./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 20:57:12,815 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 20:57:12,817 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 20:57:12,838 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 20:57:12,839 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 20:57:12,840 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 20:57:12,841 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 20:57:12,843 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 20:57:12,845 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 20:57:12,846 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 20:57:12,847 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 20:57:12,848 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 20:57:12,848 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 20:57:12,849 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 20:57:12,850 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 20:57:12,851 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 20:57:12,852 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 20:57:12,853 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 20:57:12,855 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 20:57:12,857 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 20:57:12,859 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 20:57:12,860 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 20:57:12,861 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 20:57:12,862 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 20:57:12,867 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 20:57:12,867 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 20:57:12,867 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 20:57:12,868 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 20:57:12,869 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 20:57:12,870 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 20:57:12,870 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 20:57:12,871 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 20:57:12,872 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 20:57:12,873 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 20:57:12,874 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 20:57:12,874 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 20:57:12,875 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 20:57:12,875 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 20:57:12,875 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 20:57:12,876 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 20:57:12,877 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 20:57:12,878 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-11-18 20:57:12,900 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 20:57:12,901 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 20:57:12,901 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 20:57:12,901 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 20:57:12,902 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 20:57:12,902 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 20:57:12,903 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 20:57:12,903 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 20:57:12,903 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 20:57:12,904 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 20:57:12,904 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 20:57:12,904 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 20:57:12,904 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 20:57:12,904 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 20:57:12,905 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 20:57:12,905 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 20:57:12,905 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 20:57:12,905 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 20:57:12,906 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 20:57:12,906 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 20:57:12,906 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 20:57:12,906 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:57:12,907 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 20:57:12,907 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 20:57:12,907 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 20:57:12,907 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 20:57:12,907 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 20:57:12,908 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 20:57:12,908 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 20:57:12,908 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 20:57:12,908 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 [2022-11-18 20:57:13,169 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 20:57:13,194 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 20:57:13,197 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 20:57:13,198 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 20:57:13,199 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 20:57:13,200 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-18 20:57:13,281 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/data/b1937aed8/f34e2b52ab714df78a2d7ca967b5fd67/FLAGe5bc16b71 [2022-11-18 20:57:14,020 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 20:57:14,021 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-18 20:57:14,080 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/data/b1937aed8/f34e2b52ab714df78a2d7ca967b5fd67/FLAGe5bc16b71 [2022-11-18 20:57:14,588 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/data/b1937aed8/f34e2b52ab714df78a2d7ca967b5fd67 [2022-11-18 20:57:14,591 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 20:57:14,592 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 20:57:14,594 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 20:57:14,594 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 20:57:14,602 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 20:57:14,603 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:57:14" (1/1) ... [2022-11-18 20:57:14,604 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2cff17f6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:14, skipping insertion in model container [2022-11-18 20:57:14,604 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:57:14" (1/1) ... [2022-11-18 20:57:14,612 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 20:57:14,728 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 20:57:15,926 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-11-18 20:57:16,598 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:57:16,628 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 20:57:16,829 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-11-18 20:57:16,948 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:57:17,068 INFO L208 MainTranslator]: Completed translation [2022-11-18 20:57:17,068 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17 WrapperNode [2022-11-18 20:57:17,068 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 20:57:17,070 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 20:57:17,070 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 20:57:17,070 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 20:57:17,078 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,158 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,313 INFO L138 Inliner]: procedures = 163, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 3077 [2022-11-18 20:57:17,313 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 20:57:17,315 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 20:57:17,315 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 20:57:17,316 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 20:57:17,325 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,325 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,349 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,350 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,447 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,486 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,528 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,539 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,579 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 20:57:17,595 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 20:57:17,595 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 20:57:17,595 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 20:57:17,596 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (1/1) ... [2022-11-18 20:57:17,603 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:57:17,622 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:57:17,640 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 20:57:17,669 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 20:57:17,692 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-11-18 20:57:17,692 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-11-18 20:57:17,692 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2022-11-18 20:57:17,692 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2022-11-18 20:57:17,692 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2022-11-18 20:57:17,693 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2022-11-18 20:57:17,693 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2022-11-18 20:57:17,693 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2022-11-18 20:57:17,693 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-18 20:57:17,693 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2022-11-18 20:57:17,693 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2022-11-18 20:57:17,694 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-18 20:57:17,694 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-18 20:57:17,694 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2022-11-18 20:57:17,695 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2022-11-18 20:57:17,695 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-18 20:57:17,695 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-18 20:57:17,696 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-18 20:57:17,696 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-11-18 20:57:17,696 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-11-18 20:57:17,696 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-18 20:57:17,697 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-18 20:57:17,697 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-11-18 20:57:17,697 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-11-18 20:57:17,697 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-18 20:57:17,697 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-18 20:57:17,697 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2022-11-18 20:57:17,697 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2022-11-18 20:57:17,698 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-11-18 20:57:17,698 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-11-18 20:57:17,698 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-18 20:57:17,698 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-18 20:57:17,698 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-11-18 20:57:17,698 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-11-18 20:57:17,699 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-11-18 20:57:17,699 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-11-18 20:57:17,699 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-18 20:57:17,699 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-18 20:57:17,700 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2022-11-18 20:57:17,700 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2022-11-18 20:57:17,700 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-18 20:57:17,700 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-18 20:57:17,700 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-18 20:57:17,700 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-18 20:57:17,700 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-18 20:57:17,701 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2022-11-18 20:57:17,701 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2022-11-18 20:57:17,701 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-11-18 20:57:17,701 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-11-18 20:57:17,702 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2022-11-18 20:57:17,702 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2022-11-18 20:57:17,702 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-18 20:57:17,702 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-18 20:57:17,703 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-11-18 20:57:17,703 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-11-18 20:57:17,703 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-18 20:57:17,704 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-18 20:57:17,705 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-18 20:57:17,705 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-18 20:57:17,706 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-18 20:57:17,707 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-11-18 20:57:17,707 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-11-18 20:57:17,707 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-18 20:57:17,708 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-18 20:57:17,708 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 20:57:17,708 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2022-11-18 20:57:17,708 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2022-11-18 20:57:17,708 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-11-18 20:57:17,708 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-11-18 20:57:17,709 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-18 20:57:17,709 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-18 20:57:17,709 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-11-18 20:57:17,710 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-11-18 20:57:17,710 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2022-11-18 20:57:17,710 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2022-11-18 20:57:17,710 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2022-11-18 20:57:17,710 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2022-11-18 20:57:17,711 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-18 20:57:17,711 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2022-11-18 20:57:17,711 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2022-11-18 20:57:17,711 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-11-18 20:57:17,712 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-11-18 20:57:17,712 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-18 20:57:17,712 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-18 20:57:17,712 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2022-11-18 20:57:17,712 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2022-11-18 20:57:17,712 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-11-18 20:57:17,712 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-11-18 20:57:17,713 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-11-18 20:57:17,713 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-11-18 20:57:17,713 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 20:57:17,714 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2022-11-18 20:57:17,714 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2022-11-18 20:57:17,714 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2022-11-18 20:57:17,714 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2022-11-18 20:57:17,714 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-11-18 20:57:17,715 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-11-18 20:57:17,715 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-18 20:57:17,716 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-18 20:57:17,716 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-18 20:57:17,716 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-18 20:57:17,717 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 20:57:17,717 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 20:57:17,717 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2022-11-18 20:57:17,717 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2022-11-18 20:57:18,395 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 20:57:18,405 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 20:57:18,927 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-18 20:57:19,958 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-11-18 20:57:23,788 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 20:57:23,802 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 20:57:23,803 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-18 20:57:23,806 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:57:23 BoogieIcfgContainer [2022-11-18 20:57:23,806 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 20:57:23,808 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 20:57:23,808 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 20:57:23,814 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 20:57:23,819 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 08:57:14" (1/3) ... [2022-11-18 20:57:23,820 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4f4b8611 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:57:23, skipping insertion in model container [2022-11-18 20:57:23,820 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:57:17" (2/3) ... [2022-11-18 20:57:23,820 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4f4b8611 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:57:23, skipping insertion in model container [2022-11-18 20:57:23,821 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:57:23" (3/3) ... [2022-11-18 20:57:23,822 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-18 20:57:23,846 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 20:57:23,846 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 20:57:23,990 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 20:57:24,002 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@48e6a83, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 20:57:24,002 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 20:57:24,021 INFO L276 IsEmpty]: Start isEmpty. Operand has 853 states, 629 states have (on average 1.3847376788553258) internal successors, (871), 655 states have internal predecessors, (871), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2022-11-18 20:57:24,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-18 20:57:24,051 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:24,052 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:24,053 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:24,061 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:24,062 INFO L85 PathProgramCache]: Analyzing trace with hash -2002313727, now seen corresponding path program 1 times [2022-11-18 20:57:24,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:24,073 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1172636312] [2022-11-18 20:57:24,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:24,074 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:24,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:24,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:57:24,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:24,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:57:24,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:24,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:57:24,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:24,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:24,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:24,832 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-18 20:57:24,833 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:24,833 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1172636312] [2022-11-18 20:57:24,834 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1172636312] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:24,834 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:24,835 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:57:24,838 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1914368546] [2022-11-18 20:57:24,839 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:24,844 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:57:24,845 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:24,879 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:57:24,880 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:57:24,885 INFO L87 Difference]: Start difference. First operand has 853 states, 629 states have (on average 1.3847376788553258) internal successors, (871), 655 states have internal predecessors, (871), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-18 20:57:27,406 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:57:29,414 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:57:35,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:35,413 INFO L93 Difference]: Finished difference Result 2748 states and 4114 transitions. [2022-11-18 20:57:35,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:57:35,415 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 44 [2022-11-18 20:57:35,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:35,459 INFO L225 Difference]: With dead ends: 2748 [2022-11-18 20:57:35,460 INFO L226 Difference]: Without dead ends: 1876 [2022-11-18 20:57:35,474 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:57:35,478 INFO L413 NwaCegarLoop]: 1196 mSDtfsCounter, 1926 mSDsluCounter, 2045 mSDsCounter, 0 mSdLazyCounter, 1669 mSolverCounterSat, 980 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2076 SdHoareTripleChecker+Valid, 3241 SdHoareTripleChecker+Invalid, 2651 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 980 IncrementalHoareTripleChecker+Valid, 1669 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:35,479 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2076 Valid, 3241 Invalid, 2651 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [980 Valid, 1669 Invalid, 2 Unknown, 0 Unchecked, 10.0s Time] [2022-11-18 20:57:35,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1876 states. [2022-11-18 20:57:35,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1876 to 1608. [2022-11-18 20:57:35,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1608 states, 1193 states have (on average 1.374685666387259) internal successors, (1640), 1225 states have internal predecessors, (1640), 332 states have call successors, (332), 83 states have call predecessors, (332), 82 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2022-11-18 20:57:35,716 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1608 states to 1608 states and 2299 transitions. [2022-11-18 20:57:35,719 INFO L78 Accepts]: Start accepts. Automaton has 1608 states and 2299 transitions. Word has length 44 [2022-11-18 20:57:35,719 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:35,719 INFO L495 AbstractCegarLoop]: Abstraction has 1608 states and 2299 transitions. [2022-11-18 20:57:35,720 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-18 20:57:35,721 INFO L276 IsEmpty]: Start isEmpty. Operand 1608 states and 2299 transitions. [2022-11-18 20:57:35,728 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-18 20:57:35,728 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:35,728 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:35,729 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 20:57:35,729 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:35,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:35,731 INFO L85 PathProgramCache]: Analyzing trace with hash 1296792476, now seen corresponding path program 1 times [2022-11-18 20:57:35,731 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:35,731 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1702049983] [2022-11-18 20:57:35,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:35,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:35,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:36,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:57:36,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:36,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:57:36,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:36,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:57:36,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:36,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:36,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:36,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-18 20:57:36,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:37,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:57:37,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:37,043 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-18 20:57:37,044 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:37,044 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1702049983] [2022-11-18 20:57:37,044 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1702049983] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:37,044 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:37,045 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-18 20:57:37,045 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1338869420] [2022-11-18 20:57:37,045 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:37,047 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-18 20:57:37,048 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:37,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-18 20:57:37,049 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:57:37,050 INFO L87 Difference]: Start difference. First operand 1608 states and 2299 transitions. Second operand has 8 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 3 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-18 20:57:39,497 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:57:41,501 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:57:47,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:57:47,878 INFO L93 Difference]: Finished difference Result 3820 states and 5608 transitions. [2022-11-18 20:57:47,879 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-18 20:57:47,879 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 3 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 61 [2022-11-18 20:57:47,879 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:57:47,894 INFO L225 Difference]: With dead ends: 3820 [2022-11-18 20:57:47,894 INFO L226 Difference]: Without dead ends: 2223 [2022-11-18 20:57:47,899 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2022-11-18 20:57:47,901 INFO L413 NwaCegarLoop]: 1491 mSDtfsCounter, 902 mSDsluCounter, 6515 mSDsCounter, 0 mSdLazyCounter, 2798 mSolverCounterSat, 467 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1029 SdHoareTripleChecker+Valid, 8006 SdHoareTripleChecker+Invalid, 3267 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 467 IncrementalHoareTripleChecker+Valid, 2798 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.5s IncrementalHoareTripleChecker+Time [2022-11-18 20:57:47,901 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1029 Valid, 8006 Invalid, 3267 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [467 Valid, 2798 Invalid, 2 Unknown, 0 Unchecked, 10.5s Time] [2022-11-18 20:57:47,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2223 states. [2022-11-18 20:57:48,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2223 to 1608. [2022-11-18 20:57:48,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1608 states, 1193 states have (on average 1.3738474434199497) internal successors, (1639), 1225 states have internal predecessors, (1639), 332 states have call successors, (332), 83 states have call predecessors, (332), 82 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2022-11-18 20:57:48,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1608 states to 1608 states and 2298 transitions. [2022-11-18 20:57:48,018 INFO L78 Accepts]: Start accepts. Automaton has 1608 states and 2298 transitions. Word has length 61 [2022-11-18 20:57:48,019 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:57:48,019 INFO L495 AbstractCegarLoop]: Abstraction has 1608 states and 2298 transitions. [2022-11-18 20:57:48,019 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 3 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-18 20:57:48,020 INFO L276 IsEmpty]: Start isEmpty. Operand 1608 states and 2298 transitions. [2022-11-18 20:57:48,025 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-18 20:57:48,025 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:57:48,026 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:57:48,026 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 20:57:48,026 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:57:48,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:57:48,028 INFO L85 PathProgramCache]: Analyzing trace with hash 1515647194, now seen corresponding path program 1 times [2022-11-18 20:57:48,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:57:48,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1616849516] [2022-11-18 20:57:48,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:57:48,033 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:57:48,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:57:48,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:57:48,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:57:48,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:57:48,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-18 20:57:48,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:57:48,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:57:48,859 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-18 20:57:48,859 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:57:48,859 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1616849516] [2022-11-18 20:57:48,860 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1616849516] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:57:48,860 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:57:48,860 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:57:48,861 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1287418537] [2022-11-18 20:57:48,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:57:48,862 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:57:48,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:57:48,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:57:48,865 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:57:48,865 INFO L87 Difference]: Start difference. First operand 1608 states and 2298 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 20:57:51,186 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:57:53,192 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:57:56,830 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:57:58,838 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:02,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:58:02,766 INFO L93 Difference]: Finished difference Result 5337 states and 7924 transitions. [2022-11-18 20:58:02,770 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:58:02,771 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-11-18 20:58:02,772 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:58:02,798 INFO L225 Difference]: With dead ends: 5337 [2022-11-18 20:58:02,799 INFO L226 Difference]: Without dead ends: 3740 [2022-11-18 20:58:02,808 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:58:02,814 INFO L413 NwaCegarLoop]: 1247 mSDtfsCounter, 1978 mSDsluCounter, 2091 mSDsCounter, 0 mSdLazyCounter, 1655 mSolverCounterSat, 976 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2108 SdHoareTripleChecker+Valid, 3338 SdHoareTripleChecker+Invalid, 2635 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 976 IncrementalHoareTripleChecker+Valid, 1655 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.5s IncrementalHoareTripleChecker+Time [2022-11-18 20:58:02,815 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2108 Valid, 3338 Invalid, 2635 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [976 Valid, 1655 Invalid, 4 Unknown, 0 Unchecked, 13.5s Time] [2022-11-18 20:58:02,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3740 states. [2022-11-18 20:58:02,989 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3740 to 3278. [2022-11-18 20:58:02,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3278 states, 2426 states have (on average 1.368507831821929) internal successors, (3320), 2496 states have internal predecessors, (3320), 671 states have call successors, (671), 165 states have call predecessors, (671), 180 states have return successors, (762), 642 states have call predecessors, (762), 666 states have call successors, (762) [2022-11-18 20:58:03,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3278 states to 3278 states and 4753 transitions. [2022-11-18 20:58:03,011 INFO L78 Accepts]: Start accepts. Automaton has 3278 states and 4753 transitions. Word has length 61 [2022-11-18 20:58:03,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:58:03,014 INFO L495 AbstractCegarLoop]: Abstraction has 3278 states and 4753 transitions. [2022-11-18 20:58:03,014 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 20:58:03,014 INFO L276 IsEmpty]: Start isEmpty. Operand 3278 states and 4753 transitions. [2022-11-18 20:58:03,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-11-18 20:58:03,016 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:58:03,016 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:58:03,016 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 20:58:03,017 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:58:03,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:58:03,018 INFO L85 PathProgramCache]: Analyzing trace with hash -259943975, now seen corresponding path program 1 times [2022-11-18 20:58:03,018 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:58:03,018 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [753172061] [2022-11-18 20:58:03,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:58:03,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:58:03,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:03,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:58:03,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:03,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:58:03,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:03,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:58:03,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:03,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:58:03,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:03,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-18 20:58:03,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:03,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:58:03,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:03,754 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-18 20:58:03,754 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:58:03,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [753172061] [2022-11-18 20:58:03,755 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [753172061] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:58:03,755 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:58:03,755 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:58:03,755 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1214252892] [2022-11-18 20:58:03,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:58:03,756 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:58:03,756 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:58:03,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:58:03,757 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:58:03,757 INFO L87 Difference]: Start difference. First operand 3278 states and 4753 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 20:58:06,033 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:08,044 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:13,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:58:13,572 INFO L93 Difference]: Finished difference Result 10707 states and 16155 transitions. [2022-11-18 20:58:13,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:58:13,574 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 62 [2022-11-18 20:58:13,574 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:58:13,623 INFO L225 Difference]: With dead ends: 10707 [2022-11-18 20:58:13,624 INFO L226 Difference]: Without dead ends: 7440 [2022-11-18 20:58:13,638 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:58:13,640 INFO L413 NwaCegarLoop]: 1190 mSDtfsCounter, 2035 mSDsluCounter, 2018 mSDsCounter, 0 mSdLazyCounter, 1625 mSolverCounterSat, 998 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2176 SdHoareTripleChecker+Valid, 3208 SdHoareTripleChecker+Invalid, 2625 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 998 IncrementalHoareTripleChecker+Valid, 1625 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:58:13,642 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2176 Valid, 3208 Invalid, 2625 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [998 Valid, 1625 Invalid, 2 Unknown, 0 Unchecked, 9.2s Time] [2022-11-18 20:58:13,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7440 states. [2022-11-18 20:58:14,051 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7440 to 6611. [2022-11-18 20:58:14,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6611 states, 4885 states have (on average 1.3637666325486182) internal successors, (6662), 5031 states have internal predecessors, (6662), 1349 states have call successors, (1349), 329 states have call predecessors, (1349), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2022-11-18 20:58:14,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6611 states to 6611 states and 9713 transitions. [2022-11-18 20:58:14,103 INFO L78 Accepts]: Start accepts. Automaton has 6611 states and 9713 transitions. Word has length 62 [2022-11-18 20:58:14,105 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:58:14,106 INFO L495 AbstractCegarLoop]: Abstraction has 6611 states and 9713 transitions. [2022-11-18 20:58:14,106 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 20:58:14,106 INFO L276 IsEmpty]: Start isEmpty. Operand 6611 states and 9713 transitions. [2022-11-18 20:58:14,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-18 20:58:14,112 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:58:14,112 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:58:14,112 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 20:58:14,112 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:58:14,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:58:14,113 INFO L85 PathProgramCache]: Analyzing trace with hash 531309501, now seen corresponding path program 1 times [2022-11-18 20:58:14,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:58:14,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1128773341] [2022-11-18 20:58:14,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:58:14,114 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:58:14,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:14,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:58:14,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:14,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:58:14,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:14,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:58:14,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:14,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:58:14,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:14,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-18 20:58:14,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:14,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:58:14,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:14,508 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-18 20:58:14,508 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:58:14,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1128773341] [2022-11-18 20:58:14,509 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1128773341] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:58:14,509 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:58:14,509 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:58:14,509 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1219212677] [2022-11-18 20:58:14,509 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:58:14,511 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:58:14,511 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:58:14,511 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:58:14,512 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:58:14,512 INFO L87 Difference]: Start difference. First operand 6611 states and 9713 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 20:58:16,788 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:18,795 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:24,494 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:58:24,494 INFO L93 Difference]: Finished difference Result 7438 states and 11140 transitions. [2022-11-18 20:58:24,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:58:24,495 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 63 [2022-11-18 20:58:24,495 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:58:24,542 INFO L225 Difference]: With dead ends: 7438 [2022-11-18 20:58:24,542 INFO L226 Difference]: Without dead ends: 7435 [2022-11-18 20:58:24,548 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:58:24,549 INFO L413 NwaCegarLoop]: 1209 mSDtfsCounter, 2018 mSDsluCounter, 2031 mSDsCounter, 0 mSdLazyCounter, 1634 mSolverCounterSat, 991 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2158 SdHoareTripleChecker+Valid, 3240 SdHoareTripleChecker+Invalid, 2627 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 991 IncrementalHoareTripleChecker+Valid, 1634 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.5s IncrementalHoareTripleChecker+Time [2022-11-18 20:58:24,549 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2158 Valid, 3240 Invalid, 2627 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [991 Valid, 1634 Invalid, 2 Unknown, 0 Unchecked, 9.5s Time] [2022-11-18 20:58:24,557 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7435 states. [2022-11-18 20:58:25,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7435 to 6612. [2022-11-18 20:58:25,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6612 states, 4886 states have (on average 1.3636921817437577) internal successors, (6663), 5032 states have internal predecessors, (6663), 1349 states have call successors, (1349), 329 states have call predecessors, (1349), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2022-11-18 20:58:25,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6612 states to 6612 states and 9714 transitions. [2022-11-18 20:58:25,066 INFO L78 Accepts]: Start accepts. Automaton has 6612 states and 9714 transitions. Word has length 63 [2022-11-18 20:58:25,067 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:58:25,067 INFO L495 AbstractCegarLoop]: Abstraction has 6612 states and 9714 transitions. [2022-11-18 20:58:25,068 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 3 states have internal predecessors, (41), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 20:58:25,069 INFO L276 IsEmpty]: Start isEmpty. Operand 6612 states and 9714 transitions. [2022-11-18 20:58:25,071 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-18 20:58:25,071 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:58:25,075 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:58:25,075 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 20:58:25,076 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:58:25,076 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:58:25,076 INFO L85 PathProgramCache]: Analyzing trace with hash -709631652, now seen corresponding path program 1 times [2022-11-18 20:58:25,076 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:58:25,077 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [460179137] [2022-11-18 20:58:25,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:58:25,077 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:58:25,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:25,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:58:25,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:25,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:58:25,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:25,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:58:25,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:25,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:58:25,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:25,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-18 20:58:25,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:25,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:58:25,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:25,466 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-18 20:58:25,467 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:58:25,467 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [460179137] [2022-11-18 20:58:25,467 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [460179137] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:58:25,467 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:58:25,467 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:58:25,468 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1691299608] [2022-11-18 20:58:25,468 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:58:25,468 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:58:25,468 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:58:25,469 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:58:25,469 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:58:25,469 INFO L87 Difference]: Start difference. First operand 6612 states and 9714 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 20:58:27,748 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:29,759 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:33,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:58:33,521 INFO L93 Difference]: Finished difference Result 7434 states and 11136 transitions. [2022-11-18 20:58:33,522 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-18 20:58:33,522 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 64 [2022-11-18 20:58:33,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:58:33,566 INFO L225 Difference]: With dead ends: 7434 [2022-11-18 20:58:33,566 INFO L226 Difference]: Without dead ends: 7431 [2022-11-18 20:58:33,571 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:58:33,572 INFO L413 NwaCegarLoop]: 1032 mSDtfsCounter, 1548 mSDsluCounter, 1088 mSDsCounter, 0 mSdLazyCounter, 912 mSolverCounterSat, 545 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1690 SdHoareTripleChecker+Valid, 2120 SdHoareTripleChecker+Invalid, 1459 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 545 IncrementalHoareTripleChecker+Valid, 912 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.7s IncrementalHoareTripleChecker+Time [2022-11-18 20:58:33,572 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1690 Valid, 2120 Invalid, 1459 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [545 Valid, 912 Invalid, 2 Unknown, 0 Unchecked, 7.7s Time] [2022-11-18 20:58:33,580 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7431 states. [2022-11-18 20:58:33,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7431 to 6611. [2022-11-18 20:58:34,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6611 states, 4886 states have (on average 1.3634875153499795) internal successors, (6662), 5031 states have internal predecessors, (6662), 1348 states have call successors, (1348), 329 states have call predecessors, (1348), 376 states have return successors, (1702), 1304 states have call predecessors, (1702), 1344 states have call successors, (1702) [2022-11-18 20:58:34,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6611 states to 6611 states and 9712 transitions. [2022-11-18 20:58:34,034 INFO L78 Accepts]: Start accepts. Automaton has 6611 states and 9712 transitions. Word has length 64 [2022-11-18 20:58:34,034 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:58:34,034 INFO L495 AbstractCegarLoop]: Abstraction has 6611 states and 9712 transitions. [2022-11-18 20:58:34,035 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 20:58:34,035 INFO L276 IsEmpty]: Start isEmpty. Operand 6611 states and 9712 transitions. [2022-11-18 20:58:34,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-18 20:58:34,036 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:58:34,037 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:58:34,037 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 20:58:34,037 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:58:34,037 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:58:34,038 INFO L85 PathProgramCache]: Analyzing trace with hash -524096864, now seen corresponding path program 1 times [2022-11-18 20:58:34,038 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:58:34,038 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1602722860] [2022-11-18 20:58:34,038 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:58:34,038 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:58:34,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:34,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:58:34,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:34,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:58:34,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:34,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:58:34,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:34,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:58:34,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:34,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-18 20:58:34,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:34,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:58:34,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:34,363 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-18 20:58:34,363 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:58:34,363 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1602722860] [2022-11-18 20:58:34,363 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1602722860] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:58:34,363 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:58:34,364 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:58:34,364 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2098549483] [2022-11-18 20:58:34,364 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:58:34,365 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:58:34,365 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:58:34,366 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:58:34,366 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:58:34,366 INFO L87 Difference]: Start difference. First operand 6611 states and 9712 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 20:58:36,650 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:38,655 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:41,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:58:41,900 INFO L93 Difference]: Finished difference Result 7433 states and 11134 transitions. [2022-11-18 20:58:41,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-18 20:58:41,900 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 65 [2022-11-18 20:58:41,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:58:41,943 INFO L225 Difference]: With dead ends: 7433 [2022-11-18 20:58:41,943 INFO L226 Difference]: Without dead ends: 7401 [2022-11-18 20:58:41,951 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:58:41,951 INFO L413 NwaCegarLoop]: 1011 mSDtfsCounter, 1564 mSDsluCounter, 1080 mSDsCounter, 0 mSdLazyCounter, 888 mSolverCounterSat, 544 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1706 SdHoareTripleChecker+Valid, 2091 SdHoareTripleChecker+Invalid, 1434 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 544 IncrementalHoareTripleChecker+Valid, 888 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:58:41,952 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1706 Valid, 2091 Invalid, 1434 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [544 Valid, 888 Invalid, 2 Unknown, 0 Unchecked, 7.1s Time] [2022-11-18 20:58:41,962 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7401 states. [2022-11-18 20:58:42,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7401 to 6581. [2022-11-18 20:58:42,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6581 states, 4859 states have (on average 1.36324346573369) internal successors, (6624), 5003 states have internal predecessors, (6624), 1345 states have call successors, (1345), 329 states have call predecessors, (1345), 376 states have return successors, (1696), 1302 states have call predecessors, (1696), 1342 states have call successors, (1696) [2022-11-18 20:58:42,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6581 states to 6581 states and 9665 transitions. [2022-11-18 20:58:42,477 INFO L78 Accepts]: Start accepts. Automaton has 6581 states and 9665 transitions. Word has length 65 [2022-11-18 20:58:42,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:58:42,479 INFO L495 AbstractCegarLoop]: Abstraction has 6581 states and 9665 transitions. [2022-11-18 20:58:42,479 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 20:58:42,479 INFO L276 IsEmpty]: Start isEmpty. Operand 6581 states and 9665 transitions. [2022-11-18 20:58:42,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-18 20:58:42,492 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:58:42,492 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:58:42,492 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 20:58:42,493 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:58:42,493 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:58:42,493 INFO L85 PathProgramCache]: Analyzing trace with hash -67737105, now seen corresponding path program 1 times [2022-11-18 20:58:42,494 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:58:42,494 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [287775782] [2022-11-18 20:58:42,494 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:58:42,494 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:58:42,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:42,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:58:42,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:42,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:58:42,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:42,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:58:42,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:42,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:58:42,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:42,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-18 20:58:42,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:42,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:58:42,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:42,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-18 20:58:42,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:42,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-18 20:58:42,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:42,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-11-18 20:58:42,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:42,847 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-18 20:58:42,847 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:58:42,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [287775782] [2022-11-18 20:58:42,848 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [287775782] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:58:42,848 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:58:42,848 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:58:42,848 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [182160814] [2022-11-18 20:58:42,848 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:58:42,849 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:58:42,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:58:42,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:58:42,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:58:42,850 INFO L87 Difference]: Start difference. First operand 6581 states and 9665 transitions. Second operand has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-18 20:58:45,153 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:47,165 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:49,170 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:58:56,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:58:56,912 INFO L93 Difference]: Finished difference Result 20425 states and 30360 transitions. [2022-11-18 20:58:56,912 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-18 20:58:56,913 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-11-18 20:58:56,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:58:56,982 INFO L225 Difference]: With dead ends: 20425 [2022-11-18 20:58:56,982 INFO L226 Difference]: Without dead ends: 13855 [2022-11-18 20:58:57,010 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2022-11-18 20:58:57,011 INFO L413 NwaCegarLoop]: 1355 mSDtfsCounter, 1937 mSDsluCounter, 3020 mSDsCounter, 0 mSdLazyCounter, 2464 mSolverCounterSat, 1202 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2073 SdHoareTripleChecker+Valid, 4375 SdHoareTripleChecker+Invalid, 3669 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1202 IncrementalHoareTripleChecker+Valid, 2464 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:58:57,012 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2073 Valid, 4375 Invalid, 3669 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1202 Valid, 2464 Invalid, 3 Unknown, 0 Unchecked, 13.1s Time] [2022-11-18 20:58:57,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13855 states. [2022-11-18 20:58:58,119 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13855 to 12405. [2022-11-18 20:58:58,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12405 states, 9072 states have (on average 1.346009700176367) internal successors, (12211), 9391 states have internal predecessors, (12211), 2516 states have call successors, (2516), 623 states have call predecessors, (2516), 816 states have return successors, (3667), 2490 states have call predecessors, (3667), 2513 states have call successors, (3667) [2022-11-18 20:58:58,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12405 states to 12405 states and 18394 transitions. [2022-11-18 20:58:58,191 INFO L78 Accepts]: Start accepts. Automaton has 12405 states and 18394 transitions. Word has length 98 [2022-11-18 20:58:58,191 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:58:58,191 INFO L495 AbstractCegarLoop]: Abstraction has 12405 states and 18394 transitions. [2022-11-18 20:58:58,191 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (10), 6 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-18 20:58:58,192 INFO L276 IsEmpty]: Start isEmpty. Operand 12405 states and 18394 transitions. [2022-11-18 20:58:58,202 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2022-11-18 20:58:58,202 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:58:58,202 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:58:58,202 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 20:58:58,203 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:58:58,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:58:58,203 INFO L85 PathProgramCache]: Analyzing trace with hash 1706032167, now seen corresponding path program 1 times [2022-11-18 20:58:58,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:58:58,204 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [558131184] [2022-11-18 20:58:58,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:58:58,204 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:58:58,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:58:59,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:58:59,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:58:59,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:58:59,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-18 20:58:59,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:58:59,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:58:59,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 20:58:59,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-11-18 20:58:59,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:58:59,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-18 20:58:59,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:58:59,407 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2022-11-18 20:58:59,407 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:58:59,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [558131184] [2022-11-18 20:58:59,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [558131184] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:58:59,408 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:58:59,408 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-18 20:58:59,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1520319299] [2022-11-18 20:58:59,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:58:59,409 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-18 20:58:59,410 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:58:59,410 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-18 20:58:59,410 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-11-18 20:58:59,411 INFO L87 Difference]: Start difference. First operand 12405 states and 18394 transitions. Second operand has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-18 20:59:01,764 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:59:03,776 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:59:05,785 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:59:12,167 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:59:12,167 INFO L93 Difference]: Finished difference Result 26195 states and 39029 transitions. [2022-11-18 20:59:12,168 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 20:59:12,168 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) Word has length 124 [2022-11-18 20:59:12,168 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:59:12,250 INFO L225 Difference]: With dead ends: 26195 [2022-11-18 20:59:12,251 INFO L226 Difference]: Without dead ends: 13812 [2022-11-18 20:59:12,310 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=56, Invalid=126, Unknown=0, NotChecked=0, Total=182 [2022-11-18 20:59:12,311 INFO L413 NwaCegarLoop]: 1032 mSDtfsCounter, 763 mSDsluCounter, 4459 mSDsCounter, 0 mSdLazyCounter, 2401 mSolverCounterSat, 703 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 788 SdHoareTripleChecker+Valid, 5491 SdHoareTripleChecker+Invalid, 3107 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 703 IncrementalHoareTripleChecker+Valid, 2401 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.6s IncrementalHoareTripleChecker+Time [2022-11-18 20:59:12,311 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [788 Valid, 5491 Invalid, 3107 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [703 Valid, 2401 Invalid, 3 Unknown, 0 Unchecked, 11.6s Time] [2022-11-18 20:59:12,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13812 states. [2022-11-18 20:59:13,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13812 to 12425. [2022-11-18 20:59:13,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12425 states, 9088 states have (on average 1.345400528169014) internal successors, (12227), 9403 states have internal predecessors, (12227), 2520 states have call successors, (2520), 623 states have call predecessors, (2520), 816 states have return successors, (3671), 2498 states have call predecessors, (3671), 2517 states have call successors, (3671) [2022-11-18 20:59:13,408 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12425 states to 12425 states and 18418 transitions. [2022-11-18 20:59:13,411 INFO L78 Accepts]: Start accepts. Automaton has 12425 states and 18418 transitions. Word has length 124 [2022-11-18 20:59:13,412 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:59:13,412 INFO L495 AbstractCegarLoop]: Abstraction has 12425 states and 18418 transitions. [2022-11-18 20:59:13,412 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (11), 4 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-18 20:59:13,412 INFO L276 IsEmpty]: Start isEmpty. Operand 12425 states and 18418 transitions. [2022-11-18 20:59:13,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2022-11-18 20:59:13,423 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:59:13,423 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:59:13,423 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-18 20:59:13,423 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:59:13,424 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:59:13,424 INFO L85 PathProgramCache]: Analyzing trace with hash 702147405, now seen corresponding path program 1 times [2022-11-18 20:59:13,424 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:59:13,424 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1247649613] [2022-11-18 20:59:13,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:59:13,425 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:59:13,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:13,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:59:13,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:59:14,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:59:14,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:59:14,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-18 20:59:14,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 20:59:14,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:59:14,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 20:59:14,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-11-18 20:59:14,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:59:14,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:59:14,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-18 20:59:14,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:14,338 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2022-11-18 20:59:14,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:59:14,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1247649613] [2022-11-18 20:59:14,338 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1247649613] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:59:14,339 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:59:14,339 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-18 20:59:14,339 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1755407206] [2022-11-18 20:59:14,339 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:59:14,340 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-18 20:59:14,340 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:59:14,340 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-18 20:59:14,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:59:14,340 INFO L87 Difference]: Start difference. First operand 12425 states and 18418 transitions. Second operand has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-18 20:59:16,781 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:59:18,788 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:59:20,792 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:59:27,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:59:27,367 INFO L93 Difference]: Finished difference Result 26216 states and 39014 transitions. [2022-11-18 20:59:27,367 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-18 20:59:27,368 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 130 [2022-11-18 20:59:27,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:59:27,438 INFO L225 Difference]: With dead ends: 26216 [2022-11-18 20:59:27,438 INFO L226 Difference]: Without dead ends: 13794 [2022-11-18 20:59:27,476 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-11-18 20:59:27,477 INFO L413 NwaCegarLoop]: 1046 mSDtfsCounter, 689 mSDsluCounter, 4225 mSDsCounter, 0 mSdLazyCounter, 2364 mSolverCounterSat, 685 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 714 SdHoareTripleChecker+Valid, 5271 SdHoareTripleChecker+Invalid, 3052 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 685 IncrementalHoareTripleChecker+Valid, 2364 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.8s IncrementalHoareTripleChecker+Time [2022-11-18 20:59:27,477 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [714 Valid, 5271 Invalid, 3052 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [685 Valid, 2364 Invalid, 3 Unknown, 0 Unchecked, 11.8s Time] [2022-11-18 20:59:27,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13794 states. [2022-11-18 20:59:28,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13794 to 12434. [2022-11-18 20:59:28,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12434 states, 9097 states have (on average 1.3450588105969001) internal successors, (12236), 9412 states have internal predecessors, (12236), 2520 states have call successors, (2520), 623 states have call predecessors, (2520), 816 states have return successors, (3671), 2498 states have call predecessors, (3671), 2517 states have call successors, (3671) [2022-11-18 20:59:28,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12434 states to 12434 states and 18427 transitions. [2022-11-18 20:59:28,415 INFO L78 Accepts]: Start accepts. Automaton has 12434 states and 18427 transitions. Word has length 130 [2022-11-18 20:59:28,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:59:28,415 INFO L495 AbstractCegarLoop]: Abstraction has 12434 states and 18427 transitions. [2022-11-18 20:59:28,416 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.625) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (13), 6 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-18 20:59:28,416 INFO L276 IsEmpty]: Start isEmpty. Operand 12434 states and 18427 transitions. [2022-11-18 20:59:28,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2022-11-18 20:59:28,428 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:59:28,428 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:59:28,428 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-18 20:59:28,429 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:59:28,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:59:28,429 INFO L85 PathProgramCache]: Analyzing trace with hash 1613372360, now seen corresponding path program 1 times [2022-11-18 20:59:28,429 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:59:28,430 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1572958622] [2022-11-18 20:59:28,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:59:28,430 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:59:28,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:59:29,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:59:29,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:59:29,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:59:29,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 20:59:29,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-18 20:59:29,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-11-18 20:59:29,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-18 20:59:29,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-11-18 20:59:29,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:59:29,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:59:29,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-18 20:59:29,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:29,545 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 69 trivial. 0 not checked. [2022-11-18 20:59:29,546 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:59:29,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1572958622] [2022-11-18 20:59:29,546 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1572958622] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:59:29,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [195953775] [2022-11-18 20:59:29,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:59:29,547 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:59:29,547 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:59:29,554 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:59:29,565 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 20:59:30,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:30,619 INFO L263 TraceCheckSpWp]: Trace formula consists of 2201 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-18 20:59:30,637 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:59:30,775 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2022-11-18 20:59:30,775 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 20:59:30,775 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [195953775] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:59:30,776 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 20:59:30,776 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2022-11-18 20:59:30,776 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1398854291] [2022-11-18 20:59:30,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:59:30,777 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:59:30,777 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:59:30,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:59:30,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-11-18 20:59:30,779 INFO L87 Difference]: Start difference. First operand 12434 states and 18427 transitions. Second operand has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-18 20:59:31,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:59:31,622 INFO L93 Difference]: Finished difference Result 20268 states and 29941 transitions. [2022-11-18 20:59:31,623 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-18 20:59:31,623 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 131 [2022-11-18 20:59:31,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:59:31,669 INFO L225 Difference]: With dead ends: 20268 [2022-11-18 20:59:31,669 INFO L226 Difference]: Without dead ends: 7847 [2022-11-18 20:59:31,711 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-11-18 20:59:31,712 INFO L413 NwaCegarLoop]: 1191 mSDtfsCounter, 38 mSDsluCounter, 3564 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 4755 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:59:31,713 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 4755 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:59:31,723 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7847 states. [2022-11-18 20:59:32,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7847 to 7620. [2022-11-18 20:59:32,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7620 states, 5579 states have (on average 1.3403835812869689) internal successors, (7478), 5773 states have internal predecessors, (7478), 1533 states have call successors, (1533), 397 states have call predecessors, (1533), 507 states have return successors, (2172), 1510 states have call predecessors, (2172), 1530 states have call successors, (2172) [2022-11-18 20:59:32,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7620 states to 7620 states and 11183 transitions. [2022-11-18 20:59:32,295 INFO L78 Accepts]: Start accepts. Automaton has 7620 states and 11183 transitions. Word has length 131 [2022-11-18 20:59:32,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:59:32,296 INFO L495 AbstractCegarLoop]: Abstraction has 7620 states and 11183 transitions. [2022-11-18 20:59:32,296 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-18 20:59:32,296 INFO L276 IsEmpty]: Start isEmpty. Operand 7620 states and 11183 transitions. [2022-11-18 20:59:32,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2022-11-18 20:59:32,308 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:59:32,308 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:59:32,326 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-18 20:59:32,519 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-18 20:59:32,520 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:59:32,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:59:32,520 INFO L85 PathProgramCache]: Analyzing trace with hash -2080933725, now seen corresponding path program 1 times [2022-11-18 20:59:32,521 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:59:32,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [350225451] [2022-11-18 20:59:32,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:59:32,521 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:59:32,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:59:33,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:59:33,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:59:33,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:59:33,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 20:59:33,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-18 20:59:33,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-18 20:59:33,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-18 20:59:33,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-18 20:59:33,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-18 20:59:33,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:59:33,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:59:33,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-18 20:59:33,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:33,807 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2022-11-18 20:59:33,808 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:59:33,808 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [350225451] [2022-11-18 20:59:33,808 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [350225451] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:59:33,808 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:59:33,808 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-18 20:59:33,809 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [683028049] [2022-11-18 20:59:33,809 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:59:33,809 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-18 20:59:33,809 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:59:33,810 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-18 20:59:33,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-11-18 20:59:33,810 INFO L87 Difference]: Start difference. First operand 7620 states and 11183 transitions. Second operand has 10 states, 9 states have (on average 10.444444444444445) internal successors, (94), 5 states have internal predecessors, (94), 3 states have call successors, (14), 6 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-11-18 20:59:36,195 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:59:38,206 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:59:44,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:59:44,091 INFO L93 Difference]: Finished difference Result 14924 states and 22049 transitions. [2022-11-18 20:59:44,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-18 20:59:44,092 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 10.444444444444445) internal successors, (94), 5 states have internal predecessors, (94), 3 states have call successors, (14), 6 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) Word has length 137 [2022-11-18 20:59:44,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:59:44,134 INFO L225 Difference]: With dead ends: 14924 [2022-11-18 20:59:44,134 INFO L226 Difference]: Without dead ends: 8536 [2022-11-18 20:59:44,156 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-11-18 20:59:44,157 INFO L413 NwaCegarLoop]: 1276 mSDtfsCounter, 1358 mSDsluCounter, 5631 mSDsCounter, 0 mSdLazyCounter, 2701 mSolverCounterSat, 934 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1498 SdHoareTripleChecker+Valid, 6907 SdHoareTripleChecker+Invalid, 3637 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 934 IncrementalHoareTripleChecker+Valid, 2701 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.5s IncrementalHoareTripleChecker+Time [2022-11-18 20:59:44,157 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1498 Valid, 6907 Invalid, 3637 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [934 Valid, 2701 Invalid, 2 Unknown, 0 Unchecked, 9.5s Time] [2022-11-18 20:59:44,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8536 states. [2022-11-18 20:59:44,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8536 to 7620. [2022-11-18 20:59:44,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7620 states, 5579 states have (on average 1.3396666069188026) internal successors, (7474), 5773 states have internal predecessors, (7474), 1533 states have call successors, (1533), 397 states have call predecessors, (1533), 507 states have return successors, (2172), 1510 states have call predecessors, (2172), 1530 states have call successors, (2172) [2022-11-18 20:59:44,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7620 states to 7620 states and 11179 transitions. [2022-11-18 20:59:44,822 INFO L78 Accepts]: Start accepts. Automaton has 7620 states and 11179 transitions. Word has length 137 [2022-11-18 20:59:44,823 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:59:44,823 INFO L495 AbstractCegarLoop]: Abstraction has 7620 states and 11179 transitions. [2022-11-18 20:59:44,823 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 10.444444444444445) internal successors, (94), 5 states have internal predecessors, (94), 3 states have call successors, (14), 6 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-11-18 20:59:44,824 INFO L276 IsEmpty]: Start isEmpty. Operand 7620 states and 11179 transitions. [2022-11-18 20:59:44,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2022-11-18 20:59:44,837 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:59:44,837 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:59:44,837 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-18 20:59:44,837 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:59:44,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:59:44,838 INFO L85 PathProgramCache]: Analyzing trace with hash -1241900063, now seen corresponding path program 1 times [2022-11-18 20:59:44,838 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:59:44,838 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [572105026] [2022-11-18 20:59:44,839 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:59:44,839 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:59:45,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:59:45,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:59:45,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:59:45,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:59:45,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 20:59:45,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-18 20:59:45,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-18 20:59:45,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-18 20:59:45,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-18 20:59:45,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-18 20:59:45,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:59:45,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:59:45,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-18 20:59:45,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:45,968 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-11-18 20:59:45,969 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:59:45,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [572105026] [2022-11-18 20:59:45,969 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [572105026] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:59:45,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1628382872] [2022-11-18 20:59:45,969 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:59:45,970 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:59:45,970 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:59:45,971 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:59:45,995 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-18 20:59:47,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:47,088 INFO L263 TraceCheckSpWp]: Trace formula consists of 2279 conjuncts, 60 conjunts are in the unsatisfiable core [2022-11-18 20:59:47,095 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:59:47,674 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 66 trivial. 0 not checked. [2022-11-18 20:59:47,675 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 20:59:47,675 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1628382872] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:59:47,675 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 20:59:47,676 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [9] total 21 [2022-11-18 20:59:47,676 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [257985230] [2022-11-18 20:59:47,676 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:59:47,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-18 20:59:47,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:59:47,677 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-18 20:59:47,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=378, Unknown=0, NotChecked=0, Total=420 [2022-11-18 20:59:47,678 INFO L87 Difference]: Start difference. First operand 7620 states and 11179 transitions. Second operand has 14 states, 13 states have (on average 7.076923076923077) internal successors, (92), 11 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2022-11-18 20:59:51,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:59:51,408 INFO L93 Difference]: Finished difference Result 16329 states and 24365 transitions. [2022-11-18 20:59:51,409 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-18 20:59:51,409 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 7.076923076923077) internal successors, (92), 11 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) Word has length 137 [2022-11-18 20:59:51,410 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:59:51,456 INFO L225 Difference]: With dead ends: 16329 [2022-11-18 20:59:51,456 INFO L226 Difference]: Without dead ends: 9941 [2022-11-18 20:59:51,481 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 113 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=114, Invalid=1076, Unknown=0, NotChecked=0, Total=1190 [2022-11-18 20:59:51,482 INFO L413 NwaCegarLoop]: 2405 mSDtfsCounter, 2563 mSDsluCounter, 28117 mSDsCounter, 0 mSdLazyCounter, 1182 mSolverCounterSat, 206 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2651 SdHoareTripleChecker+Valid, 30522 SdHoareTripleChecker+Invalid, 1388 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 206 IncrementalHoareTripleChecker+Valid, 1182 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-18 20:59:51,482 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2651 Valid, 30522 Invalid, 1388 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [206 Valid, 1182 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-11-18 20:59:51,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9941 states. [2022-11-18 20:59:52,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9941 to 7606. [2022-11-18 20:59:52,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7606 states, 5565 states have (on average 1.3392632524707997) internal successors, (7453), 5760 states have internal predecessors, (7453), 1533 states have call successors, (1533), 397 states have call predecessors, (1533), 507 states have return successors, (2172), 1509 states have call predecessors, (2172), 1530 states have call successors, (2172) [2022-11-18 20:59:52,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7606 states to 7606 states and 11158 transitions. [2022-11-18 20:59:52,203 INFO L78 Accepts]: Start accepts. Automaton has 7606 states and 11158 transitions. Word has length 137 [2022-11-18 20:59:52,203 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:59:52,204 INFO L495 AbstractCegarLoop]: Abstraction has 7606 states and 11158 transitions. [2022-11-18 20:59:52,204 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 7.076923076923077) internal successors, (92), 11 states have internal predecessors, (92), 4 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 3 states have call successors, (13) [2022-11-18 20:59:52,204 INFO L276 IsEmpty]: Start isEmpty. Operand 7606 states and 11158 transitions. [2022-11-18 20:59:52,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2022-11-18 20:59:52,214 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:59:52,214 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:59:52,227 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-18 20:59:52,425 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-18 20:59:52,425 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:59:52,425 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:59:52,426 INFO L85 PathProgramCache]: Analyzing trace with hash 1237780059, now seen corresponding path program 1 times [2022-11-18 20:59:52,426 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:59:52,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1033329368] [2022-11-18 20:59:52,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:59:52,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:59:52,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:59:52,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:59:52,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:59:52,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 20:59:52,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 20:59:52,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:59:52,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-18 20:59:52,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:59:52,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-18 20:59:52,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-18 20:59:52,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-18 20:59:52,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-18 20:59:52,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2022-11-18 20:59:52,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2022-11-18 20:59:52,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:59:52,955 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-11-18 20:59:52,955 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:59:52,956 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1033329368] [2022-11-18 20:59:52,956 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1033329368] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:59:52,956 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:59:52,956 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:59:52,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2046852840] [2022-11-18 20:59:52,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:59:52,959 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:59:52,960 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:59:52,960 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:59:52,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:59:52,960 INFO L87 Difference]: Start difference. First operand 7606 states and 11158 transitions. Second operand has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-18 20:59:55,208 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:59:57,214 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 20:59:59,221 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 21:00:08,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:00:08,884 INFO L93 Difference]: Finished difference Result 22001 states and 33681 transitions. [2022-11-18 21:00:08,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-18 21:00:08,885 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 135 [2022-11-18 21:00:08,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:00:08,972 INFO L225 Difference]: With dead ends: 22001 [2022-11-18 21:00:08,972 INFO L226 Difference]: Without dead ends: 13833 [2022-11-18 21:00:09,018 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=88, Invalid=218, Unknown=0, NotChecked=0, Total=306 [2022-11-18 21:00:09,019 INFO L413 NwaCegarLoop]: 1400 mSDtfsCounter, 2586 mSDsluCounter, 3836 mSDsCounter, 0 mSdLazyCounter, 3200 mSolverCounterSat, 1698 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2738 SdHoareTripleChecker+Valid, 5236 SdHoareTripleChecker+Invalid, 4901 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1698 IncrementalHoareTripleChecker+Valid, 3200 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.4s IncrementalHoareTripleChecker+Time [2022-11-18 21:00:09,020 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2738 Valid, 5236 Invalid, 4901 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1698 Valid, 3200 Invalid, 3 Unknown, 0 Unchecked, 14.4s Time] [2022-11-18 21:00:09,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13833 states. [2022-11-18 21:00:10,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13833 to 11426. [2022-11-18 21:00:10,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11426 states, 8293 states have (on average 1.3351018931629084) internal successors, (11072), 8637 states have internal predecessors, (11072), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2022-11-18 21:00:10,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11426 states to 11426 states and 17613 transitions. [2022-11-18 21:00:10,360 INFO L78 Accepts]: Start accepts. Automaton has 11426 states and 17613 transitions. Word has length 135 [2022-11-18 21:00:10,360 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:00:10,361 INFO L495 AbstractCegarLoop]: Abstraction has 11426 states and 17613 transitions. [2022-11-18 21:00:10,361 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.857142857142858) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-18 21:00:10,361 INFO L276 IsEmpty]: Start isEmpty. Operand 11426 states and 17613 transitions. [2022-11-18 21:00:10,376 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2022-11-18 21:00:10,376 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:00:10,377 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:00:10,377 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-18 21:00:10,377 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:00:10,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:00:10,378 INFO L85 PathProgramCache]: Analyzing trace with hash 732056423, now seen corresponding path program 1 times [2022-11-18 21:00:10,378 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:00:10,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1634502470] [2022-11-18 21:00:10,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:00:10,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:00:10,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:00:10,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:00:10,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 21:00:10,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 21:00:10,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 21:00:10,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-18 21:00:10,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-18 21:00:10,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-18 21:00:10,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-18 21:00:10,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-18 21:00:10,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 21:00:10,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-18 21:00:10,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-11-18 21:00:10,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:10,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 21:00:10,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:11,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:00:11,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:11,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-18 21:00:11,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:11,025 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 82 trivial. 0 not checked. [2022-11-18 21:00:11,025 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:00:11,025 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1634502470] [2022-11-18 21:00:11,026 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1634502470] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:00:11,026 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:00:11,026 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-18 21:00:11,026 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1151094615] [2022-11-18 21:00:11,026 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:00:11,027 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-18 21:00:11,027 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:00:11,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-18 21:00:11,028 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-18 21:00:11,028 INFO L87 Difference]: Start difference. First operand 11426 states and 17613 transitions. Second operand has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-18 21:00:13,228 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 21:00:15,242 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 21:00:18,683 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 21:00:20,696 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 21:00:23,183 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 21:00:25,194 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 21:00:30,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:00:30,064 INFO L93 Difference]: Finished difference Result 29778 states and 46709 transitions. [2022-11-18 21:00:30,066 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-18 21:00:30,067 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 158 [2022-11-18 21:00:30,067 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:00:30,153 INFO L225 Difference]: With dead ends: 29778 [2022-11-18 21:00:30,153 INFO L226 Difference]: Without dead ends: 18394 [2022-11-18 21:00:30,201 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2022-11-18 21:00:30,201 INFO L413 NwaCegarLoop]: 1647 mSDtfsCounter, 2023 mSDsluCounter, 4246 mSDsCounter, 0 mSdLazyCounter, 2144 mSolverCounterSat, 1106 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2151 SdHoareTripleChecker+Valid, 5893 SdHoareTripleChecker+Invalid, 3256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1106 IncrementalHoareTripleChecker+Valid, 2144 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.4s IncrementalHoareTripleChecker+Time [2022-11-18 21:00:30,202 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2151 Valid, 5893 Invalid, 3256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1106 Valid, 2144 Invalid, 6 Unknown, 0 Unchecked, 17.4s Time] [2022-11-18 21:00:30,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18394 states. [2022-11-18 21:00:31,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18394 to 11442. [2022-11-18 21:00:31,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11442 states, 8309 states have (on average 1.3344566133108677) internal successors, (11088), 8653 states have internal predecessors, (11088), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2022-11-18 21:00:31,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11442 states to 11442 states and 17629 transitions. [2022-11-18 21:00:31,500 INFO L78 Accepts]: Start accepts. Automaton has 11442 states and 17629 transitions. Word has length 158 [2022-11-18 21:00:31,501 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:00:31,501 INFO L495 AbstractCegarLoop]: Abstraction has 11442 states and 17629 transitions. [2022-11-18 21:00:31,501 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 4 states have internal predecessors, (98), 2 states have call successors, (15), 6 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-18 21:00:31,501 INFO L276 IsEmpty]: Start isEmpty. Operand 11442 states and 17629 transitions. [2022-11-18 21:00:31,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 154 [2022-11-18 21:00:31,511 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:00:31,511 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:00:31,511 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-18 21:00:31,511 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:00:31,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:00:31,512 INFO L85 PathProgramCache]: Analyzing trace with hash 453916825, now seen corresponding path program 1 times [2022-11-18 21:00:31,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:00:31,512 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1279638298] [2022-11-18 21:00:31,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:00:31,512 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:00:31,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:00:32,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:00:32,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 21:00:32,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 21:00:32,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 21:00:32,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-18 21:00:32,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-18 21:00:32,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-18 21:00:32,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-18 21:00:32,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-11-18 21:00:32,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 21:00:32,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:00:32,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-18 21:00:32,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-18 21:00:32,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 21:00:32,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:32,582 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 76 trivial. 0 not checked. [2022-11-18 21:00:32,583 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:00:32,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1279638298] [2022-11-18 21:00:32,584 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1279638298] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 21:00:32,584 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [251013053] [2022-11-18 21:00:32,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:00:32,585 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:00:32,585 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:00:32,587 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 21:00:32,610 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-18 21:00:33,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:00:33,792 INFO L263 TraceCheckSpWp]: Trace formula consists of 2393 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-18 21:00:33,798 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:00:33,888 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 36 proven. 1 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-18 21:00:33,888 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 21:00:34,131 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 76 trivial. 0 not checked. [2022-11-18 21:00:34,131 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [251013053] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 21:00:34,131 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 21:00:34,132 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 5, 5] total 15 [2022-11-18 21:00:34,132 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [215306067] [2022-11-18 21:00:34,132 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 21:00:34,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-11-18 21:00:34,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:00:34,134 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-11-18 21:00:34,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=164, Unknown=0, NotChecked=0, Total=210 [2022-11-18 21:00:34,134 INFO L87 Difference]: Start difference. First operand 11442 states and 17629 transitions. Second operand has 15 states, 15 states have (on average 9.266666666666667) internal successors, (139), 10 states have internal predecessors, (139), 2 states have call successors, (38), 7 states have call predecessors, (38), 5 states have return successors, (28), 2 states have call predecessors, (28), 2 states have call successors, (28) [2022-11-18 21:00:36,799 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 21:00:43,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:00:43,561 INFO L93 Difference]: Finished difference Result 24423 states and 37702 transitions. [2022-11-18 21:00:43,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-18 21:00:43,562 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.266666666666667) internal successors, (139), 10 states have internal predecessors, (139), 2 states have call successors, (38), 7 states have call predecessors, (38), 5 states have return successors, (28), 2 states have call predecessors, (28), 2 states have call successors, (28) Word has length 153 [2022-11-18 21:00:43,562 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:00:43,616 INFO L225 Difference]: With dead ends: 24423 [2022-11-18 21:00:43,616 INFO L226 Difference]: Without dead ends: 12987 [2022-11-18 21:00:43,652 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 349 GetRequests, 325 SyntacticMatches, 1 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=157, Invalid=443, Unknown=0, NotChecked=0, Total=600 [2022-11-18 21:00:43,653 INFO L413 NwaCegarLoop]: 1027 mSDtfsCounter, 791 mSDsluCounter, 5743 mSDsCounter, 0 mSdLazyCounter, 2873 mSolverCounterSat, 722 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 816 SdHoareTripleChecker+Valid, 6770 SdHoareTripleChecker+Invalid, 3596 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 722 IncrementalHoareTripleChecker+Valid, 2873 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.7s IncrementalHoareTripleChecker+Time [2022-11-18 21:00:43,653 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [816 Valid, 6770 Invalid, 3596 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [722 Valid, 2873 Invalid, 1 Unknown, 0 Unchecked, 7.7s Time] [2022-11-18 21:00:43,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12987 states. [2022-11-18 21:00:44,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12987 to 11453. [2022-11-18 21:00:44,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11453 states, 8320 states have (on average 1.334014423076923) internal successors, (11099), 8664 states have internal predecessors, (11099), 2250 states have call successors, (2250), 556 states have call predecessors, (2250), 882 states have return successors, (4291), 2305 states have call predecessors, (4291), 2247 states have call successors, (4291) [2022-11-18 21:00:44,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11453 states to 11453 states and 17640 transitions. [2022-11-18 21:00:44,633 INFO L78 Accepts]: Start accepts. Automaton has 11453 states and 17640 transitions. Word has length 153 [2022-11-18 21:00:44,633 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:00:44,634 INFO L495 AbstractCegarLoop]: Abstraction has 11453 states and 17640 transitions. [2022-11-18 21:00:44,634 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.266666666666667) internal successors, (139), 10 states have internal predecessors, (139), 2 states have call successors, (38), 7 states have call predecessors, (38), 5 states have return successors, (28), 2 states have call predecessors, (28), 2 states have call successors, (28) [2022-11-18 21:00:44,634 INFO L276 IsEmpty]: Start isEmpty. Operand 11453 states and 17640 transitions. [2022-11-18 21:00:44,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2022-11-18 21:00:44,645 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:00:44,645 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:00:44,658 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-18 21:00:44,857 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-11-18 21:00:44,857 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:00:44,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:00:44,857 INFO L85 PathProgramCache]: Analyzing trace with hash 686660894, now seen corresponding path program 2 times [2022-11-18 21:00:44,857 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:00:44,857 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [74590768] [2022-11-18 21:00:44,858 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:00:44,858 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:00:45,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-18 21:00:45,859 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-18 21:00:47,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-18 21:00:47,872 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-18 21:00:47,873 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-18 21:00:47,874 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 21:00:47,876 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-11-18 21:00:47,881 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:00:47,886 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 21:00:47,935 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-18 21:00:48,212 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 09:00:48 BoogieIcfgContainer [2022-11-18 21:00:48,212 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 21:00:48,212 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 21:00:48,213 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 21:00:48,213 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 21:00:48,214 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:57:23" (3/4) ... [2022-11-18 21:00:48,217 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-11-18 21:00:48,218 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 21:00:48,218 INFO L158 Benchmark]: Toolchain (without parser) took 213625.83ms. Allocated memory was 125.8MB in the beginning and 1.9GB in the end (delta: 1.8GB). Free memory was 97.7MB in the beginning and 752.9MB in the end (delta: -655.2MB). Peak memory consumption was 1.1GB. Max. memory is 16.1GB. [2022-11-18 21:00:48,218 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 125.8MB. Free memory is still 101.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 21:00:48,219 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2474.89ms. Allocated memory was 125.8MB in the beginning and 159.4MB in the end (delta: 33.6MB). Free memory was 97.7MB in the beginning and 88.5MB in the end (delta: 9.2MB). Peak memory consumption was 91.3MB. Max. memory is 16.1GB. [2022-11-18 21:00:48,219 INFO L158 Benchmark]: Boogie Procedure Inliner took 244.09ms. Allocated memory is still 159.4MB. Free memory was 88.5MB in the beginning and 70.3MB in the end (delta: 18.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-18 21:00:48,219 INFO L158 Benchmark]: Boogie Preprocessor took 278.83ms. Allocated memory is still 159.4MB. Free memory was 70.3MB in the beginning and 87.0MB in the end (delta: -16.8MB). Peak memory consumption was 28.8MB. Max. memory is 16.1GB. [2022-11-18 21:00:48,226 INFO L158 Benchmark]: RCFGBuilder took 6211.28ms. Allocated memory was 159.4MB in the beginning and 289.4MB in the end (delta: 130.0MB). Free memory was 87.0MB in the beginning and 91.5MB in the end (delta: -4.5MB). Peak memory consumption was 130.8MB. Max. memory is 16.1GB. [2022-11-18 21:00:48,227 INFO L158 Benchmark]: TraceAbstraction took 204404.31ms. Allocated memory was 289.4MB in the beginning and 1.9GB in the end (delta: 1.6GB). Free memory was 90.5MB in the beginning and 752.9MB in the end (delta: -662.4MB). Peak memory consumption was 1.3GB. Max. memory is 16.1GB. [2022-11-18 21:00:48,227 INFO L158 Benchmark]: Witness Printer took 5.22ms. Allocated memory is still 1.9GB. Free memory is still 752.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 21:00:48,234 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 125.8MB. Free memory is still 101.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2474.89ms. Allocated memory was 125.8MB in the beginning and 159.4MB in the end (delta: 33.6MB). Free memory was 97.7MB in the beginning and 88.5MB in the end (delta: 9.2MB). Peak memory consumption was 91.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 244.09ms. Allocated memory is still 159.4MB. Free memory was 88.5MB in the beginning and 70.3MB in the end (delta: 18.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Preprocessor took 278.83ms. Allocated memory is still 159.4MB. Free memory was 70.3MB in the beginning and 87.0MB in the end (delta: -16.8MB). Peak memory consumption was 28.8MB. Max. memory is 16.1GB. * RCFGBuilder took 6211.28ms. Allocated memory was 159.4MB in the beginning and 289.4MB in the end (delta: 130.0MB). Free memory was 87.0MB in the beginning and 91.5MB in the end (delta: -4.5MB). Peak memory consumption was 130.8MB. Max. memory is 16.1GB. * TraceAbstraction took 204404.31ms. Allocated memory was 289.4MB in the beginning and 1.9GB in the end (delta: 1.6GB). Free memory was 90.5MB in the beginning and 752.9MB in the end (delta: -662.4MB). Peak memory consumption was 1.3GB. Max. memory is 16.1GB. * Witness Printer took 5.22ms. Allocated memory is still 1.9GB. Free memory is still 752.9MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7054]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8527, overapproximation of bitwiseAnd at line 8537. Possible FailurePath: [L8990] int SERIAL_STATE = 0; [L7077] int LDV_IN_INTERRUPT = 1; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7171] static struct usb_card_rec *usb_card ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8998] void (*completeFnBulk)(struct urb * ) ; [L7080] int ref_cnt ; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7083] int usb_counter ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8992] struct urb *usb_urb = 0; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8991] void *usb_intfdata = 0; [L7084] struct sk_buff *usb_ops_group1 ; [L8997] void (*completeFnInt)(struct urb * ) ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L8586] int ldv_retval_0 ; [L8588] int ldv_retval_1 ; [L8593] int ldv_retval_2 ; [L8592] int ldv_retval_3 ; [L8587] int ldv_retval_4 ; [L7170] static struct semaphore add_remove_card_sem ; [L8989] int INTERF_STATE = 0; [L8995] int completeFnIntCounter = 0; [L7079] int ldv_state_variable_2 ; [L8996] int completeFnBulkCounter = 0; [L7085] int ldv_state_variable_0 ; [L7082] int ldv_state_variable_1 ; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=59, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=59, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=59, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={166:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor.flags=0, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor.flags=0, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND FALSE !(tmp != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, sem={163:0}, sem={163:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={162:0}, ldv_func_arg1={162:0}, ldv_func_arg2={4294967312:4294967304}, ldv_func_arg2={4294967312:4294967304}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND FALSE !(tmp___0 != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8688] COND TRUE ldv_state_variable_1 == 1 [L8689] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8435] int ret ; [L8436] struct usb_card_rec *card ; [L8438] EXPR adapter->card [L8438] card = (struct usb_card_rec *)adapter->card [L8439] EXPR card->usb_boot_state VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, card->usb_boot_state=169, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8439] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8451] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8045] struct usb_card_rec *card ; [L8046] int i ; [L8047] int tmp ; [L8048] int tmp___0 ; [L8050] EXPR adapter->card [L8050] card = (struct usb_card_rec *)adapter->card [L8051] card->rx_cmd.adapter = adapter [L8052] EXPR card->rx_cmd_ep [L8052] card->rx_cmd.ep = card->rx_cmd_ep [L8053] CALL, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8936] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8938] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9021] struct urb *value ; [L9022] void *tmp ; [L9023] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND FALSE !(tmp___0 != 0) [L7010] tmp = malloc(size) [L7011] p = tmp VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7012] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L6998] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7012] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7013] return (p); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={-18446744073709551615:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] tmp = ldv_malloc(sizeof(struct urb)) [L9026] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={-18446744073709551615:0}] [L9027] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7036] int tmp ; [L7038] tmp = __VERIFIER_nondet_int() [L7039] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9027] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_undef_int()=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={-18446744073709551615:0}] [L9027] tmp___0 = ldv_undef_int() [L9028] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={-18446744073709551615:0}] [L9029] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L9030] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}, value={-18446744073709551615:0}] [L9035] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}, value={-18446744073709551615:0}] [L8938] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8938] tmp = ldv_alloc_urb() [L8939] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8053] RET, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8053] card->rx_cmd.urb = ldv_usb_alloc_urb_17(0, 208U) [L8054] EXPR card->rx_cmd.urb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, card->rx_cmd.urb={-18446744073709551615:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8054] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8059] CALL, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L7104] struct sk_buff *tmp ; [L7106] CALL, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7096] struct sk_buff *tmp ; [L7098] CALL, EXPR __netdev_alloc_skb(dev, length, 32U) [L9240] CALL, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(size)=253, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND TRUE tmp___0 != 0 [L7008] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=253, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=253, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L9240] RET, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct sk_buff))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L9240] struct sk_buff *skb = ldv_malloc(sizeof(struct sk_buff)); [L9241] COND FALSE !(\read(*skb)) VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L9247] return skb; VAL [={0:0}, ={0:0}, \old(arg1)=2048, \old(arg2)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=2048, arg2=32, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L7098] RET, EXPR __netdev_alloc_skb(dev, length, 32U) [L7098] tmp = __netdev_alloc_skb(dev, length, 32U) [L7099] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={0:0}, dev={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L7106] RET, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7106] tmp = netdev_alloc_skb((struct net_device *)0, length) [L7107] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8059] RET, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_alloc_skb(2048U)={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8059] card->rx_cmd.skb = dev_alloc_skb(2048U) [L8060] EXPR card->rx_cmd.skb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, card->rx_cmd.skb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8060] COND TRUE (unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0) [L8061] adapter->dev [L8062] return (-12); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8451] RET, EXPR mwifiex_usb_rx_init(adapter) [L8451] ret = mwifiex_usb_rx_init(adapter) [L8452] COND FALSE !(ret == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=-12, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8456] return (ret); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967306:-206}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=-12, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8689] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8690] ldv_state_variable_1 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8727] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L8728] CALL mwifiex_usb_cleanup_module() [L8548] int tmp ; [L8549] struct mwifiex_adapter *adapter ; [L8550] int i ; [L8551] struct mwifiex_private *tmp___0 ; [L8553] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9262] return __VERIFIER_nondet_int(); [L8553] RET, EXPR down_interruptible(& add_remove_card_sem) [L8553] tmp = down_interruptible(& add_remove_card_sem) [L8554] COND FALSE !(tmp == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8558] COND FALSE !((unsigned long )usb_card != (unsigned long )((struct usb_card_rec *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8582] CALL ldv_usb_deregister_23(& mwifiex_usb_driver) [L8975] FCALL usb_deregister(arg) [L8976] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, arg={162:0}, arg={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8582] RET ldv_usb_deregister_23(& mwifiex_usb_driver) [L8728] RET mwifiex_usb_cleanup_module() [L8729] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=59, ldvarg2={0:0}, ldvarg3={166:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=59, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L8830] CALL ldv_check_final_state() [L9208] COND FALSE !((unsigned long )usb_urb == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L9210] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] [L7054] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967312:4294967304}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={-18446744073709551615:0}, usbdriver_name={161:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 855 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 204.0s, OverallIterations: 17, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.2s, AutomataDifference: 171.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.1s, HoareTripleCheckerStatistics: 37 mSolverCounterUnknown, 26410 SdHoareTripleChecker+Valid, 155.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 24719 mSDsluCounter, 100464 SdHoareTripleChecker+Invalid, 147.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 79709 mSDsCounter, 12764 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 30528 IncrementalHoareTripleChecker+Invalid, 43329 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 12764 mSolverCounterUnsat, 20755 mSDtfsCounter, 30528 mSolverCounterSat, 0.8s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1044 GetRequests, 862 SyntacticMatches, 1 SemanticMatches, 181 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 275 ImplicationChecksByTransitivity, 3.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=12434occurred in iteration=10, InterpolantAutomatonStates: 153, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 11.3s AutomataMinimizationTime, 16 MinimizatonAttempts, 23205 StatesRemovedByMinimization, 16 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.5s SsaConstructionTime, 3.9s SatisfiabilityAnalysisTime, 11.3s InterpolantComputationTime, 2200 NumberOfCodeBlocks, 2200 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 2177 ConstructedInterpolants, 0 QuantifiedInterpolants, 4423 SizeOfPredicates, 26 NumberOfNonLiveVariables, 6873 ConjunctsInSsa, 82 ConjunctsInUnsatCore, 20 InterpolantComputations, 15 PerfectInterpolantSequences, 1035/1040 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-11-18 21:00:48,396 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 21:00:50,950 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 21:00:50,952 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 21:00:50,978 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 21:00:50,980 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 21:00:50,985 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 21:00:50,988 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 21:00:50,996 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 21:00:50,999 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 21:00:51,002 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 21:00:51,004 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 21:00:51,006 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 21:00:51,007 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 21:00:51,014 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 21:00:51,015 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 21:00:51,018 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 21:00:51,020 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 21:00:51,021 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 21:00:51,024 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 21:00:51,030 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 21:00:51,031 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 21:00:51,040 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 21:00:51,041 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 21:00:51,042 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 21:00:51,046 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 21:00:51,049 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 21:00:51,049 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 21:00:51,050 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 21:00:51,051 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 21:00:51,053 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 21:00:51,054 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 21:00:51,055 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 21:00:51,056 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 21:00:51,058 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 21:00:51,059 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 21:00:51,060 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 21:00:51,060 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 21:00:51,061 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 21:00:51,061 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 21:00:51,062 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 21:00:51,063 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 21:00:51,064 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-11-18 21:00:51,089 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 21:00:51,089 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 21:00:51,089 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 21:00:51,090 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 21:00:51,090 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 21:00:51,091 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 21:00:51,092 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 21:00:51,092 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 21:00:51,092 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 21:00:51,092 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 21:00:51,093 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 21:00:51,093 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 21:00:51,093 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 21:00:51,093 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 21:00:51,093 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-18 21:00:51,094 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-11-18 21:00:51,094 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-11-18 21:00:51,094 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 21:00:51,094 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 21:00:51,094 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 21:00:51,095 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 21:00:51,095 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 21:00:51,095 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 21:00:51,095 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 21:00:51,096 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 21:00:51,096 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 21:00:51,096 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 21:00:51,096 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-11-18 21:00:51,096 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-11-18 21:00:51,097 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 21:00:51,097 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 21:00:51,097 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 21:00:51,097 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-18 21:00:51,097 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f2fac8642c25f1335350a2814ff7cf3c4ea0fb7f4feaed63baec564397e8f24 [2022-11-18 21:00:51,496 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 21:00:51,523 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 21:00:51,527 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 21:00:51,528 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 21:00:51,531 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 21:00:51,533 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-18 21:00:51,605 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/data/0bef1973e/4ad5d981cb1a475caaab329ec9d72af9/FLAG6ec92476f [2022-11-18 21:00:52,531 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 21:00:52,531 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-18 21:00:52,591 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/data/0bef1973e/4ad5d981cb1a475caaab329ec9d72af9/FLAG6ec92476f [2022-11-18 21:00:52,983 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/data/0bef1973e/4ad5d981cb1a475caaab329ec9d72af9 [2022-11-18 21:00:52,987 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 21:00:52,991 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 21:00:52,993 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 21:00:52,993 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 21:00:53,001 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 21:00:53,002 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 09:00:52" (1/1) ... [2022-11-18 21:00:53,004 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@76018186 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:53, skipping insertion in model container [2022-11-18 21:00:53,005 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 09:00:52" (1/1) ... [2022-11-18 21:00:53,014 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 21:00:53,170 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 21:00:54,352 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-11-18 21:00:55,001 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 21:00:55,036 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-11-18 21:00:55,089 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 21:00:55,270 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-11-18 21:00:55,449 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 21:00:55,470 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 21:00:55,709 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-11-18 21:00:55,824 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 21:00:56,070 INFO L208 MainTranslator]: Completed translation [2022-11-18 21:00:56,086 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56 WrapperNode [2022-11-18 21:00:56,087 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 21:00:56,088 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 21:00:56,088 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 21:00:56,088 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 21:00:56,095 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,194 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,355 INFO L138 Inliner]: procedures = 178, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 2972 [2022-11-18 21:00:56,355 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 21:00:56,356 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 21:00:56,356 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 21:00:56,356 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 21:00:56,365 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,366 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,383 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,384 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,461 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,475 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,502 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,513 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,551 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 21:00:56,553 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 21:00:56,553 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 21:00:56,554 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 21:00:56,554 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (1/1) ... [2022-11-18 21:00:56,561 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 21:00:56,571 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:00:56,582 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 21:00:56,593 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 21:00:56,626 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-11-18 21:00:56,626 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-11-18 21:00:56,626 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2022-11-18 21:00:56,626 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2022-11-18 21:00:56,626 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2022-11-18 21:00:56,627 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2022-11-18 21:00:56,627 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-11-18 21:00:56,627 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2022-11-18 21:00:56,627 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2022-11-18 21:00:56,627 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2022-11-18 21:00:56,627 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2022-11-18 21:00:56,628 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-11-18 21:00:56,628 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-11-18 21:00:56,628 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-18 21:00:56,628 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-11-18 21:00:56,628 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-18 21:00:56,628 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2022-11-18 21:00:56,629 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2022-11-18 21:00:56,629 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-18 21:00:56,629 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-18 21:00:56,629 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-11-18 21:00:56,629 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-11-18 21:00:56,629 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-18 21:00:56,630 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-18 21:00:56,630 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-11-18 21:00:56,630 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-11-18 21:00:56,630 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-18 21:00:56,630 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-18 21:00:56,630 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2022-11-18 21:00:56,631 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2022-11-18 21:00:56,631 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-11-18 21:00:56,631 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-11-18 21:00:56,631 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-18 21:00:56,632 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-18 21:00:56,632 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-11-18 21:00:56,632 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-11-18 21:00:56,632 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-11-18 21:00:56,633 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-11-18 21:00:56,633 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-18 21:00:56,633 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-18 21:00:56,634 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2022-11-18 21:00:56,634 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2022-11-18 21:00:56,634 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-18 21:00:56,634 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-18 21:00:56,635 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-18 21:00:56,635 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-18 21:00:56,635 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2022-11-18 21:00:56,635 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2022-11-18 21:00:56,636 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2022-11-18 21:00:56,636 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-11-18 21:00:56,637 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-11-18 21:00:56,638 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2022-11-18 21:00:56,638 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2022-11-18 21:00:56,639 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2022-11-18 21:00:56,639 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2022-11-18 21:00:56,639 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2022-11-18 21:00:56,639 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-18 21:00:56,639 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-18 21:00:56,639 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-11-18 21:00:56,640 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-11-18 21:00:56,640 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-18 21:00:56,640 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-18 21:00:56,641 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-18 21:00:56,641 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-18 21:00:56,641 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-18 21:00:56,641 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-11-18 21:00:56,641 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-11-18 21:00:56,642 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-18 21:00:56,642 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-18 21:00:56,642 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 21:00:56,643 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2022-11-18 21:00:56,643 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2022-11-18 21:00:56,643 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-11-18 21:00:56,643 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-11-18 21:00:56,643 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-18 21:00:56,643 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-18 21:00:56,644 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2022-11-18 21:00:56,644 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2022-11-18 21:00:56,644 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-11-18 21:00:56,644 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-11-18 21:00:56,644 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2022-11-18 21:00:56,644 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2022-11-18 21:00:56,645 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2022-11-18 21:00:56,645 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2022-11-18 21:00:56,645 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2022-11-18 21:00:56,646 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-18 21:00:56,646 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2022-11-18 21:00:56,646 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2022-11-18 21:00:56,646 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-11-18 21:00:56,647 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-11-18 21:00:56,647 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-11-18 21:00:56,648 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-11-18 21:00:56,648 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-11-18 21:00:56,649 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-18 21:00:56,649 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-11-18 21:00:56,649 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-18 21:00:56,649 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2022-11-18 21:00:56,649 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-11-18 21:00:56,649 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-11-18 21:00:56,650 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-11-18 21:00:56,650 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2022-11-18 21:00:56,650 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2022-11-18 21:00:56,650 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-11-18 21:00:56,650 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-11-18 21:00:56,651 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-11-18 21:00:56,651 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-11-18 21:00:56,651 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2022-11-18 21:00:56,651 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2022-11-18 21:00:56,651 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2022-11-18 21:00:56,652 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2022-11-18 21:00:56,653 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2022-11-18 21:00:56,653 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-11-18 21:00:56,653 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-11-18 21:00:56,654 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-18 21:00:56,654 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-18 21:00:56,654 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-18 21:00:56,654 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 21:00:56,654 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 21:00:56,654 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2022-11-18 21:00:56,655 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2022-11-18 21:00:57,337 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 21:00:57,349 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 21:00:58,416 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-18 21:01:05,953 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-11-18 21:01:18,361 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 21:01:18,375 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 21:01:18,376 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-18 21:01:18,379 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:01:18 BoogieIcfgContainer [2022-11-18 21:01:18,379 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 21:01:18,381 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 21:01:18,381 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 21:01:18,384 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 21:01:18,385 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 09:00:52" (1/3) ... [2022-11-18 21:01:18,385 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@49e863d8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 09:01:18, skipping insertion in model container [2022-11-18 21:01:18,386 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:00:56" (2/3) ... [2022-11-18 21:01:18,386 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@49e863d8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 09:01:18, skipping insertion in model container [2022-11-18 21:01:18,386 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:01:18" (3/3) ... [2022-11-18 21:01:18,387 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-11-18 21:01:18,406 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 21:01:18,406 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 21:01:18,486 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 21:01:18,493 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1b2b3c33, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 21:01:18,494 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 21:01:18,503 INFO L276 IsEmpty]: Start isEmpty. Operand has 853 states, 629 states have (on average 1.3847376788553258) internal successors, (871), 655 states have internal predecessors, (871), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2022-11-18 21:01:18,518 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-18 21:01:18,518 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:18,519 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:18,520 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:18,525 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:18,525 INFO L85 PathProgramCache]: Analyzing trace with hash -2002313727, now seen corresponding path program 1 times [2022-11-18 21:01:18,548 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:18,548 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1631819847] [2022-11-18 21:01:18,549 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:18,549 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:18,549 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:18,558 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:18,598 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-11-18 21:01:19,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:01:19,385 INFO L263 TraceCheckSpWp]: Trace formula consists of 741 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-18 21:01:19,392 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:19,586 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-18 21:01:19,587 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:01:19,588 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:19,588 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1631819847] [2022-11-18 21:01:19,589 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1631819847] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:01:19,589 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:01:19,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-18 21:01:19,591 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [954531270] [2022-11-18 21:01:19,592 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:01:19,597 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-18 21:01:19,598 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:19,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-18 21:01:19,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-18 21:01:19,646 INFO L87 Difference]: Start difference. First operand has 853 states, 629 states have (on average 1.3847376788553258) internal successors, (871), 655 states have internal predecessors, (871), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-18 21:01:19,980 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:19,981 INFO L93 Difference]: Finished difference Result 1704 states and 2498 transitions. [2022-11-18 21:01:19,982 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-18 21:01:19,994 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 44 [2022-11-18 21:01:19,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:20,015 INFO L225 Difference]: With dead ends: 1704 [2022-11-18 21:01:20,015 INFO L226 Difference]: Without dead ends: 840 [2022-11-18 21:01:20,028 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-18 21:01:20,032 INFO L413 NwaCegarLoop]: 1214 mSDtfsCounter, 2 mSDsluCounter, 2425 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3639 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:20,033 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 3639 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 21:01:20,057 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 840 states. [2022-11-18 21:01:20,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 840 to 840. [2022-11-18 21:01:20,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 840 states, 624 states have (on average 1.3717948717948718) internal successors, (856), 642 states have internal predecessors, (856), 174 states have call successors, (174), 42 states have call predecessors, (174), 41 states have return successors, (169), 161 states have call predecessors, (169), 169 states have call successors, (169) [2022-11-18 21:01:20,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 840 states to 840 states and 1199 transitions. [2022-11-18 21:01:20,204 INFO L78 Accepts]: Start accepts. Automaton has 840 states and 1199 transitions. Word has length 44 [2022-11-18 21:01:20,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:20,206 INFO L495 AbstractCegarLoop]: Abstraction has 840 states and 1199 transitions. [2022-11-18 21:01:20,207 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-18 21:01:20,207 INFO L276 IsEmpty]: Start isEmpty. Operand 840 states and 1199 transitions. [2022-11-18 21:01:20,210 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-18 21:01:20,211 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:20,211 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:20,232 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Ended with exit code 0 [2022-11-18 21:01:20,433 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:20,433 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:20,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:20,434 INFO L85 PathProgramCache]: Analyzing trace with hash 823276732, now seen corresponding path program 1 times [2022-11-18 21:01:20,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:20,437 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [113736302] [2022-11-18 21:01:20,438 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:20,438 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:20,438 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:20,439 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:20,457 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-11-18 21:01:21,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:01:21,240 INFO L263 TraceCheckSpWp]: Trace formula consists of 752 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-18 21:01:21,243 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:21,427 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-18 21:01:21,427 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 21:01:21,939 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-18 21:01:21,940 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:21,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [113736302] [2022-11-18 21:01:21,940 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [113736302] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 21:01:21,941 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-11-18 21:01:21,941 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2022-11-18 21:01:21,941 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [826315545] [2022-11-18 21:01:21,942 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-11-18 21:01:21,943 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-18 21:01:21,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:21,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-18 21:01:21,944 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 21:01:21,945 INFO L87 Difference]: Start difference. First operand 840 states and 1199 transitions. Second operand has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2022-11-18 21:01:22,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:22,759 INFO L93 Difference]: Finished difference Result 1681 states and 2401 transitions. [2022-11-18 21:01:22,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-18 21:01:22,760 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 45 [2022-11-18 21:01:22,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:22,767 INFO L225 Difference]: With dead ends: 1681 [2022-11-18 21:01:22,767 INFO L226 Difference]: Without dead ends: 849 [2022-11-18 21:01:22,770 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=53, Invalid=79, Unknown=0, NotChecked=0, Total=132 [2022-11-18 21:01:22,772 INFO L413 NwaCegarLoop]: 1196 mSDtfsCounter, 16 mSDsluCounter, 3583 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 4779 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:22,772 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 4779 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-18 21:01:22,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 849 states. [2022-11-18 21:01:22,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 849 to 849. [2022-11-18 21:01:22,814 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 849 states, 632 states have (on average 1.3718354430379747) internal successors, (867), 650 states have internal predecessors, (867), 174 states have call successors, (174), 43 states have call predecessors, (174), 42 states have return successors, (169), 161 states have call predecessors, (169), 169 states have call successors, (169) [2022-11-18 21:01:22,823 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 849 states to 849 states and 1210 transitions. [2022-11-18 21:01:22,826 INFO L78 Accepts]: Start accepts. Automaton has 849 states and 1210 transitions. Word has length 45 [2022-11-18 21:01:22,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:22,827 INFO L495 AbstractCegarLoop]: Abstraction has 849 states and 1210 transitions. [2022-11-18 21:01:22,827 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.25) internal successors, (34), 8 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2022-11-18 21:01:22,827 INFO L276 IsEmpty]: Start isEmpty. Operand 849 states and 1210 transitions. [2022-11-18 21:01:22,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-18 21:01:22,836 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:22,836 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:22,861 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-11-18 21:01:23,061 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:23,061 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:23,062 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:23,062 INFO L85 PathProgramCache]: Analyzing trace with hash -703302463, now seen corresponding path program 2 times [2022-11-18 21:01:23,063 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:23,063 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1569972117] [2022-11-18 21:01:23,063 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-18 21:01:23,064 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:23,064 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:23,065 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:23,071 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-11-18 21:01:23,670 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2022-11-18 21:01:23,670 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-18 21:01:23,687 INFO L263 TraceCheckSpWp]: Trace formula consists of 703 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-18 21:01:23,690 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:23,796 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-18 21:01:23,796 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:01:23,797 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:23,797 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1569972117] [2022-11-18 21:01:23,797 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1569972117] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:01:23,797 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:01:23,797 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 21:01:23,797 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [938198506] [2022-11-18 21:01:23,798 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:01:23,798 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:01:23,798 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:23,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:01:23,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:23,800 INFO L87 Difference]: Start difference. First operand 849 states and 1210 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-18 21:01:25,058 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.13s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-18 21:01:25,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:25,280 INFO L93 Difference]: Finished difference Result 2450 states and 3501 transitions. [2022-11-18 21:01:25,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:01:25,281 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 48 [2022-11-18 21:01:25,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:25,297 INFO L225 Difference]: With dead ends: 2450 [2022-11-18 21:01:25,297 INFO L226 Difference]: Without dead ends: 1620 [2022-11-18 21:01:25,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:25,304 INFO L413 NwaCegarLoop]: 1384 mSDtfsCounter, 1119 mSDsluCounter, 1163 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1119 SdHoareTripleChecker+Valid, 2547 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:25,306 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1119 Valid, 2547 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-18 21:01:25,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1620 states. [2022-11-18 21:01:25,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1620 to 1620. [2022-11-18 21:01:25,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1620 states, 1204 states have (on average 1.3737541528239203) internal successors, (1654), 1236 states have internal predecessors, (1654), 332 states have call successors, (332), 84 states have call predecessors, (332), 83 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2022-11-18 21:01:25,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1620 states to 1620 states and 2313 transitions. [2022-11-18 21:01:25,412 INFO L78 Accepts]: Start accepts. Automaton has 1620 states and 2313 transitions. Word has length 48 [2022-11-18 21:01:25,413 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:25,413 INFO L495 AbstractCegarLoop]: Abstraction has 1620 states and 2313 transitions. [2022-11-18 21:01:25,413 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-18 21:01:25,413 INFO L276 IsEmpty]: Start isEmpty. Operand 1620 states and 2313 transitions. [2022-11-18 21:01:25,415 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-18 21:01:25,415 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:25,416 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:25,439 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-11-18 21:01:25,634 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:25,634 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:25,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:25,635 INFO L85 PathProgramCache]: Analyzing trace with hash 1457421532, now seen corresponding path program 1 times [2022-11-18 21:01:25,636 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:25,636 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [346976859] [2022-11-18 21:01:25,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:25,636 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:25,637 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:25,640 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:25,686 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-11-18 21:01:26,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:01:26,867 INFO L263 TraceCheckSpWp]: Trace formula consists of 1254 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-18 21:01:26,871 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:27,110 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-18 21:01:27,110 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:01:27,110 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:27,111 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [346976859] [2022-11-18 21:01:27,111 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [346976859] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:01:27,111 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:01:27,111 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 21:01:27,112 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1365376294] [2022-11-18 21:01:27,112 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:01:27,112 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 21:01:27,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:27,113 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 21:01:27,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 21:01:27,114 INFO L87 Difference]: Start difference. First operand 1620 states and 2313 transitions. Second operand has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-18 21:01:30,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:30,579 INFO L93 Difference]: Finished difference Result 3568 states and 5151 transitions. [2022-11-18 21:01:30,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-18 21:01:30,580 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 65 [2022-11-18 21:01:30,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:30,592 INFO L225 Difference]: With dead ends: 3568 [2022-11-18 21:01:30,592 INFO L226 Difference]: Without dead ends: 1967 [2022-11-18 21:01:30,598 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:01:30,599 INFO L413 NwaCegarLoop]: 1654 mSDtfsCounter, 451 mSDsluCounter, 6096 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 7750 SdHoareTripleChecker+Invalid, 192 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:30,599 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [538 Valid, 7750 Invalid, 192 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-18 21:01:30,603 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1967 states. [2022-11-18 21:01:30,732 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1967 to 1620. [2022-11-18 21:01:30,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1620 states, 1204 states have (on average 1.3729235880398671) internal successors, (1653), 1236 states have internal predecessors, (1653), 332 states have call successors, (332), 84 states have call predecessors, (332), 83 states have return successors, (327), 311 states have call predecessors, (327), 327 states have call successors, (327) [2022-11-18 21:01:30,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1620 states to 1620 states and 2312 transitions. [2022-11-18 21:01:30,745 INFO L78 Accepts]: Start accepts. Automaton has 1620 states and 2312 transitions. Word has length 65 [2022-11-18 21:01:30,746 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:30,746 INFO L495 AbstractCegarLoop]: Abstraction has 1620 states and 2312 transitions. [2022-11-18 21:01:30,746 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-18 21:01:30,746 INFO L276 IsEmpty]: Start isEmpty. Operand 1620 states and 2312 transitions. [2022-11-18 21:01:30,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-18 21:01:30,754 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:30,754 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:30,783 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-11-18 21:01:30,980 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:30,980 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:30,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:30,980 INFO L85 PathProgramCache]: Analyzing trace with hash 1676276250, now seen corresponding path program 1 times [2022-11-18 21:01:30,981 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:30,981 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1473273628] [2022-11-18 21:01:30,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:30,982 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:30,982 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:30,983 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:30,984 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-11-18 21:01:32,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:01:32,282 INFO L263 TraceCheckSpWp]: Trace formula consists of 1254 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-18 21:01:32,286 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:33,861 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-18 21:01:33,861 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:01:33,862 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:33,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1473273628] [2022-11-18 21:01:33,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1473273628] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:01:33,862 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:01:33,862 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 21:01:33,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1752752377] [2022-11-18 21:01:33,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:01:33,863 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:01:33,863 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:33,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:01:33,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:33,864 INFO L87 Difference]: Start difference. First operand 1620 states and 2312 transitions. Second operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 2 states have internal predecessors, (40), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 21:01:34,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:34,240 INFO L93 Difference]: Finished difference Result 4821 states and 7020 transitions. [2022-11-18 21:01:34,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:01:34,242 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 2 states have internal predecessors, (40), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 65 [2022-11-18 21:01:34,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:34,261 INFO L225 Difference]: With dead ends: 4821 [2022-11-18 21:01:34,262 INFO L226 Difference]: Without dead ends: 3220 [2022-11-18 21:01:34,270 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:34,270 INFO L413 NwaCegarLoop]: 1470 mSDtfsCounter, 1166 mSDsluCounter, 1176 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1166 SdHoareTripleChecker+Valid, 2646 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:34,271 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1166 Valid, 2646 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 21:01:34,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3220 states. [2022-11-18 21:01:34,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3220 to 3210. [2022-11-18 21:01:34,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3210 states, 2389 states have (on average 1.3721222268731688) internal successors, (3278), 2449 states have internal predecessors, (3278), 655 states have call successors, (655), 166 states have call predecessors, (655), 165 states have return successors, (703), 618 states have call predecessors, (703), 650 states have call successors, (703) [2022-11-18 21:01:34,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3210 states to 3210 states and 4636 transitions. [2022-11-18 21:01:34,531 INFO L78 Accepts]: Start accepts. Automaton has 3210 states and 4636 transitions. Word has length 65 [2022-11-18 21:01:34,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:34,534 INFO L495 AbstractCegarLoop]: Abstraction has 3210 states and 4636 transitions. [2022-11-18 21:01:34,534 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 2 states have internal predecessors, (40), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 21:01:34,534 INFO L276 IsEmpty]: Start isEmpty. Operand 3210 states and 4636 transitions. [2022-11-18 21:01:34,536 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-11-18 21:01:34,536 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:34,536 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:34,579 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-11-18 21:01:34,759 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:34,760 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:34,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:34,760 INFO L85 PathProgramCache]: Analyzing trace with hash 424589465, now seen corresponding path program 1 times [2022-11-18 21:01:34,761 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:34,761 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [190442277] [2022-11-18 21:01:34,762 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:34,762 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:34,762 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:34,764 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:34,806 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-11-18 21:01:35,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:01:36,057 INFO L263 TraceCheckSpWp]: Trace formula consists of 1255 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-18 21:01:36,061 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:37,523 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-18 21:01:37,523 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:01:37,523 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:37,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [190442277] [2022-11-18 21:01:37,524 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [190442277] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:01:37,524 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:01:37,524 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 21:01:37,524 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [838785685] [2022-11-18 21:01:37,524 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:01:37,525 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:01:37,525 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:37,525 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:01:37,526 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:37,526 INFO L87 Difference]: Start difference. First operand 3210 states and 4636 transitions. Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 2 states have internal predecessors, (41), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 21:01:38,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:38,162 INFO L93 Difference]: Finished difference Result 9583 states and 14156 transitions. [2022-11-18 21:01:38,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:01:38,163 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 2 states have internal predecessors, (41), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 66 [2022-11-18 21:01:38,163 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:38,203 INFO L225 Difference]: With dead ends: 9583 [2022-11-18 21:01:38,203 INFO L226 Difference]: Without dead ends: 6392 [2022-11-18 21:01:38,219 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:38,220 INFO L413 NwaCegarLoop]: 1380 mSDtfsCounter, 1156 mSDsluCounter, 1171 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1156 SdHoareTripleChecker+Valid, 2551 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:38,220 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1156 Valid, 2551 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 21:01:38,227 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6392 states. [2022-11-18 21:01:38,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6392 to 6383. [2022-11-18 21:01:38,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6383 states, 4752 states have (on average 1.3695286195286196) internal successors, (6508), 4868 states have internal predecessors, (6508), 1301 states have call successors, (1301), 330 states have call predecessors, (1301), 329 states have return successors, (1513), 1232 states have call predecessors, (1513), 1296 states have call successors, (1513) [2022-11-18 21:01:38,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6383 states to 6383 states and 9322 transitions. [2022-11-18 21:01:38,741 INFO L78 Accepts]: Start accepts. Automaton has 6383 states and 9322 transitions. Word has length 66 [2022-11-18 21:01:38,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:38,741 INFO L495 AbstractCegarLoop]: Abstraction has 6383 states and 9322 transitions. [2022-11-18 21:01:38,742 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 2 states have internal predecessors, (41), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 21:01:38,742 INFO L276 IsEmpty]: Start isEmpty. Operand 6383 states and 9322 transitions. [2022-11-18 21:01:38,743 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-11-18 21:01:38,744 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:38,744 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:38,781 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-11-18 21:01:38,966 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:38,967 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:38,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:38,967 INFO L85 PathProgramCache]: Analyzing trace with hash 277009661, now seen corresponding path program 1 times [2022-11-18 21:01:38,968 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:38,968 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1901982083] [2022-11-18 21:01:38,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:38,968 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:38,968 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:38,969 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:38,970 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-11-18 21:01:40,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:01:40,203 INFO L263 TraceCheckSpWp]: Trace formula consists of 1256 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-18 21:01:40,206 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:40,834 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-18 21:01:40,835 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:01:40,835 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:40,835 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1901982083] [2022-11-18 21:01:40,835 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1901982083] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:01:40,835 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:01:40,835 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 21:01:40,836 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1442478009] [2022-11-18 21:01:40,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:01:40,836 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:01:40,836 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:40,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:01:40,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:40,837 INFO L87 Difference]: Start difference. First operand 6383 states and 9322 transitions. Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 2 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 21:01:41,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:41,276 INFO L93 Difference]: Finished difference Result 6390 states and 9328 transitions. [2022-11-18 21:01:41,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:01:41,277 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 2 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 67 [2022-11-18 21:01:41,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:41,322 INFO L225 Difference]: With dead ends: 6390 [2022-11-18 21:01:41,322 INFO L226 Difference]: Without dead ends: 6387 [2022-11-18 21:01:41,326 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:41,327 INFO L413 NwaCegarLoop]: 1382 mSDtfsCounter, 1153 mSDsluCounter, 1170 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1153 SdHoareTripleChecker+Valid, 2552 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:41,328 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1153 Valid, 2552 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 21:01:41,335 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6387 states. [2022-11-18 21:01:41,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6387 to 6384. [2022-11-18 21:01:41,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6384 states, 4753 states have (on average 1.3694508731327582) internal successors, (6509), 4869 states have internal predecessors, (6509), 1301 states have call successors, (1301), 330 states have call predecessors, (1301), 329 states have return successors, (1513), 1232 states have call predecessors, (1513), 1296 states have call successors, (1513) [2022-11-18 21:01:41,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6384 states to 6384 states and 9323 transitions. [2022-11-18 21:01:41,862 INFO L78 Accepts]: Start accepts. Automaton has 6384 states and 9323 transitions. Word has length 67 [2022-11-18 21:01:41,862 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:41,863 INFO L495 AbstractCegarLoop]: Abstraction has 6384 states and 9323 transitions. [2022-11-18 21:01:41,864 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 2 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 21:01:41,864 INFO L276 IsEmpty]: Start isEmpty. Operand 6384 states and 9323 transitions. [2022-11-18 21:01:41,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-11-18 21:01:41,866 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:41,866 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:41,905 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-11-18 21:01:42,081 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:42,082 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:42,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:42,082 INFO L85 PathProgramCache]: Analyzing trace with hash -2992100, now seen corresponding path program 1 times [2022-11-18 21:01:42,084 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:42,084 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1677023387] [2022-11-18 21:01:42,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:42,084 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:42,084 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:42,086 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:42,130 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-11-18 21:01:43,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:01:43,372 INFO L263 TraceCheckSpWp]: Trace formula consists of 1257 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-18 21:01:43,375 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:44,034 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-18 21:01:44,035 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:01:44,035 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:44,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1677023387] [2022-11-18 21:01:44,035 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1677023387] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:01:44,035 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:01:44,035 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 21:01:44,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677095773] [2022-11-18 21:01:44,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:01:44,036 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:01:44,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:44,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:01:44,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:44,037 INFO L87 Difference]: Start difference. First operand 6384 states and 9323 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 2 states have internal predecessors, (43), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 21:01:44,458 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:44,458 INFO L93 Difference]: Finished difference Result 6386 states and 9324 transitions. [2022-11-18 21:01:44,458 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:01:44,459 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 2 states have internal predecessors, (43), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 68 [2022-11-18 21:01:44,460 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:44,515 INFO L225 Difference]: With dead ends: 6386 [2022-11-18 21:01:44,515 INFO L226 Difference]: Without dead ends: 6383 [2022-11-18 21:01:44,519 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:44,520 INFO L413 NwaCegarLoop]: 1194 mSDtfsCounter, 1142 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1142 SdHoareTripleChecker+Valid, 1194 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:44,520 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1142 Valid, 1194 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:01:44,528 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6383 states. [2022-11-18 21:01:45,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6383 to 6383. [2022-11-18 21:01:45,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6383 states, 4753 states have (on average 1.3692404796970334) internal successors, (6508), 4868 states have internal predecessors, (6508), 1300 states have call successors, (1300), 330 states have call predecessors, (1300), 329 states have return successors, (1513), 1232 states have call predecessors, (1513), 1296 states have call successors, (1513) [2022-11-18 21:01:45,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6383 states to 6383 states and 9321 transitions. [2022-11-18 21:01:45,154 INFO L78 Accepts]: Start accepts. Automaton has 6383 states and 9321 transitions. Word has length 68 [2022-11-18 21:01:45,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:45,155 INFO L495 AbstractCegarLoop]: Abstraction has 6383 states and 9321 transitions. [2022-11-18 21:01:45,156 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 2 states have internal predecessors, (43), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 21:01:45,156 INFO L276 IsEmpty]: Start isEmpty. Operand 6383 states and 9321 transitions. [2022-11-18 21:01:45,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-11-18 21:01:45,159 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:45,159 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:45,197 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-11-18 21:01:45,379 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:45,380 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:45,380 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:45,380 INFO L85 PathProgramCache]: Analyzing trace with hash -93107232, now seen corresponding path program 1 times [2022-11-18 21:01:45,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:45,382 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1832338070] [2022-11-18 21:01:45,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:45,382 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:45,382 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:45,384 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:45,391 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-11-18 21:01:46,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:01:46,801 INFO L263 TraceCheckSpWp]: Trace formula consists of 1258 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-18 21:01:46,804 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:47,493 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-18 21:01:47,493 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:01:47,493 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:47,494 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1832338070] [2022-11-18 21:01:47,494 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1832338070] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:01:47,494 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:01:47,494 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 21:01:47,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [18141820] [2022-11-18 21:01:47,495 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:01:47,495 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:01:47,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:47,496 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:01:47,496 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:47,496 INFO L87 Difference]: Start difference. First operand 6383 states and 9321 transitions. Second operand has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 2 states have internal predecessors, (44), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 21:01:47,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:47,999 INFO L93 Difference]: Finished difference Result 6385 states and 9322 transitions. [2022-11-18 21:01:47,999 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:01:48,000 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 2 states have internal predecessors, (44), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 69 [2022-11-18 21:01:48,000 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:48,029 INFO L225 Difference]: With dead ends: 6385 [2022-11-18 21:01:48,029 INFO L226 Difference]: Without dead ends: 6353 [2022-11-18 21:01:48,032 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:48,035 INFO L413 NwaCegarLoop]: 1193 mSDtfsCounter, 1139 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1139 SdHoareTripleChecker+Valid, 1193 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:48,036 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1139 Valid, 1193 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:01:48,043 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6353 states. [2022-11-18 21:01:48,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6353 to 6353. [2022-11-18 21:01:48,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6353 states, 4726 states have (on average 1.369022429115531) internal successors, (6470), 4840 states have internal predecessors, (6470), 1297 states have call successors, (1297), 330 states have call predecessors, (1297), 329 states have return successors, (1508), 1230 states have call predecessors, (1508), 1294 states have call successors, (1508) [2022-11-18 21:01:48,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6353 states to 6353 states and 9275 transitions. [2022-11-18 21:01:48,653 INFO L78 Accepts]: Start accepts. Automaton has 6353 states and 9275 transitions. Word has length 69 [2022-11-18 21:01:48,653 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:48,653 INFO L495 AbstractCegarLoop]: Abstraction has 6353 states and 9275 transitions. [2022-11-18 21:01:48,653 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 2 states have internal predecessors, (44), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-11-18 21:01:48,654 INFO L276 IsEmpty]: Start isEmpty. Operand 6353 states and 9275 transitions. [2022-11-18 21:01:48,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2022-11-18 21:01:48,659 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:48,659 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:48,699 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-11-18 21:01:48,872 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:48,872 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:48,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:48,873 INFO L85 PathProgramCache]: Analyzing trace with hash 696725679, now seen corresponding path program 1 times [2022-11-18 21:01:48,874 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:48,874 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1435887098] [2022-11-18 21:01:48,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:48,875 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:48,875 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:48,881 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:48,891 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-11-18 21:01:50,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:01:50,114 INFO L263 TraceCheckSpWp]: Trace formula consists of 1373 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-18 21:01:50,117 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:50,171 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-18 21:01:50,171 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:01:50,171 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:50,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1435887098] [2022-11-18 21:01:50,172 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1435887098] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:01:50,172 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:01:50,172 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 21:01:50,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [279583778] [2022-11-18 21:01:50,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:01:50,173 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:01:50,173 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:50,174 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:01:50,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:50,174 INFO L87 Difference]: Start difference. First operand 6353 states and 9275 transitions. Second operand has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-18 21:01:52,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:52,027 INFO L93 Difference]: Finished difference Result 17330 states and 25121 transitions. [2022-11-18 21:01:52,028 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:01:52,028 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 102 [2022-11-18 21:01:52,028 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:52,083 INFO L225 Difference]: With dead ends: 17330 [2022-11-18 21:01:52,083 INFO L226 Difference]: Without dead ends: 10994 [2022-11-18 21:01:52,109 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:01:52,110 INFO L413 NwaCegarLoop]: 1597 mSDtfsCounter, 869 mSDsluCounter, 1146 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 869 SdHoareTripleChecker+Valid, 2743 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:52,110 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [869 Valid, 2743 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-18 21:01:52,124 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10994 states. [2022-11-18 21:01:53,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10994 to 10963. [2022-11-18 21:01:53,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10963 states, 8116 states have (on average 1.3591670773780187) internal successors, (11031), 8329 states have internal predecessors, (11031), 2224 states have call successors, (2224), 623 states have call predecessors, (2224), 622 states have return successors, (2573), 2098 states have call predecessors, (2573), 2221 states have call successors, (2573) [2022-11-18 21:01:53,277 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10963 states to 10963 states and 15828 transitions. [2022-11-18 21:01:53,279 INFO L78 Accepts]: Start accepts. Automaton has 10963 states and 15828 transitions. Word has length 102 [2022-11-18 21:01:53,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:53,280 INFO L495 AbstractCegarLoop]: Abstraction has 10963 states and 15828 transitions. [2022-11-18 21:01:53,280 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-18 21:01:53,280 INFO L276 IsEmpty]: Start isEmpty. Operand 10963 states and 15828 transitions. [2022-11-18 21:01:53,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2022-11-18 21:01:53,287 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:53,288 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:53,318 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-11-18 21:01:53,506 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:53,506 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:53,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:53,507 INFO L85 PathProgramCache]: Analyzing trace with hash 1862390503, now seen corresponding path program 1 times [2022-11-18 21:01:53,508 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:53,508 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1127558366] [2022-11-18 21:01:53,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:53,509 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:53,509 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:53,511 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:53,554 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-11-18 21:01:54,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:01:54,930 INFO L263 TraceCheckSpWp]: Trace formula consists of 1442 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-18 21:01:54,932 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:01:55,197 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-18 21:01:55,198 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:01:55,198 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:01:55,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1127558366] [2022-11-18 21:01:55,198 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1127558366] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:01:55,199 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:01:55,199 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 21:01:55,199 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [42880236] [2022-11-18 21:01:55,199 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:01:55,200 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 21:01:55,200 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:01:55,200 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 21:01:55,201 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 21:01:55,201 INFO L87 Difference]: Start difference. First operand 10963 states and 15828 transitions. Second operand has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-18 21:01:57,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:01:57,599 INFO L93 Difference]: Finished difference Result 17838 states and 25660 transitions. [2022-11-18 21:01:57,600 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-18 21:01:57,600 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 128 [2022-11-18 21:01:57,600 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:01:57,631 INFO L225 Difference]: With dead ends: 17838 [2022-11-18 21:01:57,632 INFO L226 Difference]: Without dead ends: 6891 [2022-11-18 21:01:57,670 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:01:57,671 INFO L413 NwaCegarLoop]: 1191 mSDtfsCounter, 38 mSDsluCounter, 3564 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 4755 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-18 21:01:57,671 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 4755 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-18 21:01:57,680 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6891 states. [2022-11-18 21:01:58,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6891 to 6775. [2022-11-18 21:01:58,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6775 states, 5016 states have (on average 1.3528708133971292) internal successors, (6786), 5151 states have internal predecessors, (6786), 1362 states have call successors, (1362), 397 states have call predecessors, (1362), 396 states have return successors, (1549), 1280 states have call predecessors, (1549), 1359 states have call successors, (1549) [2022-11-18 21:01:58,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6775 states to 6775 states and 9697 transitions. [2022-11-18 21:01:58,454 INFO L78 Accepts]: Start accepts. Automaton has 6775 states and 9697 transitions. Word has length 128 [2022-11-18 21:01:58,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:01:58,454 INFO L495 AbstractCegarLoop]: Abstraction has 6775 states and 9697 transitions. [2022-11-18 21:01:58,455 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-18 21:01:58,455 INFO L276 IsEmpty]: Start isEmpty. Operand 6775 states and 9697 transitions. [2022-11-18 21:01:58,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2022-11-18 21:01:58,465 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:01:58,465 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:01:58,500 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-11-18 21:01:58,678 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:58,678 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:01:58,679 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:01:58,679 INFO L85 PathProgramCache]: Analyzing trace with hash -948611006, now seen corresponding path program 1 times [2022-11-18 21:01:58,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:01:58,680 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [672683596] [2022-11-18 21:01:58,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:01:58,681 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:01:58,681 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:01:58,682 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:01:58,688 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2022-11-18 21:02:00,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:02:00,436 INFO L263 TraceCheckSpWp]: Trace formula consists of 1499 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-18 21:02:00,441 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:02:00,672 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2022-11-18 21:02:00,672 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:02:00,672 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:02:00,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [672683596] [2022-11-18 21:02:00,672 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [672683596] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:02:00,672 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:02:00,673 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 21:02:00,673 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2070187654] [2022-11-18 21:02:00,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:02:00,673 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 21:02:00,673 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:02:00,674 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 21:02:00,674 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 21:02:00,674 INFO L87 Difference]: Start difference. First operand 6775 states and 9697 transitions. Second operand has 6 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-18 21:02:05,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:02:05,688 INFO L93 Difference]: Finished difference Result 12440 states and 17831 transitions. [2022-11-18 21:02:05,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-18 21:02:05,689 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 134 [2022-11-18 21:02:05,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:02:05,718 INFO L225 Difference]: With dead ends: 12440 [2022-11-18 21:02:05,718 INFO L226 Difference]: Without dead ends: 6789 [2022-11-18 21:02:05,737 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 129 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:02:05,737 INFO L413 NwaCegarLoop]: 1441 mSDtfsCounter, 435 mSDsluCounter, 5219 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 520 SdHoareTripleChecker+Valid, 6660 SdHoareTripleChecker+Invalid, 179 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.6s IncrementalHoareTripleChecker+Time [2022-11-18 21:02:05,738 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [520 Valid, 6660 Invalid, 179 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 4.6s Time] [2022-11-18 21:02:05,745 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6789 states. [2022-11-18 21:02:06,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6789 to 6775. [2022-11-18 21:02:06,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6775 states, 5016 states have (on average 1.35207336523126) internal successors, (6782), 5151 states have internal predecessors, (6782), 1362 states have call successors, (1362), 397 states have call predecessors, (1362), 396 states have return successors, (1549), 1280 states have call predecessors, (1549), 1359 states have call successors, (1549) [2022-11-18 21:02:06,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6775 states to 6775 states and 9693 transitions. [2022-11-18 21:02:06,439 INFO L78 Accepts]: Start accepts. Automaton has 6775 states and 9693 transitions. Word has length 134 [2022-11-18 21:02:06,439 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:02:06,440 INFO L495 AbstractCegarLoop]: Abstraction has 6775 states and 9693 transitions. [2022-11-18 21:02:06,440 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-18 21:02:06,440 INFO L276 IsEmpty]: Start isEmpty. Operand 6775 states and 9693 transitions. [2022-11-18 21:02:06,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2022-11-18 21:02:06,458 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:02:06,458 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:02:06,503 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2022-11-18 21:02:06,683 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:02:06,683 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:02:06,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:02:06,684 INFO L85 PathProgramCache]: Analyzing trace with hash -871710208, now seen corresponding path program 1 times [2022-11-18 21:02:06,685 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:02:06,685 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2115955641] [2022-11-18 21:02:06,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:02:06,685 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:02:06,686 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:02:06,687 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:02:06,726 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2022-11-18 21:02:08,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:02:08,537 INFO L263 TraceCheckSpWp]: Trace formula consists of 1499 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-18 21:02:08,540 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:02:08,900 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-11-18 21:02:08,901 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:02:08,901 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:02:08,901 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2115955641] [2022-11-18 21:02:08,901 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2115955641] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:02:08,901 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:02:08,901 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 21:02:08,901 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [567373206] [2022-11-18 21:02:08,902 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:02:08,902 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 21:02:08,902 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:02:08,902 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 21:02:08,903 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 21:02:08,903 INFO L87 Difference]: Start difference. First operand 6775 states and 9693 transitions. Second operand has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-18 21:02:09,611 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:02:09,611 INFO L93 Difference]: Finished difference Result 12478 states and 17953 transitions. [2022-11-18 21:02:09,612 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-18 21:02:09,612 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) Word has length 134 [2022-11-18 21:02:09,612 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:02:09,649 INFO L225 Difference]: With dead ends: 12478 [2022-11-18 21:02:09,649 INFO L226 Difference]: Without dead ends: 6827 [2022-11-18 21:02:09,669 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 21:02:09,669 INFO L413 NwaCegarLoop]: 1199 mSDtfsCounter, 4 mSDsluCounter, 3576 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4 SdHoareTripleChecker+Valid, 4775 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 21:02:09,670 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4 Valid, 4775 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 21:02:09,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6827 states. [2022-11-18 21:02:10,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6827 to 6809. [2022-11-18 21:02:10,581 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6809 states, 5040 states have (on average 1.3511904761904763) internal successors, (6810), 5177 states have internal predecessors, (6810), 1366 states have call successors, (1366), 397 states have call predecessors, (1366), 402 states have return successors, (1589), 1288 states have call predecessors, (1589), 1363 states have call successors, (1589) [2022-11-18 21:02:10,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6809 states to 6809 states and 9765 transitions. [2022-11-18 21:02:10,611 INFO L78 Accepts]: Start accepts. Automaton has 6809 states and 9765 transitions. Word has length 134 [2022-11-18 21:02:10,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:02:10,612 INFO L495 AbstractCegarLoop]: Abstraction has 6809 states and 9765 transitions. [2022-11-18 21:02:10,612 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 17.6) internal successors, (88), 4 states have internal predecessors, (88), 3 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (12), 4 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-18 21:02:10,612 INFO L276 IsEmpty]: Start isEmpty. Operand 6809 states and 9765 transitions. [2022-11-18 21:02:10,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 141 [2022-11-18 21:02:10,621 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:02:10,621 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:02:10,660 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2022-11-18 21:02:10,842 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:02:10,842 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:02:10,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:02:10,843 INFO L85 PathProgramCache]: Analyzing trace with hash -411751834, now seen corresponding path program 1 times [2022-11-18 21:02:10,844 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:02:10,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [433513962] [2022-11-18 21:02:10,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:02:10,845 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:02:10,845 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:02:10,846 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:02:10,866 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2022-11-18 21:02:12,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:02:12,737 INFO L263 TraceCheckSpWp]: Trace formula consists of 1516 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-18 21:02:12,741 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:02:14,110 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-11-18 21:02:14,110 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:02:14,110 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:02:14,111 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [433513962] [2022-11-18 21:02:14,111 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [433513962] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:02:14,111 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:02:14,111 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-18 21:02:14,111 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1013083900] [2022-11-18 21:02:14,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:02:14,112 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-18 21:02:14,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:02:14,112 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-18 21:02:14,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2022-11-18 21:02:14,113 INFO L87 Difference]: Start difference. First operand 6809 states and 9765 transitions. Second operand has 13 states, 13 states have (on average 7.076923076923077) internal successors, (92), 10 states have internal predecessors, (92), 3 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 2 states have call successors, (13) [2022-11-18 21:02:26,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:02:26,554 INFO L93 Difference]: Finished difference Result 14837 states and 21719 transitions. [2022-11-18 21:02:26,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-18 21:02:26,556 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 7.076923076923077) internal successors, (92), 10 states have internal predecessors, (92), 3 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 2 states have call successors, (13) Word has length 140 [2022-11-18 21:02:26,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:02:26,590 INFO L225 Difference]: With dead ends: 14837 [2022-11-18 21:02:26,590 INFO L226 Difference]: Without dead ends: 9152 [2022-11-18 21:02:26,604 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 85 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=91, Invalid=611, Unknown=0, NotChecked=0, Total=702 [2022-11-18 21:02:26,605 INFO L413 NwaCegarLoop]: 2421 mSDtfsCounter, 2566 mSDsluCounter, 25868 mSDsCounter, 0 mSdLazyCounter, 1111 mSolverCounterSat, 208 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2654 SdHoareTripleChecker+Valid, 28289 SdHoareTripleChecker+Invalid, 1319 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 208 IncrementalHoareTripleChecker+Valid, 1111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.5s IncrementalHoareTripleChecker+Time [2022-11-18 21:02:26,605 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2654 Valid, 28289 Invalid, 1319 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [208 Valid, 1111 Invalid, 0 Unknown, 0 Unchecked, 9.5s Time] [2022-11-18 21:02:26,613 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9152 states. [2022-11-18 21:02:27,242 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9152 to 6795. [2022-11-18 21:02:27,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6795 states, 5026 states have (on average 1.3507759649820932) internal successors, (6789), 5164 states have internal predecessors, (6789), 1366 states have call successors, (1366), 397 states have call predecessors, (1366), 402 states have return successors, (1589), 1287 states have call predecessors, (1589), 1363 states have call successors, (1589) [2022-11-18 21:02:27,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6795 states to 6795 states and 9744 transitions. [2022-11-18 21:02:27,266 INFO L78 Accepts]: Start accepts. Automaton has 6795 states and 9744 transitions. Word has length 140 [2022-11-18 21:02:27,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:02:27,266 INFO L495 AbstractCegarLoop]: Abstraction has 6795 states and 9744 transitions. [2022-11-18 21:02:27,267 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 7.076923076923077) internal successors, (92), 10 states have internal predecessors, (92), 3 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 5 states have call predecessors, (13), 2 states have call successors, (13) [2022-11-18 21:02:27,267 INFO L276 IsEmpty]: Start isEmpty. Operand 6795 states and 9744 transitions. [2022-11-18 21:02:27,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2022-11-18 21:02:27,274 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:02:27,275 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:02:27,310 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Ended with exit code 0 [2022-11-18 21:02:27,488 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:02:27,488 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:02:27,488 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:02:27,488 INFO L85 PathProgramCache]: Analyzing trace with hash 1095627296, now seen corresponding path program 1 times [2022-11-18 21:02:27,489 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:02:27,489 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1241670932] [2022-11-18 21:02:27,489 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:02:27,490 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:02:27,490 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:02:27,491 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:02:27,506 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2022-11-18 21:02:28,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:02:28,886 INFO L263 TraceCheckSpWp]: Trace formula consists of 1643 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-18 21:02:28,889 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:02:28,970 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2022-11-18 21:02:28,970 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:02:28,970 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:02:28,970 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1241670932] [2022-11-18 21:02:28,970 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1241670932] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:02:28,970 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:02:28,971 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 21:02:28,971 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1653574758] [2022-11-18 21:02:28,971 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:02:28,972 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:02:28,972 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:02:28,972 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:02:28,972 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:02:28,973 INFO L87 Difference]: Start difference. First operand 6795 states and 9744 transitions. Second operand has 3 states, 3 states have (on average 31.0) internal successors, (93), 3 states have internal predecessors, (93), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-18 21:02:29,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:02:29,970 INFO L93 Difference]: Finished difference Result 16528 states and 23689 transitions. [2022-11-18 21:02:29,971 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:02:29,971 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 31.0) internal successors, (93), 3 states have internal predecessors, (93), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 138 [2022-11-18 21:02:29,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:02:29,997 INFO L225 Difference]: With dead ends: 16528 [2022-11-18 21:02:29,998 INFO L226 Difference]: Without dead ends: 9375 [2022-11-18 21:02:30,017 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 137 GetRequests, 136 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:02:30,018 INFO L413 NwaCegarLoop]: 1742 mSDtfsCounter, 894 mSDsluCounter, 1151 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 894 SdHoareTripleChecker+Valid, 2893 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 21:02:30,018 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [894 Valid, 2893 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 21:02:30,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9375 states. [2022-11-18 21:02:30,723 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9375 to 9258. [2022-11-18 21:02:30,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9258 states, 6876 states have (on average 1.3534031413612566) internal successors, (9306), 7071 states have internal predecessors, (9306), 1814 states have call successors, (1814), 556 states have call predecessors, (1814), 567 states have return successors, (2172), 1692 states have call predecessors, (2172), 1811 states have call successors, (2172) [2022-11-18 21:02:30,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9258 states to 9258 states and 13292 transitions. [2022-11-18 21:02:30,765 INFO L78 Accepts]: Start accepts. Automaton has 9258 states and 13292 transitions. Word has length 138 [2022-11-18 21:02:30,766 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:02:30,766 INFO L495 AbstractCegarLoop]: Abstraction has 9258 states and 13292 transitions. [2022-11-18 21:02:30,766 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 31.0) internal successors, (93), 3 states have internal predecessors, (93), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-11-18 21:02:30,766 INFO L276 IsEmpty]: Start isEmpty. Operand 9258 states and 13292 transitions. [2022-11-18 21:02:30,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2022-11-18 21:02:30,775 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:02:30,775 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:02:30,818 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2022-11-18 21:02:30,990 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:02:30,990 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:02:30,991 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:02:30,991 INFO L85 PathProgramCache]: Analyzing trace with hash 2025189890, now seen corresponding path program 1 times [2022-11-18 21:02:30,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:02:30,992 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1788031024] [2022-11-18 21:02:30,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:02:30,992 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:02:30,992 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:02:30,993 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:02:30,994 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2022-11-18 21:02:32,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:02:32,747 INFO L263 TraceCheckSpWp]: Trace formula consists of 1599 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-18 21:02:32,751 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:02:32,836 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-11-18 21:02:32,836 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:02:32,836 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-11-18 21:02:32,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1788031024] [2022-11-18 21:02:32,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1788031024] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:02:32,837 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:02:32,837 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-18 21:02:32,837 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1725428958] [2022-11-18 21:02:32,837 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:02:32,838 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-18 21:02:32,838 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-11-18 21:02:32,838 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-18 21:02:32,838 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-18 21:02:32,838 INFO L87 Difference]: Start difference. First operand 9258 states and 13292 transitions. Second operand has 4 states, 4 states have (on average 26.75) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-18 21:02:34,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:02:34,540 INFO L93 Difference]: Finished difference Result 23905 states and 35192 transitions. [2022-11-18 21:02:34,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-18 21:02:34,541 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 26.75) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2022-11-18 21:02:34,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:02:34,658 INFO L225 Difference]: With dead ends: 23905 [2022-11-18 21:02:34,658 INFO L226 Difference]: Without dead ends: 14692 [2022-11-18 21:02:34,672 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-18 21:02:34,673 INFO L413 NwaCegarLoop]: 1790 mSDtfsCounter, 1099 mSDsluCounter, 2981 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 129 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1179 SdHoareTripleChecker+Valid, 4771 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 129 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-18 21:02:34,673 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1179 Valid, 4771 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [129 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-18 21:02:34,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14692 states. [2022-11-18 21:02:35,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14692 to 9274. [2022-11-18 21:02:35,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9274 states, 6892 states have (on average 1.352582704585026) internal successors, (9322), 7087 states have internal predecessors, (9322), 1814 states have call successors, (1814), 556 states have call predecessors, (1814), 567 states have return successors, (2172), 1692 states have call predecessors, (2172), 1811 states have call successors, (2172) [2022-11-18 21:02:35,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9274 states to 9274 states and 13308 transitions. [2022-11-18 21:02:35,840 INFO L78 Accepts]: Start accepts. Automaton has 9274 states and 13308 transitions. Word has length 161 [2022-11-18 21:02:35,841 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:02:35,841 INFO L495 AbstractCegarLoop]: Abstraction has 9274 states and 13308 transitions. [2022-11-18 21:02:35,841 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 26.75) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-18 21:02:35,841 INFO L276 IsEmpty]: Start isEmpty. Operand 9274 states and 13308 transitions. [2022-11-18 21:02:35,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2022-11-18 21:02:35,849 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:02:35,849 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:02:35,887 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (17)] Forceful destruction successful, exit code 0 [2022-11-18 21:02:36,070 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:02:36,070 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:02:36,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:02:36,071 INFO L85 PathProgramCache]: Analyzing trace with hash 686660894, now seen corresponding path program 1 times [2022-11-18 21:02:36,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-11-18 21:02:36,073 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [783616872] [2022-11-18 21:02:36,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:02:36,073 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:02:36,073 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat [2022-11-18 21:02:36,074 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-18 21:02:36,075 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2022-11-18 21:03:18,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-18 21:03:18,775 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-18 21:04:02,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-18 21:04:04,704 INFO L130 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-11-18 21:04:04,704 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-18 21:04:04,705 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 21:04:04,770 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (18)] Forceful destruction successful, exit code 0 [2022-11-18 21:04:04,922 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-18 21:04:04,925 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:04,929 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 21:04:04,974 WARN L421 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-11-18 21:04:05,248 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 09:04:05 BoogieIcfgContainer [2022-11-18 21:04:05,248 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 21:04:05,249 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 21:04:05,249 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 21:04:05,249 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 21:04:05,250 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:01:18" (3/4) ... [2022-11-18 21:04:05,253 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-11-18 21:04:05,253 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 21:04:05,254 INFO L158 Benchmark]: Toolchain (without parser) took 192262.34ms. Allocated memory was 65.0MB in the beginning and 2.1GB in the end (delta: 2.0GB). Free memory was 34.4MB in the beginning and 1.8GB in the end (delta: -1.7GB). Peak memory consumption was 325.7MB. Max. memory is 16.1GB. [2022-11-18 21:04:05,256 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 65.0MB. Free memory was 46.8MB in the beginning and 46.8MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 21:04:05,256 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3094.22ms. Allocated memory was 65.0MB in the beginning and 184.5MB in the end (delta: 119.5MB). Free memory was 34.2MB in the beginning and 79.3MB in the end (delta: -45.1MB). Peak memory consumption was 73.7MB. Max. memory is 16.1GB. [2022-11-18 21:04:05,259 INFO L158 Benchmark]: Boogie Procedure Inliner took 267.65ms. Allocated memory is still 184.5MB. Free memory was 79.3MB in the beginning and 115.3MB in the end (delta: -36.0MB). Peak memory consumption was 11.0MB. Max. memory is 16.1GB. [2022-11-18 21:04:05,259 INFO L158 Benchmark]: Boogie Preprocessor took 195.32ms. Allocated memory is still 184.5MB. Free memory was 115.3MB in the beginning and 94.2MB in the end (delta: 21.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-18 21:04:05,260 INFO L158 Benchmark]: RCFGBuilder took 21826.46ms. Allocated memory was 184.5MB in the beginning and 339.7MB in the end (delta: 155.2MB). Free memory was 94.2MB in the beginning and 156.4MB in the end (delta: -62.3MB). Peak memory consumption was 131.2MB. Max. memory is 16.1GB. [2022-11-18 21:04:05,260 INFO L158 Benchmark]: TraceAbstraction took 166867.11ms. Allocated memory was 339.7MB in the beginning and 2.1GB in the end (delta: 1.8GB). Free memory was 155.4MB in the beginning and 1.8GB in the end (delta: -1.6GB). Peak memory consumption was 170.9MB. Max. memory is 16.1GB. [2022-11-18 21:04:05,260 INFO L158 Benchmark]: Witness Printer took 4.10ms. Allocated memory is still 2.1GB. Free memory is still 1.8GB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 21:04:05,264 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 65.0MB. Free memory was 46.8MB in the beginning and 46.8MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3094.22ms. Allocated memory was 65.0MB in the beginning and 184.5MB in the end (delta: 119.5MB). Free memory was 34.2MB in the beginning and 79.3MB in the end (delta: -45.1MB). Peak memory consumption was 73.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 267.65ms. Allocated memory is still 184.5MB. Free memory was 79.3MB in the beginning and 115.3MB in the end (delta: -36.0MB). Peak memory consumption was 11.0MB. Max. memory is 16.1GB. * Boogie Preprocessor took 195.32ms. Allocated memory is still 184.5MB. Free memory was 115.3MB in the beginning and 94.2MB in the end (delta: 21.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * RCFGBuilder took 21826.46ms. Allocated memory was 184.5MB in the beginning and 339.7MB in the end (delta: 155.2MB). Free memory was 94.2MB in the beginning and 156.4MB in the end (delta: -62.3MB). Peak memory consumption was 131.2MB. Max. memory is 16.1GB. * TraceAbstraction took 166867.11ms. Allocated memory was 339.7MB in the beginning and 2.1GB in the end (delta: 1.8GB). Free memory was 155.4MB in the beginning and 1.8GB in the end (delta: -1.6GB). Peak memory consumption was 170.9MB. Max. memory is 16.1GB. * Witness Printer took 4.10ms. Allocated memory is still 2.1GB. Free memory is still 1.8GB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7054]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8527. Possible FailurePath: [L8990] int SERIAL_STATE = 0; [L7077] int LDV_IN_INTERRUPT = 1; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7171] static struct usb_card_rec *usb_card ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8998] void (*completeFnBulk)(struct urb * ) ; [L7080] int ref_cnt ; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7083] int usb_counter ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8992] struct urb *usb_urb = 0; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8991] void *usb_intfdata = 0; [L7084] struct sk_buff *usb_ops_group1 ; [L8997] void (*completeFnInt)(struct urb * ) ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L8586] int ldv_retval_0 ; [L8588] int ldv_retval_1 ; [L8593] int ldv_retval_2 ; [L8592] int ldv_retval_3 ; [L8587] int ldv_retval_4 ; [L7170] static struct semaphore add_remove_card_sem ; [L8989] int INTERF_STATE = 0; [L8995] int completeFnIntCounter = 0; [L7079] int ldv_state_variable_2 ; [L8996] int completeFnBulkCounter = 0; [L7085] int ldv_state_variable_0 ; [L7082] int ldv_state_variable_1 ; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=5, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=5, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=2164260864, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=5, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={216172782113784498:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor.flags=0, descriptor___0={144115188084244671:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor.flags=0, descriptor___0={144115188084244671:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND FALSE !(tmp != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor___0={144115188084244671:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, sem={163:0}, sem={163:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={162:0}, ldv_func_arg1={162:0}, ldv_func_arg2={165:166}, ldv_func_arg2={165:166}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor___0={144115188084244671:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor___0={144115188084244671:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND FALSE !(tmp___0 != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={2204:0}, descriptor___0={144115188084244671:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8688] COND TRUE ldv_state_variable_1 == 1 [L8689] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8435] int ret ; [L8436] struct usb_card_rec *card ; [L8438] EXPR adapter->card [L8438] card = (struct usb_card_rec *)adapter->card [L8439] EXPR card->usb_boot_state VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, card->usb_boot_state=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8439] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8451] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8045] struct usb_card_rec *card ; [L8046] int i ; [L8047] int tmp ; [L8048] int tmp___0 ; [L8050] EXPR adapter->card [L8050] card = (struct usb_card_rec *)adapter->card [L8051] card->rx_cmd.adapter = adapter [L8052] EXPR card->rx_cmd_ep [L8052] card->rx_cmd.ep = card->rx_cmd_ep [L8053] CALL, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8936] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L8938] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9021] struct urb *value ; [L9022] void *tmp ; [L9023] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND FALSE !(tmp___0 != 0) [L7010] tmp = malloc(size) [L7011] p = tmp VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={188:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={188:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7012] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L6998] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7012] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={188:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={188:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7013] return (p); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, \result={188:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, p={188:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp={188:0}, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={188:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9025] tmp = ldv_malloc(sizeof(struct urb)) [L9026] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={188:0}] [L9027] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L7036] int tmp ; [L7038] tmp = __VERIFIER_nondet_int() [L7039] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}] [L9027] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_undef_int()=-2147483648, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={188:0}] [L9027] tmp___0 = ldv_undef_int() [L9028] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={161:0}, value={188:0}] [L9029] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L9030] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}, value={188:0}] [L9035] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result={188:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, tmp___0=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}, value={188:0}] [L8938] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={188:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8938] tmp = ldv_alloc_urb() [L8939] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={188:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mem_flags=208, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={188:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8053] RET, EXPR ldv_usb_alloc_urb_17(0, 208U) [L8053] card->rx_cmd.urb = ldv_usb_alloc_urb_17(0, 208U) [L8054] EXPR card->rx_cmd.urb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, card->rx_cmd.urb={188:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8054] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8059] CALL, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L7104] struct sk_buff *tmp ; [L7106] CALL, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7096] struct sk_buff *tmp ; [L7098] CALL, EXPR __netdev_alloc_skb(dev, length, 32U) [L9240] CALL, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(size)=253, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L7002] void *p ; [L7003] void *tmp ; [L7004] int tmp___0 ; [L7006] tmp___0 = __VERIFIER_nondet_int() [L7007] COND TRUE tmp___0 != 0 [L7008] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=253, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, size=253, tmp___0=2149580800, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L9240] RET, EXPR ldv_malloc(sizeof(struct sk_buff)) VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct sk_buff))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L9240] struct sk_buff *skb = ldv_malloc(sizeof(struct sk_buff)); [L9241] COND FALSE !(\read(*skb)) VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L9247] return skb; VAL [={0:0}, ={0:0}, \old(arg1)=null, \old(arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, arg0={0:0}, arg0={0:0}, arg1=null, arg2=null, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L7098] RET, EXPR __netdev_alloc_skb(dev, length, 32U) [L7098] tmp = __netdev_alloc_skb(dev, length, 32U) [L7099] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={0:0}, dev={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L7106] RET, EXPR netdev_alloc_skb((struct net_device *)0, length) [L7106] tmp = netdev_alloc_skb((struct net_device *)0, length) [L7107] return (tmp); VAL [={0:0}, ={0:0}, \old(length)=2048, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8059] RET, EXPR dev_alloc_skb(2048U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_alloc_skb(2048U)={0:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8059] card->rx_cmd.skb = dev_alloc_skb(2048U) [L8060] EXPR card->rx_cmd.skb VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, card->rx_cmd.skb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8060] COND TRUE (unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0) [L8061] adapter->dev [L8062] return (-12); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8451] RET, EXPR mwifiex_usb_rx_init(adapter) [L8451] ret = mwifiex_usb_rx_init(adapter) [L8452] COND FALSE !(ret == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=4294967284, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8456] return (ret); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw={0:0}, fw={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, ret=4294967284, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8689] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8690] ldv_state_variable_1 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8727] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L8728] CALL mwifiex_usb_cleanup_module() [L8548] int tmp ; [L8549] struct mwifiex_adapter *adapter ; [L8550] int i ; [L8551] struct mwifiex_private *tmp___0 ; [L8553] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9262] return __VERIFIER_nondet_int(); [L8553] RET, EXPR down_interruptible(& add_remove_card_sem) [L8553] tmp = down_interruptible(& add_remove_card_sem) [L8554] COND FALSE !(tmp == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8558] COND FALSE !((unsigned long )usb_card != (unsigned long )((struct usb_card_rec *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8582] CALL ldv_usb_deregister_23(& mwifiex_usb_driver) [L8975] FCALL usb_deregister(arg) [L8976] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, arg={162:0}, arg={162:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8582] RET ldv_usb_deregister_23(& mwifiex_usb_driver) [L8728] RET mwifiex_usb_cleanup_module() [L8729] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=5, ldvarg2={0:0}, ldvarg3={216172782113784498:0}, ldvarg4={0:0}, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, tmp=5, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L8830] CALL ldv_check_final_state() [L9208] COND FALSE !((unsigned long )usb_urb == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L9210] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] [L7054] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={165:166}, add_remove_card_sem={163:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={162:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={160:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={188:0}, usbdriver_name={161:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 855 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 166.5s, OverallIterations: 17, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 34.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 13589 SdHoareTripleChecker+Valid, 22.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 13249 mSDsluCounter, 83737 SdHoareTripleChecker+Invalid, 21.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 60289 mSDsCounter, 368 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1689 IncrementalHoareTripleChecker+Invalid, 2057 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 368 mSolverCounterUnsat, 23448 mSDtfsCounter, 1689 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1529 GetRequests, 1462 SyntacticMatches, 0 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 5.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=10963occurred in iteration=10, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 9.2s AutomataMinimizationTime, 16 MinimizatonAttempts, 8440 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 1.2s SsaConstructionTime, 53.9s SatisfiabilityAnalysisTime, 9.8s InterpolantComputationTime, 1630 NumberOfCodeBlocks, 1614 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1502 ConstructedInterpolants, 0 QuantifiedInterpolants, 2909 SizeOfPredicates, 44 NumberOfNonLiveVariables, 20301 ConjunctsInSsa, 95 ConjunctsInUnsatCore, 17 InterpolantComputations, 15 PerfectInterpolantSequences, 771/773 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-11-18 21:04:05,372 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b97bea63-3027-4965-a70c-03a30b4b6192/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample