 states and 9713 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:11:56,328 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:11:58,339 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:03,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:12:03,945 INFO L93 Difference]: Finished difference Result 7438 states and 11140 transitions. [2022-11-16 11:12:03,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 11:12:03,946 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 63 [2022-11-16 11:12:03,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:12:03,996 INFO L225 Difference]: With dead ends: 7438 [2022-11-16 11:12:03,996 INFO L226 Difference]: Without dead ends: 7435 [2022-11-16 11:12:04,003 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:12:04,004 INFO L413 NwaCegarLoop]: 1209 mSDtfsCounter, 2018 mSDsluCounter, 2032 mSDsCounter, 0 mSdLazyCounter, 1629 mSolverCounterSat, 992 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2158 SdHoareTripleChecker+Valid, 3241 SdHoareTripleChecker+Invalid, 2623 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 992 IncrementalHoareTripleChecker+Valid, 1629 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.4s IncrementalHoareTripleChecker+Time [2022-11-16 11:12:04,004 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2158 Valid, 3241 Invalid, 2623 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [992 Valid, 1629 Invalid, 2 Unknown, 0 Unchecked, 9.4s Time] [2022-11-16 11:12:04,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7435 states. [2022-11-16 11:12:04,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7435 to 6612. [2022-11-16 11:12:04,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6612 states, 4886 states have (on average 1.3636921817437577) internal successors, (6663), 5032 states have internal predecessors, (6663), 1349 states have call successors, (1349), 329 states have call predecessors, (1349), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2022-11-16 11:12:04,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6612 states to 6612 states and 9714 transitions. [2022-11-16 11:12:04,524 INFO L78 Accepts]: Start accepts. Automaton has 6612 states and 9714 transitions. Word has length 63 [2022-11-16 11:12:04,524 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:12:04,525 INFO L495 AbstractCegarLoop]: Abstraction has 6612 states and 9714 transitions. [2022-11-16 11:12:04,526 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:12:04,526 INFO L276 IsEmpty]: Start isEmpty. Operand 6612 states and 9714 transitions. [2022-11-16 11:12:04,528 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-16 11:12:04,532 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:12:04,533 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:12:04,533 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-16 11:12:04,533 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:12:04,534 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:12:04,534 INFO L85 PathProgramCache]: Analyzing trace with hash -709631652, now seen corresponding path program 1 times [2022-11-16 11:12:04,534 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:12:04,534 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1215425503] [2022-11-16 11:12:04,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:12:04,535 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:12:04,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:04,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:12:04,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:04,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:12:04,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:04,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:12:04,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:04,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:12:04,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:04,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-16 11:12:04,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:04,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-16 11:12:04,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:04,861 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-16 11:12:04,861 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:12:04,861 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1215425503] [2022-11-16 11:12:04,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1215425503] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:12:04,862 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:12:04,862 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:12:04,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1509953760] [2022-11-16 11:12:04,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:12:04,863 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:12:04,863 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:12:04,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:12:04,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:12:04,864 INFO L87 Difference]: Start difference. First operand 6612 states and 9714 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:12:07,147 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:09,155 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:12,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:12:12,761 INFO L93 Difference]: Finished difference Result 7434 states and 11136 transitions. [2022-11-16 11:12:12,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 11:12:12,762 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 64 [2022-11-16 11:12:12,763 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:12:12,808 INFO L225 Difference]: With dead ends: 7434 [2022-11-16 11:12:12,808 INFO L226 Difference]: Without dead ends: 7431 [2022-11-16 11:12:12,814 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:12:12,815 INFO L413 NwaCegarLoop]: 1035 mSDtfsCounter, 1548 mSDsluCounter, 1090 mSDsCounter, 0 mSdLazyCounter, 916 mSolverCounterSat, 545 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1686 SdHoareTripleChecker+Valid, 2125 SdHoareTripleChecker+Invalid, 1463 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 545 IncrementalHoareTripleChecker+Valid, 916 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.5s IncrementalHoareTripleChecker+Time [2022-11-16 11:12:12,815 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1686 Valid, 2125 Invalid, 1463 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [545 Valid, 916 Invalid, 2 Unknown, 0 Unchecked, 7.5s Time] [2022-11-16 11:12:12,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7431 states. [2022-11-16 11:12:13,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7431 to 6611. [2022-11-16 11:12:13,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6611 states, 4886 states have (on average 1.3634875153499795) internal successors, (6662), 5031 states have internal predecessors, (6662), 1348 states have call successors, (1348), 329 states have call predecessors, (1348), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2022-11-16 11:12:13,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6611 states to 6611 states and 9712 transitions. [2022-11-16 11:12:13,302 INFO L78 Accepts]: Start accepts. Automaton has 6611 states and 9712 transitions. Word has length 64 [2022-11-16 11:12:13,303 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:12:13,303 INFO L495 AbstractCegarLoop]: Abstraction has 6611 states and 9712 transitions. [2022-11-16 11:12:13,303 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:12:13,303 INFO L276 IsEmpty]: Start isEmpty. Operand 6611 states and 9712 transitions. [2022-11-16 11:12:13,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-16 11:12:13,305 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:12:13,306 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:12:13,306 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-16 11:12:13,306 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:12:13,306 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:12:13,307 INFO L85 PathProgramCache]: Analyzing trace with hash -524096864, now seen corresponding path program 1 times [2022-11-16 11:12:13,307 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:12:13,307 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1645202769] [2022-11-16 11:12:13,307 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:12:13,307 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:12:13,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:13,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:12:13,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:13,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:12:13,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:13,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:12:13,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:13,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:12:13,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:13,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-16 11:12:13,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:13,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-16 11:12:13,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:13,626 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-16 11:12:13,626 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:12:13,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1645202769] [2022-11-16 11:12:13,627 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1645202769] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:12:13,627 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:12:13,627 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:12:13,627 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [228511472] [2022-11-16 11:12:13,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:12:13,628 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:12:13,629 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:12:13,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:12:13,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:12:13,630 INFO L87 Difference]: Start difference. First operand 6611 states and 9712 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:12:15,917 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:17,924 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:21,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:12:21,453 INFO L93 Difference]: Finished difference Result 7433 states and 11134 transitions. [2022-11-16 11:12:21,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 11:12:21,454 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 65 [2022-11-16 11:12:21,454 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:12:21,484 INFO L225 Difference]: With dead ends: 7433 [2022-11-16 11:12:21,484 INFO L226 Difference]: Without dead ends: 7401 [2022-11-16 11:12:21,493 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:12:21,494 INFO L413 NwaCegarLoop]: 1013 mSDtfsCounter, 1564 mSDsluCounter, 1082 mSDsCounter, 0 mSdLazyCounter, 892 mSolverCounterSat, 543 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1705 SdHoareTripleChecker+Valid, 2095 SdHoareTripleChecker+Invalid, 1437 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 543 IncrementalHoareTripleChecker+Valid, 892 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.4s IncrementalHoareTripleChecker+Time [2022-11-16 11:12:21,495 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1705 Valid, 2095 Invalid, 1437 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [543 Valid, 892 Invalid, 2 Unknown, 0 Unchecked, 7.4s Time] [2022-11-16 11:12:21,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7401 states. [2022-11-16 11:12:21,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7401 to 6581. [2022-11-16 11:12:21,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6581 states, 4859 states have (on average 1.36324346573369) internal successors, (6624), 5003 states have internal predecessors, (6624), 1345 states have call successors, (1345), 329 states have call predecessors, (1345), 376 states have return successors, (1696), 1302 states have call predecessors, (1696), 1342 states have call successors, (1696) [2022-11-16 11:12:22,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6581 states to 6581 states and 9665 transitions. [2022-11-16 11:12:22,025 INFO L78 Accepts]: Start accepts. Automaton has 6581 states and 9665 transitions. Word has length 65 [2022-11-16 11:12:22,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:12:22,027 INFO L495 AbstractCegarLoop]: Abstraction has 6581 states and 9665 transitions. [2022-11-16 11:12:22,027 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:12:22,027 INFO L276 IsEmpty]: Start isEmpty. Operand 6581 states and 9665 transitions. [2022-11-16 11:12:22,033 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-16 11:12:22,034 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:12:22,034 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:12:22,034 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-16 11:12:22,034 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:12:22,035 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:12:22,035 INFO L85 PathProgramCache]: Analyzing trace with hash -67737105, now seen corresponding path program 1 times [2022-11-16 11:12:22,035 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:12:22,035 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [282295051] [2022-11-16 11:12:22,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:12:22,035 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:12:22,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:22,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:12:22,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:22,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:12:22,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:22,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:12:22,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:22,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:12:22,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:22,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-16 11:12:22,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:22,295 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:12:22,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:22,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-16 11:12:22,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:22,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-16 11:12:22,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:22,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-11-16 11:12:22,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:22,328 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-16 11:12:22,328 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:12:22,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [282295051] [2022-11-16 11:12:22,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [282295051] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:12:22,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:12:22,329 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 11:12:22,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [186823361] [2022-11-16 11:12:22,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:12:22,329 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 11:12:22,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:12:22,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 11:12:22,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:12:22,331 INFO L87 Difference]: Start difference. First operand 6581 states and 9665 transitions. Second operand has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-16 11:12:24,593 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:26,597 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:28,609 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:35,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:12:35,970 INFO L93 Difference]: Finished difference Result 20425 states and 30360 transitions. [2022-11-16 11:12:35,977 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-16 11:12:35,977 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-11-16 11:12:35,977 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:12:36,044 INFO L225 Difference]: With dead ends: 20425 [2022-11-16 11:12:36,044 INFO L226 Difference]: Without dead ends: 13855 [2022-11-16 11:12:36,078 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2022-11-16 11:12:36,079 INFO L413 NwaCegarLoop]: 1353 mSDtfsCounter, 1937 mSDsluCounter, 3019 mSDsCounter, 0 mSdLazyCounter, 2464 mSolverCounterSat, 1201 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2074 SdHoareTripleChecker+Valid, 4372 SdHoareTripleChecker+Invalid, 3668 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1201 IncrementalHoareTripleChecker+Valid, 2464 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.6s IncrementalHoareTripleChecker+Time [2022-11-16 11:12:36,079 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2074 Valid, 4372 Invalid, 3668 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1201 Valid, 2464 Invalid, 3 Unknown, 0 Unchecked, 12.6s Time] [2022-11-16 11:12:36,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13855 states. [2022-11-16 11:12:36,992 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13855 to 12405. [2022-11-16 11:12:37,012 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12405 states, 9072 states have (on average 1.346009700176367) internal successors, (12211), 9391 states have internal predecessors, (12211), 2516 states have call successors, (2516), 623 states have call predecessors, (2516), 816 states have return successors, (3667), 2490 states have call predecessors, (3667), 2513 states have call successors, (3667) [2022-11-16 11:12:37,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12405 states to 12405 states and 18394 transitions. [2022-11-16 11:12:37,074 INFO L78 Accepts]: Start accepts. Automaton has 12405 states and 18394 transitions. Word has length 98 [2022-11-16 11:12:37,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:12:37,074 INFO L495 AbstractCegarLoop]: Abstraction has 12405 states and 18394 transitions. [2022-11-16 11:12:37,075 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-16 11:12:37,075 INFO L276 IsEmpty]: Start isEmpty. Operand 12405 states and 18394 transitions. [2022-11-16 11:12:37,084 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2022-11-16 11:12:37,084 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:12:37,084 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:12:37,085 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-16 11:12:37,085 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:12:37,085 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:12:37,086 INFO L85 PathProgramCache]: Analyzing trace with hash 1706032167, now seen corresponding path program 1 times [2022-11-16 11:12:37,086 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:12:37,086 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1071736025] [2022-11-16 11:12:37,086 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:12:37,086 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:12:37,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:37,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:12:37,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:37,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:12:37,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:37,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:12:37,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:37,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:12:37,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:37,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-16 11:12:37,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:37,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-16 11:12:37,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:37,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-16 11:12:37,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:37,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-16 11:12:37,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:37,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-11-16 11:12:37,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:38,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:12:38,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:38,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-16 11:12:38,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:38,266 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2022-11-16 11:12:38,268 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:12:38,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1071736025] [2022-11-16 11:12:38,268 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1071736025] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:12:38,268 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:12:38,269 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-16 11:12:38,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [90381242] [2022-11-16 11:12:38,269 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:12:38,269 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-16 11:12:38,270 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:12:38,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-16 11:12:38,271 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-11-16 11:12:38,271 INFO L87 Difference]: Start difference. First operand 12405 states and 18394 transitions. Second operand has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-16 11:12:40,632 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:42,639 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:44,648 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:50,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:12:50,467 INFO L93 Difference]: Finished difference Result 26195 states and 39029 transitions. [2022-11-16 11:12:50,467 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 11:12:50,467 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) Word has length 124 [2022-11-16 11:12:50,468 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:12:50,537 INFO L225 Difference]: With dead ends: 26195 [2022-11-16 11:12:50,537 INFO L226 Difference]: Without dead ends: 13812 [2022-11-16 11:12:50,591 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=56, Invalid=126, Unknown=0, NotChecked=0, Total=182 [2022-11-16 11:12:50,592 INFO L413 NwaCegarLoop]: 1035 mSDtfsCounter, 763 mSDsluCounter, 4457 mSDsCounter, 0 mSdLazyCounter, 2427 mSolverCounterSat, 702 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 788 SdHoareTripleChecker+Valid, 5492 SdHoareTripleChecker+Invalid, 3132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 702 IncrementalHoareTripleChecker+Valid, 2427 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:12:50,592 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [788 Valid, 5492 Invalid, 3132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [702 Valid, 2427 Invalid, 3 Unknown, 0 Unchecked, 11.2s Time] [2022-11-16 11:12:50,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13812 states. [2022-11-16 11:12:51,508 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13812 to 12425. [2022-11-16 11:12:51,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12425 states, 9088 states have (on average 1.345400528169014) internal successors, (12227), 9403 states have internal predecessors, (12227), 2520 states have call successors, (2520), 623 states have call predecessors, (2520), 816 states have return successors, (3671), 2498 states have call predecessors, (3671), 2517 states have call successors, (3671) [2022-11-16 11:12:51,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12425 states to 12425 states and 18418 transitions. [2022-11-16 11:12:51,590 INFO L78 Accepts]: Start accepts. Automaton has 12425 states and 18418 transitions. Word has length 124 [2022-11-16 11:12:51,590 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:12:51,591 INFO L495 AbstractCegarLoop]: Abstraction has 12425 states and 18418 transitions. [2022-11-16 11:12:51,591 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-16 11:12:51,591 INFO L276 IsEmpty]: Start isEmpty. Operand 12425 states and 18418 transitions. [2022-11-16 11:12:51,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2022-11-16 11:12:51,601 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:12:51,601 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:12:51,601 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-16 11:12:51,601 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:12:51,602 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:12:51,602 INFO L85 PathProgramCache]: Analyzing trace with hash 702147405, now seen corresponding path program 1 times [2022-11-16 11:12:51,602 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:12:51,602 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [469907355] [2022-11-16 11:12:51,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:12:51,603 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:12:51,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:12:52,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:12:52,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:12:52,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:12:52,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-16 11:12:52,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-16 11:12:52,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-16 11:12:52,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-16 11:12:52,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-11-16 11:12:52,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:12:52,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:12:52,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:12:52,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:12:52,503 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2022-11-16 11:12:52,503 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:12:52,503 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [469907355] [2022-11-16 11:12:52,504 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [469907355] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:12:52,504 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:12:52,504 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-16 11:12:52,504 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1011970191] [2022-11-16 11:12:52,504 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:12:52,505 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-16 11:12:52,505 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:12:52,505 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 11:12:52,506 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:12:52,506 INFO L87 Difference]: Start difference. First operand 12425 states and 18418 transitions. Second operand has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-16 11:12:54,883 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:56,894 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:12:58,900 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:13:04,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:13:04,839 INFO L93 Difference]: Finished difference Result 26216 states and 39014 transitions. [2022-11-16 11:13:04,839 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 11:13:04,839 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 130 [2022-11-16 11:13:04,840 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:13:04,897 INFO L225 Difference]: With dead ends: 26216 [2022-11-16 11:13:04,897 INFO L226 Difference]: Without dead ends: 13794 [2022-11-16 11:13:04,927 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-11-16 11:13:04,928 INFO L413 NwaCegarLoop]: 1043 mSDtfsCounter, 689 mSDsluCounter, 4225 mSDsCounter, 0 mSdLazyCounter, 2354 mSolverCounterSat, 684 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 714 SdHoareTripleChecker+Valid, 5268 SdHoareTripleChecker+Invalid, 3041 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 684 IncrementalHoareTripleChecker+Valid, 2354 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:13:04,928 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [714 Valid, 5268 Invalid, 3041 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [684 Valid, 2354 Invalid, 3 Unknown, 0 Unchecked, 11.3s Time] [2022-11-16 11:13:04,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13794 states. [2022-11-16 11:13:05,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13794 to 12434. [2022-11-16 11:13:05,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12434 states, 9097 states have (on average 1.3450588105969001) internal successors, (12236), 9412 states have internal predecessors, (12236), 2520 states have call successors, (2520), 623 states have call predecessors, (2520), 816 states have return successors, (3671), 2498 states have call predecessors, (3671), 2517 states have call successors, (3671) [2022-11-16 11:13:05,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12434 states to 12434 states and 18427 transitions. [2022-11-16 11:13:05,916 INFO L78 Accepts]: Start accepts. Automaton has 12434 states and 18427 transitions. Word has length 130 [2022-11-16 11:13:05,917 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:13:05,917 INFO L495 AbstractCegarLoop]: Abstraction has 12434 states and 18427 transitions. [2022-11-16 11:13:05,917 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-16 11:13:05,917 INFO L276 IsEmpty]: Start isEmpty. Operand 12434 states and 18427 transitions. [2022-11-16 11:13:05,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2022-11-16 11:13:05,929 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:13:05,929 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:13:05,930 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-16 11:13:05,930 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:13:05,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:13:05,931 INFO L85 PathProgramCache]: Analyzing trace with hash 1613372360, now seen corresponding path program 1 times [2022-11-16 11:13:05,931 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:13:05,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [762269419] [2022-11-16 11:13:05,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:13:05,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:13:06,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:13:06,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:13:06,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:13:06,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:13:06,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-16 11:13:06,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-16 11:13:06,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-11-16 11:13:06,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-16 11:13:06,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-11-16 11:13:06,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:13:06,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:13:06,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:13:06,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:06,841 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2022-11-16 11:13:06,842 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:13:06,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [762269419] [2022-11-16 11:13:06,842 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [762269419] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:13:06,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1421009015] [2022-11-16 11:13:06,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:13:06,843 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:13:06,843 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:13:06,846 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:13:06,877 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-16 11:13:07,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:07,716 INFO L263 TraceCheckSpWp]: Trace formula consists of 2201 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-16 11:13:07,727 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:13:07,824 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2022-11-16 11:13:07,830 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:13:07,830 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1421009015] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:13:07,830 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 11:13:07,831 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2022-11-16 11:13:07,831 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1554324726] [2022-11-16 11:13:07,831 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:13:07,832 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:13:07,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:13:07,832 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:13:07,833 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-11-16 11:13:07,834 INFO L87 Difference]: Start difference. First operand 12434 states and 18427 transitions. Second operand has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-16 11:13:08,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:13:08,622 INFO L93 Difference]: Finished difference Result 20268 states and 29941 transitions. [2022-11-16 11:13:08,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 11:13:08,622 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 131 [2022-11-16 11:13:08,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:13:08,673 INFO L225 Difference]: With dead ends: 20268 [2022-11-16 11:13:08,674 INFO L226 Difference]: Without dead ends: 7847 [2022-11-16 11:13:08,709 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-11-16 11:13:08,710 INFO L413 NwaCegarLoop]: 1191 mSDtfsCounter, 38 mSDsluCounter, 3564 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 4755 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:13:08,710 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 4755 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 11:13:08,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7847 states. [2022-11-16 11:13:09,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7847 to 7620. [2022-11-16 11:13:09,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7620 states, 5579 states have (on average 1.3403835812869689) internal successors, (7478), 5773 states have internal predecessors, (7478), 1533 states have call successors, (1533), 397 states have call predecessors, (1533), 507 states have return successors, (2172), 1510 states have call predecessors, (2172), 1530 states have call successors, (2172) [2022-11-16 11:13:09,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7620 states to 7620 states and 11183 transitions. [2022-11-16 11:13:09,432 INFO L78 Accepts]: Start accepts. Automaton has 7620 states and 11183 transitions. Word has length 131 [2022-11-16 11:13:09,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:13:09,432 INFO L495 AbstractCegarLoop]: Abstraction has 7620 states and 11183 transitions. [2022-11-16 11:13:09,432 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-16 11:13:09,433 INFO L276 IsEmpty]: Start isEmpty. Operand 7620 states and 11183 transitions. [2022-11-16 11:13:09,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2022-11-16 11:13:09,443 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:13:09,444 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:13:09,459 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-16 11:13:09,653 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-16 11:13:09,653 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:13:09,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:13:09,653 INFO L85 PathProgramCache]: Analyzing trace with hash -2080933725, now seen corresponding path program 1 times [2022-11-16 11:13:09,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:13:09,654 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1420420572] [2022-11-16 11:13:09,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:13:09,654 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:13:09,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:13:10,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:13:10,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:13:10,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:13:10,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-16 11:13:10,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-16 11:13:10,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-16 11:13:10,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-16 11:13:10,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-16 11:13:10,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-16 11:13:10,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:13:10,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:13:10,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:13:10,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:10,812 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2022-11-16 11:13:10,812 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:13:10,812 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1420420572] [2022-11-16 11:13:10,812 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1420420572] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:13:10,812 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:13:10,813 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-16 11:13:10,813 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1653829162] [2022-11-16 11:13:10,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:13:10,813 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-16 11:13:10,814 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:13:10,814 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-16 11:13:10,814 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-11-16 11:13:10,814 INFO L87 Difference]: Start difference. First operand 7620 states and 11183 transitions. Second operand has 10 states, 9 states have (on average 10.444444444444445) internal successors, (94), 5 states have internal predecessors, (94), 3 states have call successors, (14), 6 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-11-16 11:13:13,145 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:13:15,151 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:13:20,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:13:20,688 INFO L93 Difference]: Finished difference Result 14924 states and 22049 transitions. [2022-11-16 11:13:20,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-16 11:13:20,689 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 10.444444444444445) internal successors, (94), 5 states have internal predecessors, (94), 3 states have call successors, (14), 6 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) Word has length 137 [2022-11-16 11:13:20,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:13:20,747 INFO L225 Difference]: With dead ends: 14924 [2022-11-16 11:13:20,748 INFO L226 Difference]: Without dead ends: 8536 [2022-11-16 11:13:20,772 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-11-16 11:13:20,773 INFO L413 NwaCegarLoop]: 1278 mSDtfsCounter, 1358 mSDsluCounter, 5639 mSDsCounter, 0 mSdLazyCounter, 2702 mSolverCounterSat, 934 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1497 SdHoareTripleChecker+Valid, 6917 SdHoareTripleChecker+Invalid, 3638 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 934 IncrementalHoareTripleChecker+Valid, 2702 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:13:20,774 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1497 Valid, 6917 Invalid, 3638 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [934 Valid, 2702 Invalid, 2 Unknown, 0 Unchecked, 9.2s Time] [2022-11-16 11:13:20,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8536 states. [2022-11-16 11:13:21,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8536 to 7620. [2022-11-16 11:13:21,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7620 states, 5579 states have (on average 1.3396666069188026) internal successors, (7474), 5773 states have internal predecessors, (7474), 1533 states have call successors, (1533), 397 states have call predecessors, (1533), 507 states have return successors, (2172), 1510 states have call predecessors, (2172), 1530 states have call successors, (2172) [2022-11-16 11:13:21,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7620 states to 7620 states and 11179 transitions. [2022-11-16 11:13:21,605 INFO L78 Accepts]: Start accepts. Automaton has 7620 states and 11179 transitions. Word has length 137 [2022-11-16 11:13:21,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:13:21,605 INFO L495 AbstractCegarLoop]: Abstraction has 7620 states and 11179 transitions. [2022-11-16 11:13:21,606 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 10.444444444444445) internal successors, (94), 5 states have internal predecessors, (94), 3 states have call successors, (14), 6 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-11-16 11:13:21,606 INFO L276 IsEmpty]: Start isEmpty. Operand 7620 states and 11179 transitions. [2022-11-16 11:13:21,617 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2022-11-16 11:13:21,617 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:13:21,617 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:13:21,617 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-16 11:13:21,618 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:13:21,618 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:13:21,618 INFO L85 PathProgramCache]: Analyzing trace with hash -1241900063, now seen corresponding path program 1 times [2022-11-16 11:13:21,618 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:13:21,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [230958490] [2022-11-16 11:13:21,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:13:21,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:13:21,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:13:22,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:13:22,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:13:22,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:13:22,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-16 11:13:22,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-16 11:13:22,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-16 11:13:22,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-16 11:13:22,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-16 11:13:22,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-16 11:13:22,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:13:22,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:13:22,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:13:22,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:22,614 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-11-16 11:13:22,614 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:13:22,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [230958490] [2022-11-16 11:13:22,615 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [230958490] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:13:22,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1076162024] [2022-11-16 11:13:22,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:13:22,615 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:13:22,616 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:13:22,617 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:13:22,640 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-16 11:13:23,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:23,788 INFO L263 TraceCheckSpWp]: Trace formula consists of 2279 conjuncts, 60 conjunts are in the unsatisfiable core [2022-11-16 11:13:23,795 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:13:24,486 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 66 trivial. 0 not checked. [2022-11-16 11:13:24,486 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:13:24,486 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1076162024] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:13:24,486 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 11:13:24,487 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [9] total 21 [2022-11-16 11:13:24,487 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [86432667] [2022-11-16 11:13:24,487 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:13:24,488 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-16 11:13:24,488 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:13:24,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-16 11:13:24,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=378, Unknown=0, NotChecked=0, Total=420 [2022-11-16 11:13:24,489 INFO L87 Difference]: Start difference. First operand 7620 states and 11179 transitions. Second operand has 14 states, 13 states have (on average 7.076923076923077) internal successors, (92), 11 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2022-11-16 11:13:27,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:13:27,895 INFO L93 Difference]: Finished difference Result 16329 states and 24365 transitions. [2022-11-16 11:13:27,895 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-16 11:13:27,896 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 7.076923076923077) internal successors, (92), 11 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) Word has length 137 [2022-11-16 11:13:27,896 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:13:27,950 INFO L225 Difference]: With dead ends: 16329 [2022-11-16 11:13:27,950 INFO L226 Difference]: Without dead ends: 9941 [2022-11-16 11:13:27,978 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 113 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=114, Invalid=1076, Unknown=0, NotChecked=0, Total=1190 [2022-11-16 11:13:27,979 INFO L413 NwaCegarLoop]: 2406 mSDtfsCounter, 2563 mSDsluCounter, 28125 mSDsCounter, 0 mSdLazyCounter, 1183 mSolverCounterSat, 205 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2649 SdHoareTripleChecker+Valid, 30531 SdHoareTripleChecker+Invalid, 1388 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 205 IncrementalHoareTripleChecker+Valid, 1183 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-16 11:13:27,980 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2649 Valid, 30531 Invalid, 1388 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [205 Valid, 1183 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-11-16 11:13:27,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9941 states. [2022-11-16 11:13:28,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9941 to 7606. [2022-11-16 11:13:28,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7606 states, 5565 states have (on average 1.3392632524707997) internal successors, (7453), 5760 states have internal predecessors, (7453), 1533 states have call successors, (1533), 397 states have call predecessors, (1533), 507 states have return successors, (2172), 1509 states have call predecessors, (2172), 1530 states have call successors, (2172) [2022-11-16 11:13:28,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7606 states to 7606 states and 11158 transitions. [2022-11-16 11:13:28,824 INFO L78 Accepts]: Start accepts. Automaton has 7606 states and 11158 transitions. Word has length 137 [2022-11-16 11:13:28,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:13:28,824 INFO L495 AbstractCegarLoop]: Abstraction has 7606 states and 11158 transitions. [2022-11-16 11:13:28,825 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 7.076923076923077) internal successors, (92), 11 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2022-11-16 11:13:28,825 INFO L276 IsEmpty]: Start isEmpty. Operand 7606 states and 11158 transitions. [2022-11-16 11:13:28,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2022-11-16 11:13:28,836 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:13:28,836 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:13:28,853 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-16 11:13:29,052 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:13:29,053 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:13:29,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:13:29,053 INFO L85 PathProgramCache]: Analyzing trace with hash 1237780059, now seen corresponding path program 1 times [2022-11-16 11:13:29,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:13:29,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539082915] [2022-11-16 11:13:29,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:13:29,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:13:29,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:13:29,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:13:29,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:13:29,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:13:29,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-16 11:13:29,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:13:29,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-16 11:13:29,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:13:29,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-16 11:13:29,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-16 11:13:29,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-16 11:13:29,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-16 11:13:29,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2022-11-16 11:13:29,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2022-11-16 11:13:29,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:29,429 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-11-16 11:13:29,429 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:13:29,429 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539082915] [2022-11-16 11:13:29,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539082915] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:13:29,430 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:13:29,430 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 11:13:29,430 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1236267966] [2022-11-16 11:13:29,430 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:13:29,431 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 11:13:29,431 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:13:29,432 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 11:13:29,432 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:13:29,432 INFO L87 Difference]: Start difference. First operand 7606 states and 11158 transitions. Second operand has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-16 11:13:31,666 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:13:33,677 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:13:35,682 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:13:45,263 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:13:45,263 INFO L93 Difference]: Finished difference Result 22001 states and 33681 transitions. [2022-11-16 11:13:45,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-16 11:13:45,264 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 135 [2022-11-16 11:13:45,264 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:13:45,334 INFO L225 Difference]: With dead ends: 22001 [2022-11-16 11:13:45,334 INFO L226 Difference]: Without dead ends: 13833 [2022-11-16 11:13:45,363 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=88, Invalid=218, Unknown=0, NotChecked=0, Total=306 [2022-11-16 11:13:45,364 INFO L413 NwaCegarLoop]: 1398 mSDtfsCounter, 2581 mSDsluCounter, 3841 mSDsCounter, 0 mSdLazyCounter, 3186 mSolverCounterSat, 1711 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2736 SdHoareTripleChecker+Valid, 5239 SdHoareTripleChecker+Invalid, 4900 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1711 IncrementalHoareTripleChecker+Valid, 3186 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.4s IncrementalHoareTripleChecker+Time [2022-11-16 11:13:45,364 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2736 Valid, 5239 Invalid, 4900 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1711 Valid, 3186 Invalid, 3 Unknown, 0 Unchecked, 14.4s Time] [2022-11-16 11:13:45,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13833 states. [2022-11-16 11:13:46,617 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13833 to 11426. [2022-11-16 11:13:46,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11426 states, 8293 states have (on average 1.3351018931629084) internal successors, (11072), 8637 states have internal predecessors, (11072), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2022-11-16 11:13:46,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11426 states to 11426 states and 17613 transitions. [2022-11-16 11:13:46,686 INFO L78 Accepts]: Start accepts. Automaton has 11426 states and 17613 transitions. Word has length 135 [2022-11-16 11:13:46,686 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:13:46,687 INFO L495 AbstractCegarLoop]: Abstraction has 11426 states and 17613 transitions. [2022-11-16 11:13:46,687 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-16 11:13:46,687 INFO L276 IsEmpty]: Start isEmpty. Operand 11426 states and 17613 transitions. [2022-11-16 11:13:46,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2022-11-16 11:13:46,701 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:13:46,701 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:13:46,701 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-16 11:13:46,702 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:13:46,702 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:13:46,702 INFO L85 PathProgramCache]: Analyzing trace with hash 732056423, now seen corresponding path program 1 times [2022-11-16 11:13:46,702 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:13:46,703 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [141588905] [2022-11-16 11:13:46,703 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:13:46,703 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:13:46,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:13:47,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:13:47,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:13:47,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:13:47,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-16 11:13:47,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-16 11:13:47,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-16 11:13:47,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-16 11:13:47,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-16 11:13:47,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-16 11:13:47,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:13:47,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-16 11:13:47,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-11-16 11:13:47,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:13:47,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:13:47,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:13:47,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:13:47,235 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 82 trivial. 0 not checked. [2022-11-16 11:13:47,236 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:13:47,236 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [141588905] [2022-11-16 11:13:47,236 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [141588905] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:13:47,236 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:13:47,237 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-16 11:13:47,237 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2045109087] [2022-11-16 11:13:47,237 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:13:47,238 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-16 11:13:47,238 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:13:47,238 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 11:13:47,238 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:13:47,239 INFO L87 Difference]: Start difference. First operand 11426 states and 17613 transitions. Second operand has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-16 11:13:49,424 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:13:51,429 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:13:54,738 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:13:56,743 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:13:59,197 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:14:01,202 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:14:05,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:14:05,993 INFO L93 Difference]: Finished difference Result 29778 states and 46709 transitions. [2022-11-16 11:14:05,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 11:14:05,996 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 158 [2022-11-16 11:14:05,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:14:06,053 INFO L225 Difference]: With dead ends: 29778 [2022-11-16 11:14:06,053 INFO L226 Difference]: Without dead ends: 18394 [2022-11-16 11:14:06,089 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2022-11-16 11:14:06,089 INFO L413 NwaCegarLoop]: 1648 mSDtfsCounter, 2023 mSDsluCounter, 4245 mSDsCounter, 0 mSdLazyCounter, 2144 mSolverCounterSat, 1107 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2152 SdHoareTripleChecker+Valid, 5893 SdHoareTripleChecker+Invalid, 3257 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1107 IncrementalHoareTripleChecker+Valid, 2144 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:14:06,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2152 Valid, 5893 Invalid, 3257 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1107 Valid, 2144 Invalid, 6 Unknown, 0 Unchecked, 17.1s Time] [2022-11-16 11:14:06,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18394 states. [2022-11-16 11:14:07,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18394 to 11442. [2022-11-16 11:14:07,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11442 states, 8309 states have (on average 1.3344566133108677) internal successors, (11088), 8653 states have internal predecessors, (11088), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2022-11-16 11:14:07,290 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11442 states to 11442 states and 17629 transitions. [2022-11-16 11:14:07,294 INFO L78 Accepts]: Start accepts. Automaton has 11442 states and 17629 transitions. Word has length 158 [2022-11-16 11:14:07,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:14:07,295 INFO L495 AbstractCegarLoop]: Abstraction has 11442 states and 17629 transitions. [2022-11-16 11:14:07,295 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-16 11:14:07,295 INFO L276 IsEmpty]: Start isEmpty. Operand 11442 states and 17629 transitions. [2022-11-16 11:14:07,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 154 [2022-11-16 11:14:07,305 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:14:07,306 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:14:07,306 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-16 11:14:07,306 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:14:07,306 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:14:07,307 INFO L85 PathProgramCache]: Analyzing trace with hash 453916825, now seen corresponding path program 1 times [2022-11-16 11:14:07,307 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:14:07,307 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710057488] [2022-11-16 11:14:07,307 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:14:07,307 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:14:07,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:14:08,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:14:08,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:14:08,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-16 11:14:08,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-16 11:14:08,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-16 11:14:08,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-16 11:14:08,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-16 11:14:08,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-16 11:14:08,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-16 11:14:08,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:14:08,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:14:08,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 11:14:08,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-16 11:14:08,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:14:08,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:08,452 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 76 trivial. 0 not checked. [2022-11-16 11:14:08,452 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:14:08,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710057488] [2022-11-16 11:14:08,452 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1710057488] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:14:08,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [110578277] [2022-11-16 11:14:08,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:14:08,458 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:14:08,458 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:14:08,459 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:14:08,462 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-16 11:14:09,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:09,586 INFO L263 TraceCheckSpWp]: Trace formula consists of 2393 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-16 11:14:09,591 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:14:09,676 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 36 proven. 1 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-16 11:14:09,676 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 11:14:09,862 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 76 trivial. 0 not checked. [2022-11-16 11:14:09,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [110578277] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 11:14:09,863 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 11:14:09,863 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 5, 5] total 15 [2022-11-16 11:14:09,863 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1982093006] [2022-11-16 11:14:09,863 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 11:14:09,864 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-11-16 11:14:09,864 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:14:09,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-11-16 11:14:09,865 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=164, Unknown=0, NotChecked=0, Total=210 [2022-11-16 11:14:09,865 INFO L87 Difference]: Start difference. First operand 11442 states and 17629 transitions. Second operand has 15 states, 15 states have (on average 9.266666666666667) internal successors, (139), 10 states have internal predecessors, (139), 2 states have call successors, (38), 7 states have call predecessors, (38), 5 states have return successors, (28), 2 states have call predecessors, (28), 2 states have call successors, (28) [2022-11-16 11:14:12,413 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:14:18,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:14:18,925 INFO L93 Difference]: Finished difference Result 24423 states and 37702 transitions. [2022-11-16 11:14:18,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-16 11:14:18,925 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.266666666666667) internal successors, (139), 10 states have internal predecessors, (139), 2 states have call successors, (38), 7 states have call predecessors, (38), 5 states have return successors, (28), 2 states have call predecessors, (28), 2 states have call successors, (28) Word has length 153 [2022-11-16 11:14:18,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:14:18,971 INFO L225 Difference]: With dead ends: 24423 [2022-11-16 11:14:18,971 INFO L226 Difference]: Without dead ends: 12987 [2022-11-16 11:14:19,000 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 349 GetRequests, 325 SyntacticMatches, 1 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=157, Invalid=443, Unknown=0, NotChecked=0, Total=600 [2022-11-16 11:14:19,000 INFO L413 NwaCegarLoop]: 1018 mSDtfsCounter, 791 mSDsluCounter, 5707 mSDsCounter, 0 mSdLazyCounter, 2856 mSolverCounterSat, 721 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 816 SdHoareTripleChecker+Valid, 6725 SdHoareTripleChecker+Invalid, 3578 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 721 IncrementalHoareTripleChecker+Valid, 2856 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:14:19,000 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [816 Valid, 6725 Invalid, 3578 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [721 Valid, 2856 Invalid, 1 Unknown, 0 Unchecked, 7.3s Time] [2022-11-16 11:14:19,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12987 states. [2022-11-16 11:14:19,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12987 to 11453. [2022-11-16 11:14:19,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11453 states, 8320 states have (on average 1.334014423076923) internal successors, (11099), 8664 states have internal predecessors, (11099), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2022-11-16 11:14:19,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11453 states to 11453 states and 17640 transitions. [2022-11-16 11:14:20,000 INFO L78 Accepts]: Start accepts. Automaton has 11453 states and 17640 transitions. Word has length 153 [2022-11-16 11:14:20,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:14:20,001 INFO L495 AbstractCegarLoop]: Abstraction has 11453 states and 17640 transitions. [2022-11-16 11:14:20,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.266666666666667) internal successors, (139), 10 states have internal predecessors, (139), 2 states have call successors, (38), 7 states have call predecessors, (38), 5 states have return successors, (28), 2 states have call predecessors, (28), 2 states have call successors, (28) [2022-11-16 11:14:20,002 INFO L276 IsEmpty]: Start isEmpty. Operand 11453 states and 17640 transitions. [2022-11-16 11:14:20,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2022-11-16 11:14:20,012 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:14:20,012 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:14:20,025 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-16 11:14:20,225 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-11-16 11:14:20,225 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:14:20,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:14:20,226 INFO L85 PathProgramCache]: Analyzing trace with hash 686660894, now seen corresponding path program 2 times [2022-11-16 11:14:20,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:14:20,226 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [293079053] [2022-11-16 11:14:20,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:14:20,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:14:21,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-16 11:14:21,216 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-16 11:14:22,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-16 11:14:23,049 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-16 11:14:23,049 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-16 11:14:23,050 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-16 11:14:23,052 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-11-16 11:14:23,055 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:14:23,058 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-16 11:14:23,103 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-16 11:14:23,364 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.11 11:14:23 BoogieIcfgContainer [2022-11-16 11:14:23,364 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-16 11:14:23,365 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-16 11:14:23,365 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-16 11:14:23,365 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-16 11:14:23,366 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:11:02" (3/4) ... [2022-11-16 11:14:23,369 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-11-16 11:14:23,369 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-16 11:14:23,369 INFO L158 Benchmark]: Toolchain (without parser) took 210150.61ms. Allocated memory was 134.2MB in the beginning and 1.8GB in the end (delta: 1.7GB). Free memory was 86.6MB in the beginning and 830.8MB in the end (delta: -744.2MB). Peak memory consumption was 962.8MB. Max. memory is 16.1GB. [2022-11-16 11:14:23,370 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 134.2MB. Free memory was 107.3MB in the beginning and 107.3MB in the end (delta: 25.3kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 11:14:23,370 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2744.62ms. Allocated memory was 134.2MB in the beginning and 195.0MB in the end (delta: 60.8MB). Free memory was 86.6MB in the beginning and 100.3MB in the end (delta: -13.8MB). Peak memory consumption was 89.9MB. Max. memory is 16.1GB. [2022-11-16 11:14:23,370 INFO L158 Benchmark]: Boogie Procedure Inliner took 245.00ms. Allocated memory is still 195.0MB. Free memory was 100.3MB in the beginning and 82.6MB in the end (delta: 17.7MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-16 11:14:23,371 INFO L158 Benchmark]: Boogie Preprocessor took 292.83ms. Allocated memory is still 195.0MB. Free memory was 82.6MB in the beginning and 112.6MB in the end (delta: -30.0MB). Peak memory consumption was 17.2MB. Max. memory is 16.1GB. [2022-11-16 11:14:23,375 INFO L158 Benchmark]: RCFGBuilder took 6338.10ms. Allocated memory was 195.0MB in the beginning and 377.5MB in the end (delta: 182.5MB). Free memory was 112.6MB in the beginning and 245.8MB in the end (delta: -133.2MB). Peak memory consumption was 151.0MB. Max. memory is 16.1GB. [2022-11-16 11:14:23,375 INFO L158 Benchmark]: TraceAbstraction took 200518.10ms. Allocated memory was 377.5MB in the beginning and 1.8GB in the end (delta: 1.5GB). Free memory was 244.7MB in the beginning and 830.8MB in the end (delta: -586.1MB). Peak memory consumption was 1.2GB. Max. memory is 16.1GB. [2022-11-16 11:14:23,375 INFO L158 Benchmark]: Witness Printer took 3.98ms. Allocated memory is still 1.8GB. Free memory is still 830.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 11:14:23,384 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 134.2MB. Free memory was 107.3MB in the beginning and 107.3MB in the end (delta: 25.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2744.62ms. Allocated memory was 134.2MB in the beginning and 195.0MB in the end (delta: 60.8MB). Free memory was 86.6MB in the beginning and 100.3MB in the end (delta: -13.8MB). Peak memory consumption was 89.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 245.00ms. Allocated memory is still 195.0MB. Free memory was 100.3MB in the beginning and 82.6MB in the end (delta: 17.7MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 292.83ms. Allocated memory is still 195.0MB. Free memory was 82.6MB in the beginning and 112.6MB in the end (delta: -30.0MB). Peak memory consumption was 17.2MB. Max. memory is 16.1GB. * RCFGBuilder took 6338.10ms. Allocated memory was 195.0MB in the beginning and 377.5MB in the end (delta: 182.5MB). Free memory was 112.6MB in the beginning and 245.8MB in the end (delta: -133.2MB). Peak memory consumption was 151.0MB. Max. memory is 16.1GB. * TraceAbstraction took 200518.10ms. Allocated memory was 377.5MB in the beginning and 1.8GB in the end (delta: 1.5GB). Free memory was 244.7MB in the beginning and 830.8MB in the end (delta: -586.1MB). Peak memory consumption was 1.2GB. Max. memory is 16.1GB. * Witness Printer took 3.98ms. Allocated memory is still 1.8GB. Free memory is still 830.8MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7054]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8527, overapproximation of bitwiseAnd at line 8537. Possible FailurePath: [L8990] int SERIAL_STATE = 0; [L7077] int LDV_IN_INTERRUPT = 1; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7171] static struct usb_card_rec *usb_card ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8998] void (*completeFnBulk)(struct urb * ) ; [L7080] int ref_cnt ; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7083] int usb_counter ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8992] struct urb *usb_urb = 0; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8991] void *usb_intfdata = 0; [L7084] struct sk_buff *usb_ops_group1 ; [L8997] void (*completeFnInt)(struct urb * ) ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L8586] int ldv_retval_0 ; [L8588] int ldv_retval_1 ; [L8593] int ldv_retval_2 ; [L8592] int ldv_retval_3 ; [L8587] int ldv_retval_4 ; [L7170] static struct semaphore add_remove_card_sem ; [L8989] int INTERF_STATE = 0; [L8995] int completeFnIntCounter = 0; [L7079] int ldv_state_variable_2 ; [L8996] int completeFnBulkCounter = 0; [L7085] int ldv_state_variable_0 ; [L7082] int ldv_state_variable_1 ; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=59, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=59, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=59, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor.flags=0, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor.flags=0, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND FALSE !(tmp != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, sem={163:0}, sem={163:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={162:0}, ldv_func_arg1={162:0}, ldv_func_arg2={4294967312:4294967304}, ldv_func_arg2={4294967312:4294967304}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND FALSE !(tmp___0 != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8688] COND TRUE ldv_state_variable_1 == 1 [L8689] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8435] int ret ; [L8436] struct usb_card_rec *card ; [L8438] EXPR adapter->card [L8438] card = (struct usb_card_rec *)adapter->card [L8439] EXPR card->usb_boot_state VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, card->usb_boot_state=169, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8439] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8451] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8045] struct usb_card_rec *card ; [L8046] int i ; [L8047] int tmp ; [L8048] int tmp___0 ; [L8050] EXPR adapter->card [L8050] card = (struct usb_card_rec *)adapter->card [L8051] card->rx_cmd.adapter = adapter [L8052] EXPR card->rx_cmd_ep [L8052] card->rx_cmd.ep = card->rx_cmd_ep [L8053] CALL, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8936] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8938] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9021] struct urb *value ; [L9022] void *tmp ; [L9023] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND FALSE !(tmp___0 != 0) [L7010] tmp = malloc(size) [L7011] p = tmp VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7012] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L6998] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7012] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7013] return (p); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] tmp = ldv_malloc(sizeof(struct urb)) [L9026] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={-18446744073709551615:0}] [L9027] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7036] int tmp ; [L7038] tmp = __VERIFIER_nondet_int() [L7039] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9027] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_undef_int()=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={-18446744073709551615:0}] [L9027] tmp___0 = ldv_undef_int() [L9028] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={-18446744073709551615:0}] [L9029] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L9030] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}, value={-18446744073709551615:0}] [L9035] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}, value={-18446744073709551615:0}] [L8938] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8938] tmp = ldv_alloc_urb() [L8939] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8053] RET, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8053] card->rx_cmd.urb = ldv_usb_alloc_urb_17(0, 208U) [L8054] EXPR card->rx_cmd.urb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, card->rx_cmd.urb={-18446744073709551615:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8054] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8059] CALL, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L7104] struct sk_buff *tmp ; [L7106] CALL, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7096] struct sk_buff *tmp ; [L7098] CALL, EXPR __netdev_alloc_skb(dev, length, 32U) [L9240] CALL, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(size)=253, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND TRUE tmp___0 != 0 [L7008] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=253, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=253, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L9240] RET, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct sk_buff))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L9240] struct sk_buff *skb = ldv_malloc(sizeof(struct sk_buff)); [L9241] COND FALSE !(\read(*skb)) VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L9247] return skb; VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L7098] RET, EXPR __netdev_alloc_skb(dev, length, 32U) [L7098] tmp = __netdev_alloc_skb(dev, length, 32U) [L7099] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={0:0}, dev={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L7106] RET, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7106] tmp = netdev_alloc_skb((struct net_device *)0, length) [L7107] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8059] RET, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_alloc_skb(2048U)={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8059] card->rx_cmd.skb = dev_alloc_skb(2048U) [L8060] EXPR card->rx_cmd.skb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, card->rx_cmd.skb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8060] COND TRUE (unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0) [L8061] adapter->dev [L8062] return (-12); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8451] RET, EXPR mwifiex_usb_rx_init(adapter) [L8451] ret = mwifiex_usb_rx_init(adapter) [L8452] COND FALSE !(ret == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=-12, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8456] return (ret); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=-12, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8689] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8690] ldv_state_variable_1 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8727] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L8728] CALL mwifiex_usb_cleanup_module() [L8548] int tmp ; [L8549] struct mwifiex_adapter *adapter ; [L8550] int i ; [L8551] struct mwifiex_private *tmp___0 ; [L8553] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9262] return __VERIFIER_nondet_int(); [L8553] RET, EXPR down_interruptible(& add_remove_card_sem) [L8553] tmp = down_interruptible(& add_remove_card_sem) [L8554] COND FALSE !(tmp == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8558] COND FALSE !((unsigned long )usb_card != (unsigned long )((struct usb_card_rec *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8582] CALL ldv_usb_deregister_23(& mwifiex_usb_driver) [L8975] FCALL usb_deregister(arg) [L8976] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, arg={162:0}, arg={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8582] RET ldv_usb_deregister_23(& mwifiex_usb_driver) [L8728] RET mwifiex_usb_cleanup_module() [L8729] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8830] CALL ldv_check_final_state() [L9208] COND FALSE !((unsigned long )usb_urb == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L9210] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L7054] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 855 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 200.1s, OverallIterations: 17, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.2s, AutomataDifference: 168.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 37 mSolverCounterUnknown, 26401 SdHoareTripleChecker+Valid, 153.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 24717 mSDsluCounter, 100469 SdHoareTripleChecker+Invalid, 145.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 79708 mSDsCounter, 12779 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 30532 IncrementalHoareTripleChecker+Invalid, 43348 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 12779 mSolverCounterUnsat, 20761 mSDtfsCounter, 30532 mSolverCounterSat, 0.8s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1044 GetRequests, 862 SyntacticMatches, 1 SemanticMatches, 181 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 275 ImplicationChecksByTransitivity, 3.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=12434occurred in iteration=10, InterpolantAutomatonStates: 153, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 11.5s AutomataMinimizationTime, 16 MinimizatonAttempts, 23205 StatesRemovedByMinimization, 16 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.5s SsaConstructionTime, 3.8s SatisfiabilityAnalysisTime, 10.4s InterpolantComputationTime, 2200 NumberOfCodeBlocks, 2200 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 2177 ConstructedInterpolants, 0 QuantifiedInterpolants, 4423 SizeOfPredicates, 26 NumberOfNonLiveVariables, 6873 ConjunctsInSsa, 82 ConjunctsInUnsatCore, 20 InterpolantComputations, 15 PerfectInterpolantSequences, 1035/1040 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-11-16 11:14:23,529 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 11:14:25,720 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 11:14:25,722 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 11:14:25,742 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 11:14:25,743 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 11:14:25,744 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 11:14:25,745 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 11:14:25,747 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 11:14:25,749 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 11:14:25,750 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 11:14:25,751 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 11:14:25,752 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 11:14:25,753 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 11:14:25,754 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 11:14:25,755 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 11:14:25,756 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 11:14:25,757 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 11:14:25,758 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 11:14:25,760 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 11:14:25,762 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 11:14:25,763 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 11:14:25,765 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 11:14:25,766 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 11:14:25,767 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 11:14:25,771 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 11:14:25,779 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 11:14:25,780 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 11:14:25,781 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 11:14:25,781 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 11:14:25,782 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 11:14:25,782 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 11:14:25,783 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 11:14:25,784 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 11:14:25,786 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 11:14:25,787 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 11:14:25,790 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 11:14:25,791 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 11:14:25,791 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 11:14:25,792 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 11:14:25,793 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 11:14:25,794 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 11:14:25,796 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-11-16 11:14:25,833 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 11:14:25,833 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 11:14:25,834 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 11:14:25,834 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 11:14:25,835 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-16 11:14:25,835 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-16 11:14:25,836 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 11:14:25,836 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 11:14:25,836 INFO L138 SettingsManager]: * Use SBE=true [2022-11-16 11:14:25,836 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 11:14:25,837 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 11:14:25,837 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-16 11:14:25,837 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-16 11:14:25,837 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-16 11:14:25,837 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-16 11:14:25,838 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-11-16 11:14:25,838 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-11-16 11:14:25,838 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 11:14:25,838 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 11:14:25,838 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-16 11:14:25,839 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 11:14:25,839 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-16 11:14:25,839 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-16 11:14:25,839 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 11:14:25,840 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 11:14:25,840 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-16 11:14:25,840 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-16 11:14:25,840 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-11-16 11:14:25,840 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-11-16 11:14:25,841 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-16 11:14:25,841 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-16 11:14:25,841 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-16 11:14:25,841 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-16 11:14:25,842 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 [2022-11-16 11:14:26,229 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 11:14:26,251 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 11:14:26,253 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 11:14:26,255 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 11:14:26,256 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 11:14:26,257 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-16 11:14:26,340 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/data/58eb18363/d327f226e68e47999d4aea953c8e281b/FLAGb0486d551 [2022-11-16 11:14:27,299 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 11:14:27,300 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-16 11:14:27,348 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/data/58eb18363/d327f226e68e47999d4aea953c8e281b/FLAGb0486d551 [2022-11-16 11:14:27,768 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/data/58eb18363/d327f226e68e47999d4aea953c8e281b [2022-11-16 11:14:27,771 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 11:14:27,774 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 11:14:27,777 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 11:14:27,778 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 11:14:27,781 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 11:14:27,782 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 11:14:27" (1/1) ... [2022-11-16 11:14:27,784 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6975227d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:27, skipping insertion in model container [2022-11-16 11:14:27,784 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 11:14:27" (1/1) ... [2022-11-16 11:14:27,792 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 11:14:27,949 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 11:14:29,028 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-11-16 11:14:29,607 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:14:29,641 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-11-16 11:14:29,686 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 11:14:29,872 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-11-16 11:14:30,048 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:14:30,072 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 11:14:30,342 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-11-16 11:14:30,551 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:14:30,649 INFO L208 MainTranslator]: Completed translation [2022-11-16 11:14:30,650 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30 WrapperNode [2022-11-16 11:14:30,650 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 11:14:30,651 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 11:14:30,652 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 11:14:30,652 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 11:14:30,659 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:30,729 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:30,871 INFO L138 Inliner]: procedures = 178, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 2972 [2022-11-16 11:14:30,872 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 11:14:30,872 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 11:14:30,873 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 11:14:30,873 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 11:14:30,883 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:30,884 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:30,929 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:30,930 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:31,043 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:31,057 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:31,077 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:31,101 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:31,135 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 11:14:31,140 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 11:14:31,142 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 11:14:31,142 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 11:14:31,143 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (1/1) ... [2022-11-16 11:14:31,149 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 11:14:31,160 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:14:31,174 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-16 11:14:31,186 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-16 11:14:31,227 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-11-16 11:14:31,228 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-11-16 11:14:31,228 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2022-11-16 11:14:31,228 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2022-11-16 11:14:31,228 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2022-11-16 11:14:31,228 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2022-11-16 11:14:31,229 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-11-16 11:14:31,229 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2022-11-16 11:14:31,229 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2022-11-16 11:14:31,229 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2022-11-16 11:14:31,229 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2022-11-16 11:14:31,229 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-11-16 11:14:31,230 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-11-16 11:14:31,230 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-16 11:14:31,230 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-11-16 11:14:31,230 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-16 11:14:31,230 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2022-11-16 11:14:31,231 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2022-11-16 11:14:31,231 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-16 11:14:31,231 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-16 11:14:31,231 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-11-16 11:14:31,231 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-11-16 11:14:31,231 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-16 11:14:31,232 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-16 11:14:31,232 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-11-16 11:14:31,232 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-11-16 11:14:31,232 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-16 11:14:31,232 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-16 11:14:31,233 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2022-11-16 11:14:31,233 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2022-11-16 11:14:31,233 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-11-16 11:14:31,233 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-11-16 11:14:31,234 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-16 11:14:31,234 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-16 11:14:31,234 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-11-16 11:14:31,234 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-11-16 11:14:31,234 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-11-16 11:14:31,235 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-11-16 11:14:31,235 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-16 11:14:31,235 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-16 11:14:31,235 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2022-11-16 11:14:31,236 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2022-11-16 11:14:31,236 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-16 11:14:31,236 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-16 11:14:31,236 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-16 11:14:31,236 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-16 11:14:31,237 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2022-11-16 11:14:31,237 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2022-11-16 11:14:31,237 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2022-11-16 11:14:31,238 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-11-16 11:14:31,239 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-11-16 11:14:31,239 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2022-11-16 11:14:31,240 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2022-11-16 11:14:31,241 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2022-11-16 11:14:31,241 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2022-11-16 11:14:31,241 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2022-11-16 11:14:31,241 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-16 11:14:31,242 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-16 11:14:31,242 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-11-16 11:14:31,242 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-11-16 11:14:31,243 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-16 11:14:31,243 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-16 11:14:31,243 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-16 11:14:31,244 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-16 11:14:31,244 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-16 11:14:31,244 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-11-16 11:14:31,245 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-11-16 11:14:31,245 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-16 11:14:31,245 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-16 11:14:31,245 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 11:14:31,245 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2022-11-16 11:14:31,246 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2022-11-16 11:14:31,246 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-11-16 11:14:31,246 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-11-16 11:14:31,246 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-16 11:14:31,246 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-16 11:14:31,246 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2022-11-16 11:14:31,247 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2022-11-16 11:14:31,247 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-11-16 11:14:31,247 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-11-16 11:14:31,247 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2022-11-16 11:14:31,247 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2022-11-16 11:14:31,248 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2022-11-16 11:14:31,248 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2022-11-16 11:14:31,249 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2022-11-16 11:14:31,249 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-16 11:14:31,249 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2022-11-16 11:14:31,249 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2022-11-16 11:14:31,250 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-11-16 11:14:31,250 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-11-16 11:14:31,251 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-11-16 11:14:31,251 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-11-16 11:14:31,252 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-11-16 11:14:31,252 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-16 11:14:31,253 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-11-16 11:14:31,253 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-16 11:14:31,253 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2022-11-16 11:14:31,253 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-11-16 11:14:31,253 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-11-16 11:14:31,254 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-11-16 11:14:31,254 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2022-11-16 11:14:31,254 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2022-11-16 11:14:31,254 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-11-16 11:14:31,254 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-11-16 11:14:31,255 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-11-16 11:14:31,255 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-11-16 11:14:31,255 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2022-11-16 11:14:31,255 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2022-11-16 11:14:31,255 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2022-11-16 11:14:31,256 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2022-11-16 11:14:31,256 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2022-11-16 11:14:31,257 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-11-16 11:14:31,260 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-11-16 11:14:31,260 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-16 11:14:31,260 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-16 11:14:31,260 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-16 11:14:31,261 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 11:14:31,262 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 11:14:31,263 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2022-11-16 11:14:31,263 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2022-11-16 11:14:31,987 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 11:14:31,997 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 11:14:33,155 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-16 11:14:40,754 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-11-16 11:14:53,336 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 11:14:53,350 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 11:14:53,350 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-16 11:14:53,353 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:14:53 BoogieIcfgContainer [2022-11-16 11:14:53,353 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 11:14:53,356 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-16 11:14:53,356 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-16 11:14:53,359 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-16 11:14:53,359 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.11 11:14:27" (1/3) ... [2022-11-16 11:14:53,360 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@161fa933 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 11:14:53, skipping insertion in model container [2022-11-16 11:14:53,360 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:14:30" (2/3) ... [2022-11-16 11:14:53,360 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@161fa933 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 11:14:53, skipping insertion in model container [2022-11-16 11:14:53,360 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:14:53" (3/3) ... [2022-11-16 11:14:53,362 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-16 11:14:53,380 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-16 11:14:53,381 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-16 11:14:53,462 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-16 11:14:53,468 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@55e29d95, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-16 11:14:53,468 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-16 11:14:53,475 INFO L276 IsEmpty]: Start isEmpty. Operand has 853 states, 629 states have (on average 1.3847376788553258) internal successors, (871), 655 states have internal predecessors, (871), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2022-11-16 11:14:53,490 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-16 11:14:53,490 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:14:53,491 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:14:53,491 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:14:53,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:14:53,497 INFO L85 PathProgramCache]: Analyzing trace with hash -2002313727, now seen corresponding path program 1 times [2022-11-16 11:14:53,515 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:14:53,516 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1228521004] [2022-11-16 11:14:53,516 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:14:53,516 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:14:53,517 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:14:53,522 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:14:53,534 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-11-16 11:14:54,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:54,307 INFO L263 TraceCheckSpWp]: Trace formula consists of 741 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-16 11:14:54,315 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:14:54,510 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-16 11:14:54,510 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:14:54,511 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:14:54,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1228521004] [2022-11-16 11:14:54,512 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1228521004] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:14:54,512 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:14:54,512 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 11:14:54,514 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1930202297] [2022-11-16 11:14:54,515 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:14:54,521 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 11:14:54,521 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:14:54,579 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 11:14:54,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 11:14:54,597 INFO L87 Difference]: Start difference. First operand has 853 states, 629 states have (on average 1.3847376788553258) internal successors, (871), 655 states have internal predecessors, (871), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-16 11:14:54,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:14:54,991 INFO L93 Difference]: Finished difference Result 1704 states and 2498 transitions. [2022-11-16 11:14:54,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 11:14:54,994 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 44 [2022-11-16 11:14:54,995 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:14:55,026 INFO L225 Difference]: With dead ends: 1704 [2022-11-16 11:14:55,027 INFO L226 Difference]: Without dead ends: 840 [2022-11-16 11:14:55,038 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:14:55,043 INFO L413 NwaCegarLoop]: 1214 mSDtfsCounter, 2 mSDsluCounter, 2425 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3639 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:14:55,044 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 3639 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 11:14:55,064 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 840 states. [2022-11-16 11:14:55,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 840 to 840. [2022-11-16 11:14:55,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 840 states, 624 states have (on average 1.3717948717948718) internal successors, (856), 642 states have internal predecessors, (856), 174 states have call successors, (174), 42 states have call predecessors, (174), 41 states have return successors, (169), 161 states have call predecessors, (169), 169 states have call successors, (169) [2022-11-16 11:14:55,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 840 states to 840 states and 1199 transitions. [2022-11-16 11:14:55,194 INFO L78 Accepts]: Start accepts. Automaton has 840 states and 1199 transitions. Word has length 44 [2022-11-16 11:14:55,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:14:55,196 INFO L495 AbstractCegarLoop]: Abstraction has 840 states and 1199 transitions. [2022-11-16 11:14:55,196 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-16 11:14:55,196 INFO L276 IsEmpty]: Start isEmpty. Operand 840 states and 1199 transitions. [2022-11-16 11:14:55,205 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-16 11:14:55,205 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:14:55,206 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:14:55,227 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2022-11-16 11:14:55,425 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:14:55,426 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:14:55,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:14:55,426 INFO L85 PathProgramCache]: Analyzing trace with hash 823276732, now seen corresponding path program 1 times [2022-11-16 11:14:55,428 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:14:55,428 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [434313848] [2022-11-16 11:14:55,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:14:55,428 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:14:55,429 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:14:55,432 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:14:55,459 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-11-16 11:14:56,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:14:56,117 INFO L263 TraceCheckSpWp]: Trace formula consists of 752 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-16 11:14:56,120 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:14:56,268 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-16 11:14:56,268 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 11:14:56,727 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-16 11:14:56,727 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:14:56,727 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [434313848] [2022-11-16 11:14:56,728 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [434313848] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 11:14:56,728 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-11-16 11:14:56,728 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2022-11-16 11:14:56,728 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [280224427] [2022-11-16 11:14:56,728 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-11-16 11:14:56,730 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-16 11:14:56,730 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:14:56,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 11:14:56,731 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:14:56,731 INFO L87 Difference]: Start difference. First operand 840 states and 1199 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2022-11-16 11:14:57,448 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:14:57,449 INFO L93 Difference]: Finished difference Result 1681 states and 2401 transitions. [2022-11-16 11:14:57,450 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-16 11:14:57,450 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 45 [2022-11-16 11:14:57,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:14:57,457 INFO L225 Difference]: With dead ends: 1681 [2022-11-16 11:14:57,457 INFO L226 Difference]: Without dead ends: 849 [2022-11-16 11:14:57,461 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=53, Invalid=79, Unknown=0, NotChecked=0, Total=132 [2022-11-16 11:14:57,462 INFO L413 NwaCegarLoop]: 1196 mSDtfsCounter, 16 mSDsluCounter, 3583 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 4779 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:14:57,462 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 4779 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 11:14:57,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 849 states. [2022-11-16 11:14:57,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 849 to 849. [2022-11-16 11:14:57,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 849 states, 632 states have (on average 1.3718354430379747) internal successors, (867), 650 states have internal predecessors, (867), 174 states have call successors, (174), 43 states have call predecessors, (174), 42 states have return successors, (169), 161 states have call predecessors, (169), 169 states have call successors, (169) [2022-11-16 11:14:57,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 849 states to 849 states and 1210 transitions. [2022-11-16 11:14:57,510 INFO L78 Accepts]: Start accepts. Automaton has 849 states and 1210 transitions. Word has length 45 [2022-11-16 11:14:57,510 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:14:57,510 INFO L495 AbstractCegarLoop]: Abstraction has 849 states and 1210 transitions. [2022-11-16 11:14:57,510 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2022-11-16 11:14:57,511 INFO L276 IsEmpty]: Start isEmpty. Operand 849 states and 1210 transitions. [2022-11-16 11:14:57,512 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-16 11:14:57,513 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:14:57,513 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:14:57,535 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-11-16 11:14:57,729 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:14:57,730 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:14:57,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:14:57,730 INFO L85 PathProgramCache]: Analyzing trace with hash -703302463, now seen corresponding path program 2 times [2022-11-16 11:14:57,731 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:14:57,732 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1915721670] [2022-11-16 11:14:57,732 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-16 11:14:57,732 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:14:57,732 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:14:57,733 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:14:57,736 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-11-16 11:14:58,383 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2022-11-16 11:14:58,383 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 11:14:58,404 INFO L263 TraceCheckSpWp]: Trace formula consists of 703 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-16 11:14:58,406 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:14:58,531 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-16 11:14:58,531 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:14:58,531 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:14:58,531 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1915721670] [2022-11-16 11:14:58,531 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1915721670] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:14:58,531 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:14:58,532 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 11:14:58,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1247271372] [2022-11-16 11:14:58,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:14:58,532 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:14:58,533 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:14:58,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:14:58,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:14:58,534 INFO L87 Difference]: Start difference. First operand 849 states and 1210 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-16 11:14:59,344 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:14:59,344 INFO L93 Difference]: Finished difference Result 2450 states and 3501 transitions. [2022-11-16 11:14:59,345 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:14:59,345 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 48 [2022-11-16 11:14:59,345 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:14:59,356 INFO L225 Difference]: With dead ends: 2450 [2022-11-16 11:14:59,357 INFO L226 Difference]: Without dead ends: 1620 [2022-11-16 11:14:59,360 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:14:59,362 INFO L413 NwaCegarLoop]: 1384 mSDtfsCounter, 1119 mSDsluCounter, 1163 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1119 SdHoareTripleChecker+Valid, 2547 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-16 11:14:59,362 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1119 Valid, 2547 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-16 11:14:59,366 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1620 states. [2022-11-16 11:14:59,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1620 to 1620. [2022-11-16 11:14:59,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1620 states, 1204 states have (on average 1.3737541528239203) internal successors, (1654), 1236 states have internal predecessors, (1654), 332 states have call successors, (332), 84 states have call predecessors, (332), 83 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2022-11-16 11:14:59,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1620 states to 1620 states and 2313 transitions. [2022-11-16 11:14:59,467 INFO L78 Accepts]: Start accepts. Automaton has 1620 states and 2313 transitions. Word has length 48 [2022-11-16 11:14:59,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:14:59,468 INFO L495 AbstractCegarLoop]: Abstraction has 1620 states and 2313 transitions. [2022-11-16 11:14:59,468 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-16 11:14:59,468 INFO L276 IsEmpty]: Start isEmpty. Operand 1620 states and 2313 transitions. [2022-11-16 11:14:59,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-16 11:14:59,471 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:14:59,471 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:14:59,498 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-11-16 11:14:59,697 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:14:59,698 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:14:59,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:14:59,698 INFO L85 PathProgramCache]: Analyzing trace with hash 1457421532, now seen corresponding path program 1 times [2022-11-16 11:14:59,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:14:59,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1287462827] [2022-11-16 11:14:59,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:14:59,700 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:14:59,700 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:14:59,700 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:14:59,702 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-11-16 11:15:00,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:00,860 INFO L263 TraceCheckSpWp]: Trace formula consists of 1254 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-16 11:15:00,865 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:01,143 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-16 11:15:01,143 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:01,143 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:01,143 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1287462827] [2022-11-16 11:15:01,143 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1287462827] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:01,143 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:01,143 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 11:15:01,144 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1265472613] [2022-11-16 11:15:01,144 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:01,144 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 11:15:01,144 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:01,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 11:15:01,145 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 11:15:01,145 INFO L87 Difference]: Start difference. First operand 1620 states and 2313 transitions. Second operand has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-16 11:15:04,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:15:04,633 INFO L93 Difference]: Finished difference Result 3568 states and 5151 transitions. [2022-11-16 11:15:04,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 11:15:04,634 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 65 [2022-11-16 11:15:04,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:15:04,644 INFO L225 Difference]: With dead ends: 3568 [2022-11-16 11:15:04,644 INFO L226 Difference]: Without dead ends: 1967 [2022-11-16 11:15:04,649 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:15:04,650 INFO L413 NwaCegarLoop]: 1654 mSDtfsCounter, 451 mSDsluCounter, 6096 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 7750 SdHoareTripleChecker+Invalid, 192 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:15:04,651 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [538 Valid, 7750 Invalid, 192 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-16 11:15:04,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1967 states. [2022-11-16 11:15:04,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1967 to 1620. [2022-11-16 11:15:04,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1620 states, 1204 states have (on average 1.3729235880398671) internal successors, (1653), 1236 states have internal predecessors, (1653), 332 states have call successors, (332), 84 states have call predecessors, (332), 83 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2022-11-16 11:15:04,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1620 states to 1620 states and 2312 transitions. [2022-11-16 11:15:04,735 INFO L78 Accepts]: Start accepts. Automaton has 1620 states and 2312 transitions. Word has length 65 [2022-11-16 11:15:04,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:15:04,737 INFO L495 AbstractCegarLoop]: Abstraction has 1620 states and 2312 transitions. [2022-11-16 11:15:04,737 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-16 11:15:04,737 INFO L276 IsEmpty]: Start isEmpty. Operand 1620 states and 2312 transitions. [2022-11-16 11:15:04,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-16 11:15:04,743 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:15:04,744 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:15:04,781 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-11-16 11:15:04,960 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:04,960 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:15:04,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:15:04,961 INFO L85 PathProgramCache]: Analyzing trace with hash 1676276250, now seen corresponding path program 1 times [2022-11-16 11:15:04,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:15:04,962 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1124660969] [2022-11-16 11:15:04,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:15:04,962 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:04,962 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:15:04,963 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:15:04,964 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-11-16 11:15:06,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:06,173 INFO L263 TraceCheckSpWp]: Trace formula consists of 1254 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-16 11:15:06,176 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:07,807 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-16 11:15:07,808 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:07,808 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:07,808 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1124660969] [2022-11-16 11:15:07,808 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1124660969] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:07,808 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:07,809 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 11:15:07,809 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1123250057] [2022-11-16 11:15:07,809 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:07,809 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:15:07,809 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:07,810 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:15:07,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:07,810 INFO L87 Difference]: Start difference. First operand 1620 states and 2312 transitions. Second operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 2 states have internal predecessors, (40), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:15:08,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:15:08,215 INFO L93 Difference]: Finished difference Result 4821 states and 7020 transitions. [2022-11-16 11:15:08,217 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:15:08,217 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 2 states have internal predecessors, (40), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 65 [2022-11-16 11:15:08,218 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:15:08,242 INFO L225 Difference]: With dead ends: 4821 [2022-11-16 11:15:08,242 INFO L226 Difference]: Without dead ends: 3220 [2022-11-16 11:15:08,251 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:08,253 INFO L413 NwaCegarLoop]: 1470 mSDtfsCounter, 1166 mSDsluCounter, 1176 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1166 SdHoareTripleChecker+Valid, 2646 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:15:08,253 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1166 Valid, 2646 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:15:08,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3220 states. [2022-11-16 11:15:08,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3220 to 3210. [2022-11-16 11:15:08,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3210 states, 2389 states have (on average 1.3721222268731688) internal successors, (3278), 2449 states have internal predecessors, (3278), 655 states have call successors, (655), 166 states have call predecessors, (655), 165 states have return successors, (703), 618 states have call predecessors, (703), 650 states have call successors, (703) [2022-11-16 11:15:08,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3210 states to 3210 states and 4636 transitions. [2022-11-16 11:15:08,587 INFO L78 Accepts]: Start accepts. Automaton has 3210 states and 4636 transitions. Word has length 65 [2022-11-16 11:15:08,589 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:15:08,590 INFO L495 AbstractCegarLoop]: Abstraction has 3210 states and 4636 transitions. [2022-11-16 11:15:08,590 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 2 states have internal predecessors, (40), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:15:08,590 INFO L276 IsEmpty]: Start isEmpty. Operand 3210 states and 4636 transitions. [2022-11-16 11:15:08,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-11-16 11:15:08,592 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:15:08,592 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:15:08,629 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-11-16 11:15:08,817 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:08,818 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:15:08,818 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:15:08,818 INFO L85 PathProgramCache]: Analyzing trace with hash 424589465, now seen corresponding path program 1 times [2022-11-16 11:15:08,819 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:15:08,820 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [164503436] [2022-11-16 11:15:08,820 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:15:08,820 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:08,820 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:15:08,821 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:15:08,825 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-11-16 11:15:10,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:10,068 INFO L263 TraceCheckSpWp]: Trace formula consists of 1255 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-16 11:15:10,071 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:11,427 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-16 11:15:11,428 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:11,428 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:11,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [164503436] [2022-11-16 11:15:11,428 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [164503436] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:11,428 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:11,428 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 11:15:11,429 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1231831643] [2022-11-16 11:15:11,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:11,429 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:15:11,429 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:11,430 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:15:11,430 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:11,430 INFO L87 Difference]: Start difference. First operand 3210 states and 4636 transitions. Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 2 states have internal predecessors, (41), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:15:12,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:15:12,176 INFO L93 Difference]: Finished difference Result 9583 states and 14156 transitions. [2022-11-16 11:15:12,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:15:12,176 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 2 states have internal predecessors, (41), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 66 [2022-11-16 11:15:12,178 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:15:12,234 INFO L225 Difference]: With dead ends: 9583 [2022-11-16 11:15:12,235 INFO L226 Difference]: Without dead ends: 6392 [2022-11-16 11:15:12,255 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:12,257 INFO L413 NwaCegarLoop]: 1380 mSDtfsCounter, 1156 mSDsluCounter, 1171 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1156 SdHoareTripleChecker+Valid, 2551 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:15:12,258 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1156 Valid, 2551 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:15:12,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6392 states. [2022-11-16 11:15:12,858 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6392 to 6383. [2022-11-16 11:15:12,872 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6383 states, 4752 states have (on average 1.3695286195286196) internal successors, (6508), 4868 states have internal predecessors, (6508), 1301 states have call successors, (1301), 330 states have call predecessors, (1301), 329 states have return successors, (1513), 1232 states have call predecessors, (1513), 1296 states have call successors, (1513) [2022-11-16 11:15:12,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6383 states to 6383 states and 9322 transitions. [2022-11-16 11:15:12,918 INFO L78 Accepts]: Start accepts. Automaton has 6383 states and 9322 transitions. Word has length 66 [2022-11-16 11:15:12,918 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:15:12,919 INFO L495 AbstractCegarLoop]: Abstraction has 6383 states and 9322 transitions. [2022-11-16 11:15:12,919 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 2 states have internal predecessors, (41), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:15:12,919 INFO L276 IsEmpty]: Start isEmpty. Operand 6383 states and 9322 transitions. [2022-11-16 11:15:12,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-11-16 11:15:12,922 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:15:12,923 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:15:12,964 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-11-16 11:15:13,136 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:13,136 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:15:13,136 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:15:13,137 INFO L85 PathProgramCache]: Analyzing trace with hash 277009661, now seen corresponding path program 1 times [2022-11-16 11:15:13,138 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:15:13,138 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [671309660] [2022-11-16 11:15:13,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:15:13,138 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:13,138 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:15:13,140 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:15:13,176 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-11-16 11:15:14,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:14,338 INFO L263 TraceCheckSpWp]: Trace formula consists of 1256 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-16 11:15:14,341 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:14,969 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-16 11:15:14,969 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:14,969 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:14,970 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [671309660] [2022-11-16 11:15:14,970 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [671309660] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:14,970 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:14,970 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 11:15:14,970 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1691027457] [2022-11-16 11:15:14,970 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:14,971 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:15:14,971 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:14,971 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:15:14,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:14,972 INFO L87 Difference]: Start difference. First operand 6383 states and 9322 transitions. Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 2 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:15:15,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:15:15,389 INFO L93 Difference]: Finished difference Result 6390 states and 9328 transitions. [2022-11-16 11:15:15,389 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:15:15,389 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 2 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 67 [2022-11-16 11:15:15,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:15:15,427 INFO L225 Difference]: With dead ends: 6390 [2022-11-16 11:15:15,428 INFO L226 Difference]: Without dead ends: 6387 [2022-11-16 11:15:15,432 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:15,433 INFO L413 NwaCegarLoop]: 1382 mSDtfsCounter, 1153 mSDsluCounter, 1170 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1153 SdHoareTripleChecker+Valid, 2552 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:15:15,433 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1153 Valid, 2552 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 11:15:15,441 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6387 states. [2022-11-16 11:15:15,919 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6387 to 6384. [2022-11-16 11:15:15,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6384 states, 4753 states have (on average 1.3694508731327582) internal successors, (6509), 4869 states have internal predecessors, (6509), 1301 states have call successors, (1301), 330 states have call predecessors, (1301), 329 states have return successors, (1513), 1232 states have call predecessors, (1513), 1296 states have call successors, (1513) [2022-11-16 11:15:15,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6384 states to 6384 states and 9323 transitions. [2022-11-16 11:15:15,982 INFO L78 Accepts]: Start accepts. Automaton has 6384 states and 9323 transitions. Word has length 67 [2022-11-16 11:15:15,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:15:15,983 INFO L495 AbstractCegarLoop]: Abstraction has 6384 states and 9323 transitions. [2022-11-16 11:15:15,984 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 2 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:15:15,984 INFO L276 IsEmpty]: Start isEmpty. Operand 6384 states and 9323 transitions. [2022-11-16 11:15:15,987 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-11-16 11:15:15,987 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:15:15,988 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:15:16,033 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-11-16 11:15:16,208 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:16,208 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:15:16,209 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:15:16,209 INFO L85 PathProgramCache]: Analyzing trace with hash -2992100, now seen corresponding path program 1 times [2022-11-16 11:15:16,210 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:15:16,210 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1770450752] [2022-11-16 11:15:16,210 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:15:16,210 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:16,211 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:15:16,212 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:15:16,214 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-11-16 11:15:17,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:17,624 INFO L263 TraceCheckSpWp]: Trace formula consists of 1257 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-16 11:15:17,628 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:18,327 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-16 11:15:18,328 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:18,328 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:18,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1770450752] [2022-11-16 11:15:18,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1770450752] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:18,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:18,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 11:15:18,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [99566644] [2022-11-16 11:15:18,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:18,329 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:15:18,329 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:18,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:15:18,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:18,330 INFO L87 Difference]: Start difference. First operand 6384 states and 9323 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 2 states have internal predecessors, (43), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:15:18,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:15:18,735 INFO L93 Difference]: Finished difference Result 6386 states and 9324 transitions. [2022-11-16 11:15:18,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:15:18,736 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 2 states have internal predecessors, (43), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 68 [2022-11-16 11:15:18,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:15:18,791 INFO L225 Difference]: With dead ends: 6386 [2022-11-16 11:15:18,792 INFO L226 Difference]: Without dead ends: 6383 [2022-11-16 11:15:18,803 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:18,803 INFO L413 NwaCegarLoop]: 1194 mSDtfsCounter, 1142 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1142 SdHoareTripleChecker+Valid, 1194 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:15:18,804 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1142 Valid, 1194 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:15:18,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6383 states. [2022-11-16 11:15:19,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6383 to 6383. [2022-11-16 11:15:19,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6383 states, 4753 states have (on average 1.3692404796970334) internal successors, (6508), 4868 states have internal predecessors, (6508), 1300 states have call successors, (1300), 330 states have call predecessors, (1300), 329 states have return successors, (1513), 1232 states have call predecessors, (1513), 1296 states have call successors, (1513) [2022-11-16 11:15:19,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6383 states to 6383 states and 9321 transitions. [2022-11-16 11:15:19,351 INFO L78 Accepts]: Start accepts. Automaton has 6383 states and 9321 transitions. Word has length 68 [2022-11-16 11:15:19,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:15:19,353 INFO L495 AbstractCegarLoop]: Abstraction has 6383 states and 9321 transitions. [2022-11-16 11:15:19,353 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 2 states have internal predecessors, (43), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:15:19,353 INFO L276 IsEmpty]: Start isEmpty. Operand 6383 states and 9321 transitions. [2022-11-16 11:15:19,355 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-11-16 11:15:19,355 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:15:19,355 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:15:19,388 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-11-16 11:15:19,576 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:19,576 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:15:19,576 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:15:19,577 INFO L85 PathProgramCache]: Analyzing trace with hash -93107232, now seen corresponding path program 1 times [2022-11-16 11:15:19,577 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:15:19,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1836272539] [2022-11-16 11:15:19,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:15:19,578 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:19,578 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:15:19,579 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:15:19,581 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-11-16 11:15:20,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:20,843 INFO L263 TraceCheckSpWp]: Trace formula consists of 1258 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-16 11:15:20,845 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:21,619 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-16 11:15:21,619 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:21,620 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:21,620 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1836272539] [2022-11-16 11:15:21,620 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1836272539] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:21,620 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:21,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 11:15:21,622 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [108987719] [2022-11-16 11:15:21,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:21,623 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:15:21,623 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:21,624 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:15:21,624 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:21,625 INFO L87 Difference]: Start difference. First operand 6383 states and 9321 transitions. Second operand has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 2 states have internal predecessors, (44), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:15:22,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:15:22,099 INFO L93 Difference]: Finished difference Result 6385 states and 9322 transitions. [2022-11-16 11:15:22,099 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:15:22,100 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 2 states have internal predecessors, (44), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 69 [2022-11-16 11:15:22,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:15:22,134 INFO L225 Difference]: With dead ends: 6385 [2022-11-16 11:15:22,134 INFO L226 Difference]: Without dead ends: 6353 [2022-11-16 11:15:22,138 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:22,141 INFO L413 NwaCegarLoop]: 1193 mSDtfsCounter, 1139 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1139 SdHoareTripleChecker+Valid, 1193 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:15:22,141 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1139 Valid, 1193 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:15:22,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6353 states. [2022-11-16 11:15:22,798 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6353 to 6353. [2022-11-16 11:15:22,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6353 states, 4726 states have (on average 1.369022429115531) internal successors, (6470), 4840 states have internal predecessors, (6470), 1297 states have call successors, (1297), 330 states have call predecessors, (1297), 329 states have return successors, (1508), 1230 states have call predecessors, (1508), 1294 states have call successors, (1508) [2022-11-16 11:15:22,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6353 states to 6353 states and 9275 transitions. [2022-11-16 11:15:22,832 INFO L78 Accepts]: Start accepts. Automaton has 6353 states and 9275 transitions. Word has length 69 [2022-11-16 11:15:22,833 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:15:22,833 INFO L495 AbstractCegarLoop]: Abstraction has 6353 states and 9275 transitions. [2022-11-16 11:15:22,833 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 2 states have internal predecessors, (44), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-16 11:15:22,833 INFO L276 IsEmpty]: Start isEmpty. Operand 6353 states and 9275 transitions. [2022-11-16 11:15:22,844 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2022-11-16 11:15:22,844 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:15:22,845 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:15:22,876 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-11-16 11:15:23,064 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:23,064 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:15:23,064 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:15:23,065 INFO L85 PathProgramCache]: Analyzing trace with hash 696725679, now seen corresponding path program 1 times [2022-11-16 11:15:23,066 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:15:23,066 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [125195579] [2022-11-16 11:15:23,066 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:15:23,066 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:23,066 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:15:23,068 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:15:23,088 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-11-16 11:15:24,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:24,215 INFO L263 TraceCheckSpWp]: Trace formula consists of 1373 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-16 11:15:24,217 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:24,277 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-16 11:15:24,278 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:24,278 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:24,278 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [125195579] [2022-11-16 11:15:24,278 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [125195579] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:24,278 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:24,279 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 11:15:24,279 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1473638234] [2022-11-16 11:15:24,279 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:24,279 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:15:24,280 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:24,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:15:24,280 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:24,281 INFO L87 Difference]: Start difference. First operand 6353 states and 9275 transitions. Second operand has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-16 11:15:26,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:15:26,426 INFO L93 Difference]: Finished difference Result 17330 states and 25121 transitions. [2022-11-16 11:15:26,427 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:15:26,427 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 102 [2022-11-16 11:15:26,428 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:15:26,487 INFO L225 Difference]: With dead ends: 17330 [2022-11-16 11:15:26,488 INFO L226 Difference]: Without dead ends: 10994 [2022-11-16 11:15:26,516 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:15:26,517 INFO L413 NwaCegarLoop]: 1597 mSDtfsCounter, 869 mSDsluCounter, 1146 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 869 SdHoareTripleChecker+Valid, 2743 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:15:26,518 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [869 Valid, 2743 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-16 11:15:26,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10994 states. [2022-11-16 11:15:27,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10994 to 10963. [2022-11-16 11:15:27,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10963 states, 8116 states have (on average 1.3591670773780187) internal successors, (11031), 8329 states have internal predecessors, (11031), 2224 states have call successors, (2224), 623 states have call predecessors, (2224), 622 states have return successors, (2573), 2098 states have call predecessors, (2573), 2221 states have call successors, (2573) [2022-11-16 11:15:27,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10963 states to 10963 states and 15828 transitions. [2022-11-16 11:15:27,802 INFO L78 Accepts]: Start accepts. Automaton has 10963 states and 15828 transitions. Word has length 102 [2022-11-16 11:15:27,802 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:15:27,802 INFO L495 AbstractCegarLoop]: Abstraction has 10963 states and 15828 transitions. [2022-11-16 11:15:27,802 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-16 11:15:27,803 INFO L276 IsEmpty]: Start isEmpty. Operand 10963 states and 15828 transitions. [2022-11-16 11:15:27,812 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2022-11-16 11:15:27,812 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:15:27,812 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:15:27,847 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-11-16 11:15:28,028 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:28,028 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:15:28,028 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:15:28,029 INFO L85 PathProgramCache]: Analyzing trace with hash 1862390503, now seen corresponding path program 1 times [2022-11-16 11:15:28,032 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:15:28,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1825625947] [2022-11-16 11:15:28,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:15:28,032 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:28,032 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:15:28,034 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:15:28,088 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-11-16 11:15:29,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:29,648 INFO L263 TraceCheckSpWp]: Trace formula consists of 1442 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-16 11:15:29,652 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:29,954 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-16 11:15:29,954 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:29,954 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:29,954 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1825625947] [2022-11-16 11:15:29,955 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1825625947] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:29,955 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:29,955 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:15:29,955 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1027581616] [2022-11-16 11:15:29,955 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:29,956 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:15:29,956 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:29,956 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:15:29,956 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:15:29,957 INFO L87 Difference]: Start difference. First operand 10963 states and 15828 transitions. Second operand has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-16 11:15:32,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:15:32,117 INFO L93 Difference]: Finished difference Result 17838 states and 25660 transitions. [2022-11-16 11:15:32,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 11:15:32,118 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 128 [2022-11-16 11:15:32,118 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:15:32,155 INFO L225 Difference]: With dead ends: 17838 [2022-11-16 11:15:32,155 INFO L226 Difference]: Without dead ends: 6891 [2022-11-16 11:15:32,198 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:15:32,199 INFO L413 NwaCegarLoop]: 1191 mSDtfsCounter, 38 mSDsluCounter, 3564 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 4755 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:15:32,199 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 4755 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-16 11:15:32,209 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6891 states. [2022-11-16 11:15:32,872 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6891 to 6775. [2022-11-16 11:15:32,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6775 states, 5016 states have (on average 1.3528708133971292) internal successors, (6786), 5151 states have internal predecessors, (6786), 1362 states have call successors, (1362), 397 states have call predecessors, (1362), 396 states have return successors, (1549), 1280 states have call predecessors, (1549), 1359 states have call successors, (1549) [2022-11-16 11:15:32,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6775 states to 6775 states and 9697 transitions. [2022-11-16 11:15:32,924 INFO L78 Accepts]: Start accepts. Automaton has 6775 states and 9697 transitions. Word has length 128 [2022-11-16 11:15:32,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:15:32,925 INFO L495 AbstractCegarLoop]: Abstraction has 6775 states and 9697 transitions. [2022-11-16 11:15:32,925 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-16 11:15:32,925 INFO L276 IsEmpty]: Start isEmpty. Operand 6775 states and 9697 transitions. [2022-11-16 11:15:32,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2022-11-16 11:15:32,932 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:15:32,933 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:15:32,965 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-11-16 11:15:33,156 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:33,157 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:15:33,157 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:15:33,157 INFO L85 PathProgramCache]: Analyzing trace with hash -948611006, now seen corresponding path program 1 times [2022-11-16 11:15:33,158 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:15:33,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2021162295] [2022-11-16 11:15:33,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:15:33,159 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:33,159 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:15:33,160 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:15:33,204 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2022-11-16 11:15:34,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:34,773 INFO L263 TraceCheckSpWp]: Trace formula consists of 1499 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-16 11:15:34,782 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:35,062 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2022-11-16 11:15:35,062 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:35,062 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:35,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2021162295] [2022-11-16 11:15:35,063 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2021162295] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:35,063 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:35,063 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 11:15:35,063 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [107683887] [2022-11-16 11:15:35,063 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:35,064 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 11:15:35,064 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:35,064 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 11:15:35,064 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 11:15:35,064 INFO L87 Difference]: Start difference. First operand 6775 states and 9697 transitions. Second operand has 6 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-16 11:15:36,215 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.14s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-16 11:15:40,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:15:40,647 INFO L93 Difference]: Finished difference Result 12440 states and 17831 transitions. [2022-11-16 11:15:40,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 11:15:40,648 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 134 [2022-11-16 11:15:40,648 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:15:40,673 INFO L225 Difference]: With dead ends: 12440 [2022-11-16 11:15:40,673 INFO L226 Difference]: Without dead ends: 6789 [2022-11-16 11:15:40,690 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 129 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:15:40,690 INFO L413 NwaCegarLoop]: 1441 mSDtfsCounter, 435 mSDsluCounter, 5219 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 520 SdHoareTripleChecker+Valid, 6660 SdHoareTripleChecker+Invalid, 179 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:15:40,691 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [520 Valid, 6660 Invalid, 179 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 5.1s Time] [2022-11-16 11:15:40,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6789 states. [2022-11-16 11:15:41,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6789 to 6775. [2022-11-16 11:15:41,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6775 states, 5016 states have (on average 1.35207336523126) internal successors, (6782), 5151 states have internal predecessors, (6782), 1362 states have call successors, (1362), 397 states have call predecessors, (1362), 396 states have return successors, (1549), 1280 states have call predecessors, (1549), 1359 states have call successors, (1549) [2022-11-16 11:15:41,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6775 states to 6775 states and 9693 transitions. [2022-11-16 11:15:41,393 INFO L78 Accepts]: Start accepts. Automaton has 6775 states and 9693 transitions. Word has length 134 [2022-11-16 11:15:41,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:15:41,393 INFO L495 AbstractCegarLoop]: Abstraction has 6775 states and 9693 transitions. [2022-11-16 11:15:41,393 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-16 11:15:41,394 INFO L276 IsEmpty]: Start isEmpty. Operand 6775 states and 9693 transitions. [2022-11-16 11:15:41,403 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2022-11-16 11:15:41,403 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:15:41,404 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:15:41,445 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2022-11-16 11:15:41,621 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:41,621 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:15:41,622 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:15:41,622 INFO L85 PathProgramCache]: Analyzing trace with hash -871710208, now seen corresponding path program 1 times [2022-11-16 11:15:41,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:15:41,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [85993376] [2022-11-16 11:15:41,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:15:41,624 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:41,624 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:15:41,626 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:15:41,670 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2022-11-16 11:15:43,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:43,960 INFO L263 TraceCheckSpWp]: Trace formula consists of 1499 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-16 11:15:43,963 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:44,345 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-11-16 11:15:44,346 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:44,346 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:44,346 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [85993376] [2022-11-16 11:15:44,347 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [85993376] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:44,347 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:44,347 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:15:44,347 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [95298661] [2022-11-16 11:15:44,347 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:44,348 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:15:44,348 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:44,349 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:15:44,349 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:15:44,349 INFO L87 Difference]: Start difference. First operand 6775 states and 9693 transitions. Second operand has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-16 11:15:45,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:15:45,114 INFO L93 Difference]: Finished difference Result 12478 states and 17953 transitions. [2022-11-16 11:15:45,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 11:15:45,115 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) Word has length 134 [2022-11-16 11:15:45,115 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:15:45,146 INFO L225 Difference]: With dead ends: 12478 [2022-11-16 11:15:45,146 INFO L226 Difference]: Without dead ends: 6827 [2022-11-16 11:15:45,161 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:15:45,162 INFO L413 NwaCegarLoop]: 1200 mSDtfsCounter, 4 mSDsluCounter, 3579 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4 SdHoareTripleChecker+Valid, 4779 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:15:45,162 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4 Valid, 4779 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 11:15:45,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6827 states. [2022-11-16 11:15:45,699 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6827 to 6809. [2022-11-16 11:15:45,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6809 states, 5040 states have (on average 1.3511904761904763) internal successors, (6810), 5177 states have internal predecessors, (6810), 1366 states have call successors, (1366), 397 states have call predecessors, (1366), 402 states have return successors, (1589), 1288 states have call predecessors, (1589), 1363 states have call successors, (1589) [2022-11-16 11:15:45,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6809 states to 6809 states and 9765 transitions. [2022-11-16 11:15:45,737 INFO L78 Accepts]: Start accepts. Automaton has 6809 states and 9765 transitions. Word has length 134 [2022-11-16 11:15:45,737 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:15:45,738 INFO L495 AbstractCegarLoop]: Abstraction has 6809 states and 9765 transitions. [2022-11-16 11:15:45,738 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-16 11:15:45,738 INFO L276 IsEmpty]: Start isEmpty. Operand 6809 states and 9765 transitions. [2022-11-16 11:15:45,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 141 [2022-11-16 11:15:45,748 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:15:45,748 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:15:45,787 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2022-11-16 11:15:45,973 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:45,973 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:15:45,973 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:15:45,973 INFO L85 PathProgramCache]: Analyzing trace with hash -411751834, now seen corresponding path program 1 times [2022-11-16 11:15:45,975 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:15:45,975 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1310121571] [2022-11-16 11:15:45,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:15:45,975 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:15:45,975 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:15:45,976 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:15:45,979 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2022-11-16 11:15:47,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:15:47,777 INFO L263 TraceCheckSpWp]: Trace formula consists of 1516 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-16 11:15:47,783 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:15:49,517 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-11-16 11:15:49,517 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:15:49,517 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:15:49,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1310121571] [2022-11-16 11:15:49,518 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1310121571] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:15:49,518 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:15:49,518 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-16 11:15:49,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2123037092] [2022-11-16 11:15:49,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:15:49,519 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-16 11:15:49,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:15:49,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-16 11:15:49,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2022-11-16 11:15:49,521 INFO L87 Difference]: Start difference. First operand 6809 states and 9765 transitions. Second operand has 13 states, 13 states have (on average 7.076923076923077) internal successors, (92), 10 states have internal predecessors, (92), 3 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 2 states have call successors, (13) [2022-11-16 11:16:03,605 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:16:03,605 INFO L93 Difference]: Finished difference Result 14837 states and 21719 transitions. [2022-11-16 11:16:03,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-16 11:16:03,607 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 7.076923076923077) internal successors, (92), 10 states have internal predecessors, (92), 3 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 2 states have call successors, (13) Word has length 140 [2022-11-16 11:16:03,607 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:16:03,647 INFO L225 Difference]: With dead ends: 14837 [2022-11-16 11:16:03,647 INFO L226 Difference]: Without dead ends: 9152 [2022-11-16 11:16:03,666 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 85 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=91, Invalid=611, Unknown=0, NotChecked=0, Total=702 [2022-11-16 11:16:03,667 INFO L413 NwaCegarLoop]: 2424 mSDtfsCounter, 2566 mSDsluCounter, 25899 mSDsCounter, 0 mSdLazyCounter, 1111 mSolverCounterSat, 208 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2652 SdHoareTripleChecker+Valid, 28323 SdHoareTripleChecker+Invalid, 1319 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 208 IncrementalHoareTripleChecker+Valid, 1111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:16:03,667 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2652 Valid, 28323 Invalid, 1319 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [208 Valid, 1111 Invalid, 0 Unknown, 0 Unchecked, 11.0s Time] [2022-11-16 11:16:03,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9152 states. [2022-11-16 11:16:04,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9152 to 6795. [2022-11-16 11:16:04,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6795 states, 5026 states have (on average 1.3507759649820932) internal successors, (6789), 5164 states have internal predecessors, (6789), 1366 states have call successors, (1366), 397 states have call predecessors, (1366), 402 states have return successors, (1589), 1287 states have call predecessors, (1589), 1363 states have call successors, (1589) [2022-11-16 11:16:04,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6795 states to 6795 states and 9744 transitions. [2022-11-16 11:16:04,356 INFO L78 Accepts]: Start accepts. Automaton has 6795 states and 9744 transitions. Word has length 140 [2022-11-16 11:16:04,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:16:04,357 INFO L495 AbstractCegarLoop]: Abstraction has 6795 states and 9744 transitions. [2022-11-16 11:16:04,357 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 7.076923076923077) internal successors, (92), 10 states have internal predecessors, (92), 3 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 2 states have call successors, (13) [2022-11-16 11:16:04,357 INFO L276 IsEmpty]: Start isEmpty. Operand 6795 states and 9744 transitions. [2022-11-16 11:16:04,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2022-11-16 11:16:04,364 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:16:04,365 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:16:04,404 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2022-11-16 11:16:04,588 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:16:04,588 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:16:04,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:16:04,589 INFO L85 PathProgramCache]: Analyzing trace with hash 1095627296, now seen corresponding path program 1 times [2022-11-16 11:16:04,590 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:16:04,590 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1935169094] [2022-11-16 11:16:04,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:16:04,590 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:16:04,591 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:16:04,592 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:16:04,616 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2022-11-16 11:16:06,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:16:06,172 INFO L263 TraceCheckSpWp]: Trace formula consists of 1643 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-16 11:16:06,175 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:16:06,258 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2022-11-16 11:16:06,258 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:16:06,258 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:16:06,259 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1935169094] [2022-11-16 11:16:06,259 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1935169094] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:16:06,259 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:16:06,259 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 11:16:06,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1922474509] [2022-11-16 11:16:06,260 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:16:06,260 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:16:06,261 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:16:06,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:16:06,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:16:06,262 INFO L87 Difference]: Start difference. First operand 6795 states and 9744 transitions. Second operand has 3 states, 3 states have (on average 31.0) internal successors, (93), 3 states have internal predecessors, (93), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-16 11:16:07,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:16:07,116 INFO L93 Difference]: Finished difference Result 16528 states and 23689 transitions. [2022-11-16 11:16:07,116 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:16:07,116 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 31.0) internal successors, (93), 3 states have internal predecessors, (93), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 138 [2022-11-16 11:16:07,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:16:07,155 INFO L225 Difference]: With dead ends: 16528 [2022-11-16 11:16:07,155 INFO L226 Difference]: Without dead ends: 9375 [2022-11-16 11:16:07,175 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 137 GetRequests, 136 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:16:07,176 INFO L413 NwaCegarLoop]: 1742 mSDtfsCounter, 894 mSDsluCounter, 1151 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 894 SdHoareTripleChecker+Valid, 2893 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:16:07,176 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [894 Valid, 2893 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:16:07,185 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9375 states. [2022-11-16 11:16:08,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9375 to 9258. [2022-11-16 11:16:08,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9258 states, 6876 states have (on average 1.3534031413612566) internal successors, (9306), 7071 states have internal predecessors, (9306), 1814 states have call successors, (1814), 556 states have call predecessors, (1814), 567 states have return successors, (2172), 1692 states have call predecessors, (2172), 1811 states have call successors, (2172) [2022-11-16 11:16:08,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9258 states to 9258 states and 13292 transitions. [2022-11-16 11:16:08,206 INFO L78 Accepts]: Start accepts. Automaton has 9258 states and 13292 transitions. Word has length 138 [2022-11-16 11:16:08,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:16:08,206 INFO L495 AbstractCegarLoop]: Abstraction has 9258 states and 13292 transitions. [2022-11-16 11:16:08,206 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 31.0) internal successors, (93), 3 states have internal predecessors, (93), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-16 11:16:08,207 INFO L276 IsEmpty]: Start isEmpty. Operand 9258 states and 13292 transitions. [2022-11-16 11:16:08,215 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2022-11-16 11:16:08,215 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:16:08,215 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:16:08,256 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2022-11-16 11:16:08,441 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:16:08,441 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:16:08,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:16:08,442 INFO L85 PathProgramCache]: Analyzing trace with hash 2025189890, now seen corresponding path program 1 times [2022-11-16 11:16:08,443 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:16:08,443 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [27133309] [2022-11-16 11:16:08,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:16:08,444 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:16:08,444 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:16:08,444 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:16:08,448 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2022-11-16 11:16:10,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:16:10,305 INFO L263 TraceCheckSpWp]: Trace formula consists of 1599 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-16 11:16:10,308 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:16:10,390 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-11-16 11:16:10,390 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:16:10,390 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-16 11:16:10,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [27133309] [2022-11-16 11:16:10,391 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [27133309] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:16:10,391 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:16:10,391 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 11:16:10,392 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [231824757] [2022-11-16 11:16:10,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:16:10,392 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 11:16:10,393 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-16 11:16:10,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 11:16:10,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 11:16:10,394 INFO L87 Difference]: Start difference. First operand 9258 states and 13292 transitions. Second operand has 4 states, 4 states have (on average 26.75) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-16 11:16:12,405 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:16:12,405 INFO L93 Difference]: Finished difference Result 23905 states and 35192 transitions. [2022-11-16 11:16:12,406 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 11:16:12,407 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 26.75) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2022-11-16 11:16:12,407 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:16:12,474 INFO L225 Difference]: With dead ends: 23905 [2022-11-16 11:16:12,474 INFO L226 Difference]: Without dead ends: 14692 [2022-11-16 11:16:12,508 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:16:12,508 INFO L413 NwaCegarLoop]: 1790 mSDtfsCounter, 1099 mSDsluCounter, 2981 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 129 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1179 SdHoareTripleChecker+Valid, 4771 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 129 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-16 11:16:12,509 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1179 Valid, 4771 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [129 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-16 11:16:12,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14692 states. [2022-11-16 11:16:13,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14692 to 9274. [2022-11-16 11:16:13,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9274 states, 6892 states have (on average 1.352582704585026) internal successors, (9322), 7087 states have internal predecessors, (9322), 1814 states have call successors, (1814), 556 states have call predecessors, (1814), 567 states have return successors, (2172), 1692 states have call predecessors, (2172), 1811 states have call successors, (2172) [2022-11-16 11:16:13,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9274 states to 9274 states and 13308 transitions. [2022-11-16 11:16:13,920 INFO L78 Accepts]: Start accepts. Automaton has 9274 states and 13308 transitions. Word has length 161 [2022-11-16 11:16:13,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:16:13,920 INFO L495 AbstractCegarLoop]: Abstraction has 9274 states and 13308 transitions. [2022-11-16 11:16:13,921 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 26.75) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-16 11:16:13,921 INFO L276 IsEmpty]: Start isEmpty. Operand 9274 states and 13308 transitions. [2022-11-16 11:16:13,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2022-11-16 11:16:13,929 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:16:13,929 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:16:13,982 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (17)] Forceful destruction successful, exit code 0 [2022-11-16 11:16:14,153 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:16:14,153 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:16:14,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:16:14,154 INFO L85 PathProgramCache]: Analyzing trace with hash 686660894, now seen corresponding path program 1 times [2022-11-16 11:16:14,155 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-16 11:16:14,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [558575093] [2022-11-16 11:16:14,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:16:14,156 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:16:14,156 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat [2022-11-16 11:16:14,157 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-16 11:16:14,158 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2022-11-16 11:16:57,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-16 11:16:57,780 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-16 11:17:42,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-16 11:17:44,809 INFO L130 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-11-16 11:17:44,809 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-16 11:17:44,810 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-16 11:17:44,882 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (18)] Forceful destruction successful, exit code 0 [2022-11-16 11:17:45,033 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-16 11:17:45,037 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:17:45,043 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-16 11:17:45,105 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-16 11:17:45,385 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.11 11:17:45 BoogieIcfgContainer [2022-11-16 11:17:45,385 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-16 11:17:45,386 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-16 11:17:45,386 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-16 11:17:45,386 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-16 11:17:45,387 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:14:53" (3/4) ... [2022-11-16 11:17:45,391 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-11-16 11:17:45,391 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-16 11:17:45,392 INFO L158 Benchmark]: Toolchain (without parser) took 197618.08ms. Allocated memory was 58.7MB in the beginning and 1.9GB in the end (delta: 1.9GB). Free memory was 38.0MB in the beginning and 760.0MB in the end (delta: -722.0MB). Peak memory consumption was 1.1GB. Max. memory is 16.1GB. [2022-11-16 11:17:45,393 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 58.7MB. Free memory is still 40.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 11:17:45,395 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2873.42ms. Allocated memory was 58.7MB in the beginning and 138.4MB in the end (delta: 79.7MB). Free memory was 37.8MB in the beginning and 68.5MB in the end (delta: -30.7MB). Peak memory consumption was 75.1MB. Max. memory is 16.1GB. [2022-11-16 11:17:45,398 INFO L158 Benchmark]: Boogie Procedure Inliner took 220.58ms. Allocated memory is still 138.4MB. Free memory was 68.5MB in the beginning and 51.8MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-16 11:17:45,398 INFO L158 Benchmark]: Boogie Preprocessor took 263.08ms. Allocated memory was 138.4MB in the beginning and 247.5MB in the end (delta: 109.1MB). Free memory was 51.8MB in the beginning and 166.1MB in the end (delta: -114.3MB). Peak memory consumption was 13.5MB. Max. memory is 16.1GB. [2022-11-16 11:17:45,399 INFO L158 Benchmark]: RCFGBuilder took 22213.18ms. Allocated memory was 247.5MB in the beginning and 484.4MB in the end (delta: 237.0MB). Free memory was 166.1MB in the beginning and 371.1MB in the end (delta: -205.0MB). Peak memory consumption was 200.6MB. Max. memory is 16.1GB. [2022-11-16 11:17:45,399 INFO L158 Benchmark]: TraceAbstraction took 172029.80ms. Allocated memory was 484.4MB in the beginning and 1.9GB in the end (delta: 1.4GB). Free memory was 371.1MB in the beginning and 760.0MB in the end (delta: -388.8MB). Peak memory consumption was 1.0GB. Max. memory is 16.1GB. [2022-11-16 11:17:45,399 INFO L158 Benchmark]: Witness Printer took 5.16ms. Allocated memory is still 1.9GB. Free memory is still 760.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 11:17:45,405 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 58.7MB. Free memory is still 40.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2873.42ms. Allocated memory was 58.7MB in the beginning and 138.4MB in the end (delta: 79.7MB). Free memory was 37.8MB in the beginning and 68.5MB in the end (delta: -30.7MB). Peak memory consumption was 75.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 220.58ms. Allocated memory is still 138.4MB. Free memory was 68.5MB in the beginning and 51.8MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 263.08ms. Allocated memory was 138.4MB in the beginning and 247.5MB in the end (delta: 109.1MB). Free memory was 51.8MB in the beginning and 166.1MB in the end (delta: -114.3MB). Peak memory consumption was 13.5MB. Max. memory is 16.1GB. * RCFGBuilder took 22213.18ms. Allocated memory was 247.5MB in the beginning and 484.4MB in the end (delta: 237.0MB). Free memory was 166.1MB in the beginning and 371.1MB in the end (delta: -205.0MB). Peak memory consumption was 200.6MB. Max. memory is 16.1GB. * TraceAbstraction took 172029.80ms. Allocated memory was 484.4MB in the beginning and 1.9GB in the end (delta: 1.4GB). Free memory was 371.1MB in the beginning and 760.0MB in the end (delta: -388.8MB). Peak memory consumption was 1.0GB. Max. memory is 16.1GB. * Witness Printer took 5.16ms. Allocated memory is still 1.9GB. Free memory is still 760.0MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7054]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8527. Possible FailurePath: [L8990] int SERIAL_STATE = 0; [L7077] int LDV_IN_INTERRUPT = 1; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7171] static struct usb_card_rec *usb_card ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8998] void (*completeFnBulk)(struct urb * ) ; [L7080] int ref_cnt ; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7083] int usb_counter ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8992] struct urb *usb_urb = 0; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8991] void *usb_intfdata = 0; [L7084] struct sk_buff *usb_ops_group1 ; [L8997] void (*completeFnInt)(struct urb * ) ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L8586] int ldv_retval_0 ; [L8588] int ldv_retval_1 ; [L8593] int ldv_retval_2 ; [L8592] int ldv_retval_3 ; [L8587] int ldv_retval_4 ; [L7170] static struct semaphore add_remove_card_sem ; [L8989] int INTERF_STATE = 0; [L8995] int completeFnIntCounter = 0; [L7079] int ldv_state_variable_2 ; [L8996] int completeFnBulkCounter = 0; [L7085] int ldv_state_variable_0 ; [L7082] int ldv_state_variable_1 ; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=5, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=5, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=2164260864, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=5, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor.flags=0, descriptor___0={144115188084244671:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor.flags=0, descriptor___0={144115188084244671:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND FALSE !(tmp != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor___0={144115188084244671:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, sem={163:0}, sem={163:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={162:0}, ldv_func_arg1={162:0}, ldv_func_arg2={165:166}, ldv_func_arg2={165:166}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor___0={144115188084244671:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor___0={144115188084244671:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND FALSE !(tmp___0 != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor___0={144115188084244671:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8688] COND TRUE ldv_state_variable_1 == 1 [L8689] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8435] int ret ; [L8436] struct usb_card_rec *card ; [L8438] EXPR adapter->card [L8438] card = (struct usb_card_rec *)adapter->card [L8439] EXPR card->usb_boot_state VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, card->usb_boot_state=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8439] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8451] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8045] struct usb_card_rec *card ; [L8046] int i ; [L8047] int tmp ; [L8048] int tmp___0 ; [L8050] EXPR adapter->card [L8050] card = (struct usb_card_rec *)adapter->card [L8051] card->rx_cmd.adapter = adapter [L8052] EXPR card->rx_cmd_ep [L8052] card->rx_cmd.ep = card->rx_cmd_ep [L8053] CALL, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8936] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8938] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9021] struct urb *value ; [L9022] void *tmp ; [L9023] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND FALSE !(tmp___0 != 0) [L7010] tmp = malloc(size) [L7011] p = tmp VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={188:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={188:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7012] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L6998] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7012] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={188:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={188:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7013] return (p); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, \result={188:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={188:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={188:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={188:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] tmp = ldv_malloc(sizeof(struct urb)) [L9026] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={188:0}] [L9027] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7036] int tmp ; [L7038] tmp = __VERIFIER_nondet_int() [L7039] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9027] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_undef_int()=-2147483648, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={188:0}] [L9027] tmp___0 = ldv_undef_int() [L9028] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={188:0}] [L9029] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L9030] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}, value={188:0}] [L9035] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result={188:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}, value={188:0}] [L8938] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={188:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8938] tmp = ldv_alloc_urb() [L8939] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={188:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8053] RET, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8053] card->rx_cmd.urb = ldv_usb_alloc_urb_17(0, 208U) [L8054] EXPR card->rx_cmd.urb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, card->rx_cmd.urb={188:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8054] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8059] CALL, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L7104] struct sk_buff *tmp ; [L7106] CALL, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7096] struct sk_buff *tmp ; [L7098] CALL, EXPR __netdev_alloc_skb(dev, length, 32U) [L9240] CALL, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(size)=253, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND TRUE tmp___0 != 0 [L7008] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=253, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=253, tmp___0=2149580800, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L9240] RET, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct sk_buff))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L9240] struct sk_buff *skb = ldv_malloc(sizeof(struct sk_buff)); [L9241] COND FALSE !(\read(*skb)) VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L9247] return skb; VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L7098] RET, EXPR __netdev_alloc_skb(dev, length, 32U) [L7098] tmp = __netdev_alloc_skb(dev, length, 32U) [L7099] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={0:0}, dev={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L7106] RET, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7106] tmp = netdev_alloc_skb((struct net_device *)0, length) [L7107] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8059] RET, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_alloc_skb(2048U)={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8059] card->rx_cmd.skb = dev_alloc_skb(2048U) [L8060] EXPR card->rx_cmd.skb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, card->rx_cmd.skb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8060] COND TRUE (unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0) [L8061] adapter->dev [L8062] return (-12); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8451] RET, EXPR mwifiex_usb_rx_init(adapter) [L8451] ret = mwifiex_usb_rx_init(adapter) [L8452] COND FALSE !(ret == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=4294967284, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8456] return (ret); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=4294967284, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8689] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8690] ldv_state_variable_1 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8727] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L8728] CALL mwifiex_usb_cleanup_module() [L8548] int tmp ; [L8549] struct mwifiex_adapter *adapter ; [L8550] int i ; [L8551] struct mwifiex_private *tmp___0 ; [L8553] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9262] return __VERIFIER_nondet_int(); [L8553] RET, EXPR down_interruptible(& add_remove_card_sem) [L8553] tmp = down_interruptible(& add_remove_card_sem) [L8554] COND FALSE !(tmp == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8558] COND FALSE !((unsigned long )usb_card != (unsigned long )((struct usb_card_rec *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8582] CALL ldv_usb_deregister_23(& mwifiex_usb_driver) [L8975] FCALL usb_deregister(arg) [L8976] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, arg={162:0}, arg={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8582] RET ldv_usb_deregister_23(& mwifiex_usb_driver) [L8728] RET mwifiex_usb_cleanup_module() [L8729] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8830] CALL ldv_check_final_state() [L9208] COND FALSE !((unsigned long )usb_urb == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L9210] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L7054] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 855 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 171.6s, OverallIterations: 17, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 36.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 13587 SdHoareTripleChecker+Valid, 24.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 13249 mSDsluCounter, 83775 SdHoareTripleChecker+Invalid, 23.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 60323 mSDsCounter, 368 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1689 IncrementalHoareTripleChecker+Invalid, 2057 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 368 mSolverCounterUnsat, 23452 mSDtfsCounter, 1689 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1529 GetRequests, 1462 SyntacticMatches, 0 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 5.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=10963occurred in iteration=10, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 9.5s AutomataMinimizationTime, 16 MinimizatonAttempts, 8440 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 1.3s SsaConstructionTime, 54.9s SatisfiabilityAnalysisTime, 10.4s InterpolantComputationTime, 1630 NumberOfCodeBlocks, 1614 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1502 ConstructedInterpolants, 0 QuantifiedInterpolants, 2909 SizeOfPredicates, 44 NumberOfNonLiveVariables, 20301 ConjunctsInSsa, 95 ConjunctsInUnsatCore, 17 InterpolantComputations, 15 PerfectInterpolantSequences, 771/773 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-11-16 11:17:45,516 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_837446aa-8a2b-421a-919d-459fc5b00fe6/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample