/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-15 21:15:03,151 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-15 21:15:03,154 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-15 21:15:03,199 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-15 21:15:03,199 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-15 21:15:03,201 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-15 21:15:03,217 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-15 21:15:03,220 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-15 21:15:03,222 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-15 21:15:03,223 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-15 21:15:03,225 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-15 21:15:03,226 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-15 21:15:03,227 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-15 21:15:03,228 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-15 21:15:03,230 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-15 21:15:03,231 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-15 21:15:03,232 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-15 21:15:03,233 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-15 21:15:03,236 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-15 21:15:03,238 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-15 21:15:03,240 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-15 21:15:03,242 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-15 21:15:03,243 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-15 21:15:03,245 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-15 21:15:03,249 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-15 21:15:03,250 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-15 21:15:03,250 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-15 21:15:03,251 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-15 21:15:03,252 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-15 21:15:03,253 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-15 21:15:03,254 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-15 21:15:03,255 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-15 21:15:03,256 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-15 21:15:03,257 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-15 21:15:03,258 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-15 21:15:03,258 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-15 21:15:03,259 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-15 21:15:03,260 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-15 21:15:03,260 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-15 21:15:03,261 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-15 21:15:03,262 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-15 21:15:03,263 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-15 21:15:03,308 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-15 21:15:03,308 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-15 21:15:03,309 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-15 21:15:03,309 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-15 21:15:03,312 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-15 21:15:03,312 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-15 21:15:03,313 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-15 21:15:03,314 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-15 21:15:03,314 INFO L138 SettingsManager]: * Use SBE=true [2022-10-15 21:15:03,315 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-15 21:15:03,315 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-15 21:15:03,315 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-15 21:15:03,315 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-15 21:15:03,315 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-15 21:15:03,316 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-15 21:15:03,316 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-15 21:15:03,316 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-15 21:15:03,316 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-15 21:15:03,317 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-15 21:15:03,318 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-15 21:15:03,318 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-15 21:15:03,318 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-15 21:15:03,318 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-15 21:15:03,319 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-15 21:15:03,319 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-15 21:15:03,319 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-15 21:15:03,319 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-15 21:15:03,320 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-15 21:15:03,320 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-15 21:15:03,320 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-15 21:15:03,320 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-15 21:15:03,320 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-15 21:15:03,321 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-15 21:15:03,321 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-15 21:15:03,767 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-15 21:15:03,815 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-15 21:15:03,818 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-15 21:15:03,820 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-15 21:15:03,821 INFO L275 PluginConnector]: CDTParser initialized [2022-10-15 21:15:03,824 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-10-15 21:15:03,922 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/850be1f1a/862ae5235bfe46e4b7316e60a9e12fed/FLAG825bbfe1f [2022-10-15 21:15:05,187 INFO L306 CDTParser]: Found 1 translation units. [2022-10-15 21:15:05,188 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-10-15 21:15:05,246 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/850be1f1a/862ae5235bfe46e4b7316e60a9e12fed/FLAG825bbfe1f [2022-10-15 21:15:05,539 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/850be1f1a/862ae5235bfe46e4b7316e60a9e12fed [2022-10-15 21:15:05,543 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-15 21:15:05,551 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-15 21:15:05,557 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-15 21:15:05,557 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-15 21:15:05,562 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-15 21:15:05,564 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 09:15:05" (1/1) ... [2022-10-15 21:15:05,566 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@8e9f1fa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:05, skipping insertion in model container [2022-10-15 21:15:05,566 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 09:15:05" (1/1) ... [2022-10-15 21:15:05,576 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-15 21:15:05,730 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-15 21:15:06,806 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-10-15 21:15:07,166 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-15 21:15:07,205 INFO L203 MainTranslator]: Completed pre-run [2022-10-15 21:15:07,424 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-10-15 21:15:07,547 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-15 21:15:07,608 INFO L208 MainTranslator]: Completed translation [2022-10-15 21:15:07,609 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07 WrapperNode [2022-10-15 21:15:07,609 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-15 21:15:07,610 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-15 21:15:07,611 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-15 21:15:07,612 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-15 21:15:07,624 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:07,666 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:07,751 INFO L138 Inliner]: procedures = 101, calls = 368, calls flagged for inlining = 41, calls inlined = 38, statements flattened = 984 [2022-10-15 21:15:07,752 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-15 21:15:07,756 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-15 21:15:07,756 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-15 21:15:07,756 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-15 21:15:07,775 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:07,775 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:07,809 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:07,815 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:07,959 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:07,984 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:08,002 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:08,014 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:08,038 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-15 21:15:08,039 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-15 21:15:08,039 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-15 21:15:08,040 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-15 21:15:08,041 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (1/1) ... [2022-10-15 21:15:08,049 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-15 21:15:08,063 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-15 21:15:08,086 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-15 21:15:08,167 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-15 21:15:08,222 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-15 21:15:08,223 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-15 21:15:08,223 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-15 21:15:08,223 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-15 21:15:08,223 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-15 21:15:08,223 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-15 21:15:08,224 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_disconnect [2022-10-15 21:15:08,224 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_disconnect [2022-10-15 21:15:08,224 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-10-15 21:15:08,224 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-10-15 21:15:08,224 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-15 21:15:08,225 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-15 21:15:08,225 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-10-15 21:15:08,225 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-10-15 21:15:08,225 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-15 21:15:08,225 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-15 21:15:08,225 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-15 21:15:08,225 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-10-15 21:15:08,226 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-10-15 21:15:08,226 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-10-15 21:15:08,226 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-10-15 21:15:08,226 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-10-15 21:15:08,226 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-10-15 21:15:08,226 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-15 21:15:08,227 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-15 21:15:08,227 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-15 21:15:08,227 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-15 21:15:08,227 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-15 21:15:08,227 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-15 21:15:08,227 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-15 21:15:08,228 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_tx_fixup [2022-10-15 21:15:08,228 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_tx_fixup [2022-10-15 21:15:08,228 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_rx_fixup [2022-10-15 21:15:08,228 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_rx_fixup [2022-10-15 21:15:08,228 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-15 21:15:08,229 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-15 21:15:08,229 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-10-15 21:15:08,229 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-10-15 21:15:08,229 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-15 21:15:08,230 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-15 21:15:08,230 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-10-15 21:15:08,230 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-10-15 21:15:08,230 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-15 21:15:08,230 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-15 21:15:08,653 INFO L235 CfgBuilder]: Building ICFG [2022-10-15 21:15:08,656 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-15 21:15:08,871 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-15 21:15:11,528 INFO L276 CfgBuilder]: Performing block encoding [2022-10-15 21:15:11,546 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-15 21:15:11,546 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-10-15 21:15:11,549 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 09:15:11 BoogieIcfgContainer [2022-10-15 21:15:11,549 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-15 21:15:11,552 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-15 21:15:11,552 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-15 21:15:11,557 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-15 21:15:11,557 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 15.10 09:15:05" (1/3) ... [2022-10-15 21:15:11,558 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@30c87010 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.10 09:15:11, skipping insertion in model container [2022-10-15 21:15:11,558 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:15:07" (2/3) ... [2022-10-15 21:15:11,559 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@30c87010 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.10 09:15:11, skipping insertion in model container [2022-10-15 21:15:11,559 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 09:15:11" (3/3) ... [2022-10-15 21:15:11,561 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-10-15 21:15:11,585 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-15 21:15:11,585 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 20 error locations. [2022-10-15 21:15:11,658 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-15 21:15:11,668 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@773ade09, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-15 21:15:11,669 INFO L358 AbstractCegarLoop]: Starting to check reachability of 20 error locations. [2022-10-15 21:15:11,676 INFO L276 IsEmpty]: Start isEmpty. Operand has 279 states, 209 states have (on average 1.4545454545454546) internal successors, (304), 234 states have internal predecessors, (304), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) [2022-10-15 21:15:11,690 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-10-15 21:15:11,690 INFO L187 NwaCegarLoop]: Found error trace [2022-10-15 21:15:11,691 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-15 21:15:11,692 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-15 21:15:11,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-15 21:15:11,700 INFO L85 PathProgramCache]: Analyzing trace with hash -1608719786, now seen corresponding path program 1 times [2022-10-15 21:15:11,712 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-15 21:15:11,713 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [527822679] [2022-10-15 21:15:11,713 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:15:11,714 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-15 21:15:12,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:12,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-15 21:15:12,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:12,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-15 21:15:12,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:12,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-15 21:15:12,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:12,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-15 21:15:12,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:12,581 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-10-15 21:15:12,582 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-15 21:15:12,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [527822679] [2022-10-15 21:15:12,583 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [527822679] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-15 21:15:12,584 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-15 21:15:12,584 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-15 21:15:12,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1684020805] [2022-10-15 21:15:12,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-15 21:15:12,609 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-15 21:15:12,610 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-15 21:15:12,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-15 21:15:12,656 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-15 21:15:12,660 INFO L87 Difference]: Start difference. First operand has 279 states, 209 states have (on average 1.4545454545454546) internal successors, (304), 234 states have internal predecessors, (304), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) Second operand has 5 states, 5 states have (on average 4.4) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-15 21:15:14,511 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.83s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-15 21:15:17,188 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-15 21:15:17,188 INFO L93 Difference]: Finished difference Result 884 states and 1262 transitions. [2022-10-15 21:15:17,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-15 21:15:17,192 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.4) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 36 [2022-10-15 21:15:17,193 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-15 21:15:17,215 INFO L225 Difference]: With dead ends: 884 [2022-10-15 21:15:17,216 INFO L226 Difference]: Without dead ends: 577 [2022-10-15 21:15:17,226 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-15 21:15:17,231 INFO L413 NwaCegarLoop]: 410 mSDtfsCounter, 634 mSDsluCounter, 768 mSDsCounter, 0 mSdLazyCounter, 368 mSolverCounterSat, 204 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 665 SdHoareTripleChecker+Valid, 1178 SdHoareTripleChecker+Invalid, 572 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 204 IncrementalHoareTripleChecker+Valid, 368 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2022-10-15 21:15:17,232 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [665 Valid, 1178 Invalid, 572 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [204 Valid, 368 Invalid, 0 Unknown, 0 Unchecked, 4.2s Time] [2022-10-15 21:15:17,256 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 577 states. [2022-10-15 21:15:17,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 577 to 437. [2022-10-15 21:15:17,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 437 states, 342 states have (on average 1.4269005847953216) internal successors, (488), 361 states have internal predecessors, (488), 53 states have call successors, (53), 22 states have call predecessors, (53), 22 states have return successors, (53), 53 states have call predecessors, (53), 53 states have call successors, (53) [2022-10-15 21:15:17,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 437 states to 437 states and 594 transitions. [2022-10-15 21:15:17,452 INFO L78 Accepts]: Start accepts. Automaton has 437 states and 594 transitions. Word has length 36 [2022-10-15 21:15:17,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-15 21:15:17,454 INFO L495 AbstractCegarLoop]: Abstraction has 437 states and 594 transitions. [2022-10-15 21:15:17,454 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.4) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-15 21:15:17,456 INFO L276 IsEmpty]: Start isEmpty. Operand 437 states and 594 transitions. [2022-10-15 21:15:17,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-10-15 21:15:17,460 INFO L187 NwaCegarLoop]: Found error trace [2022-10-15 21:15:17,461 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-15 21:15:17,462 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-15 21:15:17,463 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-15 21:15:17,466 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-15 21:15:17,473 INFO L85 PathProgramCache]: Analyzing trace with hash -126780671, now seen corresponding path program 1 times [2022-10-15 21:15:17,474 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-15 21:15:17,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [379113397] [2022-10-15 21:15:17,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:15:17,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-15 21:15:17,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:17,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-15 21:15:17,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:17,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-15 21:15:17,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:17,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-15 21:15:17,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:17,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-15 21:15:17,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:17,828 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-10-15 21:15:17,828 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-15 21:15:17,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [379113397] [2022-10-15 21:15:17,829 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [379113397] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-15 21:15:17,829 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-15 21:15:17,830 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-15 21:15:17,830 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1290395569] [2022-10-15 21:15:17,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-15 21:15:17,832 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-15 21:15:17,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-15 21:15:17,833 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-15 21:15:17,833 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-15 21:15:17,834 INFO L87 Difference]: Start difference. First operand 437 states and 594 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-15 21:15:20,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-15 21:15:20,491 INFO L93 Difference]: Finished difference Result 1085 states and 1504 transitions. [2022-10-15 21:15:20,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-15 21:15:20,494 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 39 [2022-10-15 21:15:20,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-15 21:15:20,503 INFO L225 Difference]: With dead ends: 1085 [2022-10-15 21:15:20,503 INFO L226 Difference]: Without dead ends: 664 [2022-10-15 21:15:20,508 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-10-15 21:15:20,510 INFO L413 NwaCegarLoop]: 334 mSDtfsCounter, 317 mSDsluCounter, 639 mSDsCounter, 0 mSdLazyCounter, 303 mSolverCounterSat, 94 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 973 SdHoareTripleChecker+Invalid, 397 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 94 IncrementalHoareTripleChecker+Valid, 303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2022-10-15 21:15:20,512 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [334 Valid, 973 Invalid, 397 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [94 Valid, 303 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2022-10-15 21:15:20,514 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 664 states. [2022-10-15 21:15:20,564 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 664 to 531. [2022-10-15 21:15:20,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 531 states, 426 states have (on average 1.4342723004694835) internal successors, (611), 445 states have internal predecessors, (611), 58 states have call successors, (58), 27 states have call predecessors, (58), 27 states have return successors, (58), 58 states have call predecessors, (58), 58 states have call successors, (58) [2022-10-15 21:15:20,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 531 states to 531 states and 727 transitions. [2022-10-15 21:15:20,572 INFO L78 Accepts]: Start accepts. Automaton has 531 states and 727 transitions. Word has length 39 [2022-10-15 21:15:20,573 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-15 21:15:20,573 INFO L495 AbstractCegarLoop]: Abstraction has 531 states and 727 transitions. [2022-10-15 21:15:20,573 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-15 21:15:20,574 INFO L276 IsEmpty]: Start isEmpty. Operand 531 states and 727 transitions. [2022-10-15 21:15:20,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-10-15 21:15:20,576 INFO L187 NwaCegarLoop]: Found error trace [2022-10-15 21:15:20,577 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-15 21:15:20,577 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-15 21:15:20,578 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-15 21:15:20,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-15 21:15:20,578 INFO L85 PathProgramCache]: Analyzing trace with hash -487165268, now seen corresponding path program 1 times [2022-10-15 21:15:20,579 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-15 21:15:20,579 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [155077597] [2022-10-15 21:15:20,579 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:15:20,580 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-15 21:15:20,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:20,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-15 21:15:20,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:20,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-15 21:15:20,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:20,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-15 21:15:20,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:20,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-15 21:15:20,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:20,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-15 21:15:20,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:20,868 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-10-15 21:15:20,869 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-15 21:15:20,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [155077597] [2022-10-15 21:15:20,869 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [155077597] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-15 21:15:20,870 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-15 21:15:20,870 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-15 21:15:20,870 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [606981484] [2022-10-15 21:15:20,870 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-15 21:15:20,871 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-15 21:15:20,871 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-15 21:15:20,872 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-15 21:15:20,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-15 21:15:20,873 INFO L87 Difference]: Start difference. First operand 531 states and 727 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-10-15 21:15:22,853 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.26s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-15 21:15:25,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-15 21:15:25,193 INFO L93 Difference]: Finished difference Result 1163 states and 1625 transitions. [2022-10-15 21:15:25,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-15 21:15:25,195 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-10-15 21:15:25,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-15 21:15:25,202 INFO L225 Difference]: With dead ends: 1163 [2022-10-15 21:15:25,203 INFO L226 Difference]: Without dead ends: 657 [2022-10-15 21:15:25,206 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-10-15 21:15:25,208 INFO L413 NwaCegarLoop]: 330 mSDtfsCounter, 189 mSDsluCounter, 672 mSDsCounter, 0 mSdLazyCounter, 273 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 1002 SdHoareTripleChecker+Invalid, 354 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2022-10-15 21:15:25,209 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [199 Valid, 1002 Invalid, 354 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 273 Invalid, 0 Unknown, 0 Unchecked, 4.2s Time] [2022-10-15 21:15:25,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 657 states. [2022-10-15 21:15:25,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 657 to 525. [2022-10-15 21:15:25,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 525 states, 420 states have (on average 1.4357142857142857) internal successors, (603), 440 states have internal predecessors, (603), 58 states have call successors, (58), 27 states have call predecessors, (58), 27 states have return successors, (58), 57 states have call predecessors, (58), 58 states have call successors, (58) [2022-10-15 21:15:25,303 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 525 states to 525 states and 719 transitions. [2022-10-15 21:15:25,304 INFO L78 Accepts]: Start accepts. Automaton has 525 states and 719 transitions. Word has length 55 [2022-10-15 21:15:25,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-15 21:15:25,305 INFO L495 AbstractCegarLoop]: Abstraction has 525 states and 719 transitions. [2022-10-15 21:15:25,306 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-10-15 21:15:25,306 INFO L276 IsEmpty]: Start isEmpty. Operand 525 states and 719 transitions. [2022-10-15 21:15:25,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-10-15 21:15:25,309 INFO L187 NwaCegarLoop]: Found error trace [2022-10-15 21:15:25,309 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-15 21:15:25,309 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-15 21:15:25,310 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-15 21:15:25,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-15 21:15:25,311 INFO L85 PathProgramCache]: Analyzing trace with hash 2045099886, now seen corresponding path program 1 times [2022-10-15 21:15:25,311 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-15 21:15:25,311 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1527475393] [2022-10-15 21:15:25,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:15:25,312 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-15 21:15:25,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:25,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-15 21:15:25,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:25,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-15 21:15:25,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:25,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-15 21:15:25,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:25,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-15 21:15:25,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:25,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-15 21:15:25,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:25,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-15 21:15:25,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:25,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-10-15 21:15:25,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:25,787 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-10-15 21:15:25,788 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-15 21:15:25,789 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1527475393] [2022-10-15 21:15:25,789 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1527475393] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-15 21:15:25,789 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-15 21:15:25,789 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-15 21:15:25,790 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [734064531] [2022-10-15 21:15:25,790 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-15 21:15:25,791 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-15 21:15:25,791 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-15 21:15:25,792 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-15 21:15:25,792 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-15 21:15:25,792 INFO L87 Difference]: Start difference. First operand 525 states and 719 transitions. Second operand has 5 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-15 21:15:28,652 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.86s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-15 21:15:30,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-15 21:15:30,508 INFO L93 Difference]: Finished difference Result 1272 states and 1801 transitions. [2022-10-15 21:15:30,508 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-15 21:15:30,509 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 68 [2022-10-15 21:15:30,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-15 21:15:30,521 INFO L225 Difference]: With dead ends: 1272 [2022-10-15 21:15:30,521 INFO L226 Difference]: Without dead ends: 1262 [2022-10-15 21:15:30,523 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-15 21:15:30,525 INFO L413 NwaCegarLoop]: 346 mSDtfsCounter, 690 mSDsluCounter, 630 mSDsCounter, 0 mSdLazyCounter, 396 mSolverCounterSat, 216 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 722 SdHoareTripleChecker+Valid, 976 SdHoareTripleChecker+Invalid, 612 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 216 IncrementalHoareTripleChecker+Valid, 396 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.5s IncrementalHoareTripleChecker+Time [2022-10-15 21:15:30,525 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [722 Valid, 976 Invalid, 612 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [216 Valid, 396 Invalid, 0 Unknown, 0 Unchecked, 4.5s Time] [2022-10-15 21:15:30,528 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1262 states. [2022-10-15 21:15:30,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1262 to 1003. [2022-10-15 21:15:30,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1003 states, 821 states have (on average 1.4190012180267966) internal successors, (1165), 842 states have internal predecessors, (1165), 111 states have call successors, (111), 51 states have call predecessors, (111), 51 states have return successors, (111), 109 states have call predecessors, (111), 111 states have call successors, (111) [2022-10-15 21:15:30,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1003 states to 1003 states and 1387 transitions. [2022-10-15 21:15:30,612 INFO L78 Accepts]: Start accepts. Automaton has 1003 states and 1387 transitions. Word has length 68 [2022-10-15 21:15:30,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-15 21:15:30,613 INFO L495 AbstractCegarLoop]: Abstraction has 1003 states and 1387 transitions. [2022-10-15 21:15:30,613 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-15 21:15:30,613 INFO L276 IsEmpty]: Start isEmpty. Operand 1003 states and 1387 transitions. [2022-10-15 21:15:30,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-10-15 21:15:30,615 INFO L187 NwaCegarLoop]: Found error trace [2022-10-15 21:15:30,616 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-15 21:15:30,616 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-15 21:15:30,616 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-15 21:15:30,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-15 21:15:30,617 INFO L85 PathProgramCache]: Analyzing trace with hash -836081943, now seen corresponding path program 1 times [2022-10-15 21:15:30,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-15 21:15:30,618 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1479500895] [2022-10-15 21:15:30,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:15:30,618 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-15 21:15:30,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:31,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-15 21:15:31,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:31,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-15 21:15:31,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:31,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-15 21:15:31,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:31,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-15 21:15:31,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:31,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-15 21:15:31,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:31,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-15 21:15:31,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:31,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-10-15 21:15:31,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:31,550 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2022-10-15 21:15:31,551 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-15 21:15:31,551 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1479500895] [2022-10-15 21:15:31,551 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1479500895] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-15 21:15:31,552 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [642724322] [2022-10-15 21:15:31,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:15:31,552 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-15 21:15:31,553 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-15 21:15:31,555 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-15 21:15:31,577 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-15 21:15:32,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:32,213 INFO L263 TraceCheckSpWp]: Trace formula consists of 1053 conjuncts, 7 conjunts are in the unsatisfiable core [2022-10-15 21:15:32,225 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-15 21:15:32,334 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-10-15 21:15:32,334 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-15 21:15:32,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [642724322] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-15 21:15:32,335 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-15 21:15:32,335 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 7 [2022-10-15 21:15:32,336 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296354852] [2022-10-15 21:15:32,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-15 21:15:32,337 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-15 21:15:32,338 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-15 21:15:32,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-15 21:15:32,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-10-15 21:15:32,339 INFO L87 Difference]: Start difference. First operand 1003 states and 1387 transitions. Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-15 21:15:32,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-15 21:15:32,474 INFO L93 Difference]: Finished difference Result 1989 states and 2756 transitions. [2022-10-15 21:15:32,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-15 21:15:32,475 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 71 [2022-10-15 21:15:32,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-15 21:15:32,485 INFO L225 Difference]: With dead ends: 1989 [2022-10-15 21:15:32,485 INFO L226 Difference]: Without dead ends: 1004 [2022-10-15 21:15:32,491 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 81 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-10-15 21:15:32,492 INFO L413 NwaCegarLoop]: 341 mSDtfsCounter, 2 mSDsluCounter, 679 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1020 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-15 21:15:32,493 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 1020 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-15 21:15:32,496 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1004 states. [2022-10-15 21:15:32,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1004 to 1004. [2022-10-15 21:15:32,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1004 states, 822 states have (on average 1.4184914841849148) internal successors, (1166), 843 states have internal predecessors, (1166), 111 states have call successors, (111), 51 states have call predecessors, (111), 51 states have return successors, (111), 109 states have call predecessors, (111), 111 states have call successors, (111) [2022-10-15 21:15:32,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1004 states to 1004 states and 1388 transitions. [2022-10-15 21:15:32,590 INFO L78 Accepts]: Start accepts. Automaton has 1004 states and 1388 transitions. Word has length 71 [2022-10-15 21:15:32,590 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-15 21:15:32,590 INFO L495 AbstractCegarLoop]: Abstraction has 1004 states and 1388 transitions. [2022-10-15 21:15:32,591 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-15 21:15:32,591 INFO L276 IsEmpty]: Start isEmpty. Operand 1004 states and 1388 transitions. [2022-10-15 21:15:32,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-10-15 21:15:32,593 INFO L187 NwaCegarLoop]: Found error trace [2022-10-15 21:15:32,593 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-15 21:15:32,650 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-15 21:15:32,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-15 21:15:32,808 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-15 21:15:32,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-15 21:15:32,809 INFO L85 PathProgramCache]: Analyzing trace with hash -586816113, now seen corresponding path program 1 times [2022-10-15 21:15:32,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-15 21:15:32,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [915873746] [2022-10-15 21:15:32,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:15:32,811 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-15 21:15:32,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:33,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-15 21:15:33,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:33,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-15 21:15:33,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:33,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-15 21:15:33,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:33,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-10-15 21:15:33,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:33,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-15 21:15:33,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:33,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-15 21:15:33,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:33,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-10-15 21:15:33,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:33,790 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-10-15 21:15:33,791 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-15 21:15:33,791 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [915873746] [2022-10-15 21:15:33,791 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [915873746] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-15 21:15:33,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1734246769] [2022-10-15 21:15:33,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:15:33,792 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-15 21:15:33,792 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-15 21:15:33,793 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-15 21:15:33,801 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-15 21:15:34,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:15:34,334 INFO L263 TraceCheckSpWp]: Trace formula consists of 1083 conjuncts, 12 conjunts are in the unsatisfiable core [2022-10-15 21:15:34,339 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-15 21:15:34,493 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 31 proven. 1 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-10-15 21:15:34,493 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-15 21:15:34,687 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-10-15 21:15:34,688 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1734246769] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-15 21:15:34,688 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-15 21:15:34,688 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 12 [2022-10-15 21:15:34,689 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [302287062] [2022-10-15 21:15:34,689 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-15 21:15:34,690 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-10-15 21:15:34,690 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-15 21:15:34,691 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-10-15 21:15:34,691 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=95, Unknown=0, NotChecked=0, Total=132 [2022-10-15 21:15:34,692 INFO L87 Difference]: Start difference. First operand 1004 states and 1388 transitions. Second operand has 12 states, 12 states have (on average 5.083333333333333) internal successors, (61), 10 states have internal predecessors, (61), 2 states have call successors, (19), 4 states have call predecessors, (19), 5 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-15 21:15:36,711 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-15 21:15:39,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-15 21:15:39,856 INFO L93 Difference]: Finished difference Result 2239 states and 3154 transitions. [2022-10-15 21:15:39,857 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-10-15 21:15:39,858 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 5.083333333333333) internal successors, (61), 10 states have internal predecessors, (61), 2 states have call successors, (19), 4 states have call predecessors, (19), 5 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 73 [2022-10-15 21:15:39,858 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-15 21:15:39,869 INFO L225 Difference]: With dead ends: 2239 [2022-10-15 21:15:39,870 INFO L226 Difference]: Without dead ends: 1251 [2022-10-15 21:15:39,878 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 152 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=70, Invalid=170, Unknown=0, NotChecked=0, Total=240 [2022-10-15 21:15:39,882 INFO L413 NwaCegarLoop]: 327 mSDtfsCounter, 195 mSDsluCounter, 954 mSDsCounter, 0 mSdLazyCounter, 388 mSolverCounterSat, 90 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 204 SdHoareTripleChecker+Valid, 1281 SdHoareTripleChecker+Invalid, 479 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 388 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.7s IncrementalHoareTripleChecker+Time [2022-10-15 21:15:39,883 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [204 Valid, 1281 Invalid, 479 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 388 Invalid, 1 Unknown, 0 Unchecked, 4.7s Time] [2022-10-15 21:15:39,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1251 states. [2022-10-15 21:15:39,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1251 to 1007. [2022-10-15 21:15:39,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1007 states, 825 states have (on average 1.416969696969697) internal successors, (1169), 846 states have internal predecessors, (1169), 111 states have call successors, (111), 51 states have call predecessors, (111), 51 states have return successors, (111), 109 states have call predecessors, (111), 111 states have call successors, (111) [2022-10-15 21:15:39,969 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1007 states to 1007 states and 1391 transitions. [2022-10-15 21:15:39,971 INFO L78 Accepts]: Start accepts. Automaton has 1007 states and 1391 transitions. Word has length 73 [2022-10-15 21:15:39,971 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-15 21:15:39,972 INFO L495 AbstractCegarLoop]: Abstraction has 1007 states and 1391 transitions. [2022-10-15 21:15:39,977 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 5.083333333333333) internal successors, (61), 10 states have internal predecessors, (61), 2 states have call successors, (19), 4 states have call predecessors, (19), 5 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-15 21:15:39,977 INFO L276 IsEmpty]: Start isEmpty. Operand 1007 states and 1391 transitions. [2022-10-15 21:15:39,982 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-10-15 21:15:39,982 INFO L187 NwaCegarLoop]: Found error trace [2022-10-15 21:15:39,982 INFO L195 NwaCegarLoop]: trace histogram [8, 5, 5, 5, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-15 21:15:40,037 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-15 21:15:40,183 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-10-15 21:15:40,184 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-15 21:15:40,185 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-15 21:15:40,185 INFO L85 PathProgramCache]: Analyzing trace with hash 1225926633, now seen corresponding path program 2 times [2022-10-15 21:15:40,185 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-15 21:15:40,186 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1618709478] [2022-10-15 21:15:40,186 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:15:40,186 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-15 21:15:40,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-15 21:15:40,434 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-15 21:15:40,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-15 21:15:40,793 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-15 21:15:40,794 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-15 21:15:40,795 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 20 remaining) [2022-10-15 21:15:40,798 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 20 remaining) [2022-10-15 21:15:40,799 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 20 remaining) [2022-10-15 21:15:40,800 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 20 remaining) [2022-10-15 21:15:40,800 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 20 remaining) [2022-10-15 21:15:40,800 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location genelink_tx_fixupErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 20 remaining) [2022-10-15 21:15:40,800 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location genelink_tx_fixupErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 20 remaining) [2022-10-15 21:15:40,801 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location genelink_tx_fixupErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 20 remaining) [2022-10-15 21:15:40,801 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location genelink_tx_fixupErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 20 remaining) [2022-10-15 21:15:40,802 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 20 remaining) [2022-10-15 21:15:40,802 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 20 remaining) [2022-10-15 21:15:40,802 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 20 remaining) [2022-10-15 21:15:40,802 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 20 remaining) [2022-10-15 21:15:40,803 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 20 remaining) [2022-10-15 21:15:40,803 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 20 remaining) [2022-10-15 21:15:40,803 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 20 remaining) [2022-10-15 21:15:40,804 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 20 remaining) [2022-10-15 21:15:40,804 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 20 remaining) [2022-10-15 21:15:40,804 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 20 remaining) [2022-10-15 21:15:40,805 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 20 remaining) [2022-10-15 21:15:40,805 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-15 21:15:40,811 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1] [2022-10-15 21:15:40,818 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-15 21:15:40,871 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-15 21:15:40,874 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-15 21:15:41,087 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 15.10 09:15:41 BoogieIcfgContainer [2022-10-15 21:15:41,087 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-15 21:15:41,088 INFO L158 Benchmark]: Toolchain (without parser) took 35542.07ms. Allocated memory was 151.0MB in the beginning and 368.1MB in the end (delta: 217.1MB). Free memory was 117.8MB in the beginning and 275.8MB in the end (delta: -158.0MB). Peak memory consumption was 233.1MB. Max. memory is 8.0GB. [2022-10-15 21:15:41,089 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 151.0MB. Free memory is still 121.3MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-15 21:15:41,089 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2052.24ms. Allocated memory is still 151.0MB. Free memory was 117.5MB in the beginning and 55.1MB in the end (delta: 62.4MB). Peak memory consumption was 61.6MB. Max. memory is 8.0GB. [2022-10-15 21:15:41,090 INFO L158 Benchmark]: Boogie Procedure Inliner took 141.55ms. Allocated memory is still 151.0MB. Free memory was 55.1MB in the beginning and 48.3MB in the end (delta: 6.8MB). Peak memory consumption was 7.3MB. Max. memory is 8.0GB. [2022-10-15 21:15:41,090 INFO L158 Benchmark]: Boogie Preprocessor took 282.63ms. Allocated memory is still 151.0MB. Free memory was 48.3MB in the beginning and 105.6MB in the end (delta: -57.3MB). Peak memory consumption was 24.0MB. Max. memory is 8.0GB. [2022-10-15 21:15:41,090 INFO L158 Benchmark]: RCFGBuilder took 3510.31ms. Allocated memory was 151.0MB in the beginning and 306.2MB in the end (delta: 155.2MB). Free memory was 105.6MB in the beginning and 206.8MB in the end (delta: -101.2MB). Peak memory consumption was 143.8MB. Max. memory is 8.0GB. [2022-10-15 21:15:41,091 INFO L158 Benchmark]: TraceAbstraction took 29535.10ms. Allocated memory was 306.2MB in the beginning and 368.1MB in the end (delta: 61.9MB). Free memory was 206.3MB in the beginning and 275.8MB in the end (delta: -69.5MB). Peak memory consumption was 165.4MB. Max. memory is 8.0GB. [2022-10-15 21:15:41,093 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 151.0MB. Free memory is still 121.3MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 2052.24ms. Allocated memory is still 151.0MB. Free memory was 117.5MB in the beginning and 55.1MB in the end (delta: 62.4MB). Peak memory consumption was 61.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 141.55ms. Allocated memory is still 151.0MB. Free memory was 55.1MB in the beginning and 48.3MB in the end (delta: 6.8MB). Peak memory consumption was 7.3MB. Max. memory is 8.0GB. * Boogie Preprocessor took 282.63ms. Allocated memory is still 151.0MB. Free memory was 48.3MB in the beginning and 105.6MB in the end (delta: -57.3MB). Peak memory consumption was 24.0MB. Max. memory is 8.0GB. * RCFGBuilder took 3510.31ms. Allocated memory was 151.0MB in the beginning and 306.2MB in the end (delta: 155.2MB). Free memory was 105.6MB in the beginning and 206.8MB in the end (delta: -101.2MB). Peak memory consumption was 143.8MB. Max. memory is 8.0GB. * TraceAbstraction took 29535.10ms. Allocated memory was 306.2MB in the beginning and 368.1MB in the end (delta: 61.9MB). Free memory was 206.3MB in the beginning and 275.8MB in the end (delta: -69.5MB). Peak memory consumption was 165.4MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 5689]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 5861. Possible FailurePath: [L5662] int LDV_IN_INTERRUPT = 1; [L5663] int ldv_state_variable_2 ; [L5664] struct usbnet *genelink_info_group0 ; [L5665] int ref_cnt ; [L5666] int ldv_state_variable_1 ; [L5667] int usb_counter ; [L5668] struct usb_interface *gl620a_driver_group1 ; [L5669] int ldv_state_variable_0 ; [L5670] struct sk_buff *genelink_info_group1 ; [L5860-L5862] static struct driver_info const genelink_info = {(char *)"Genesys GeneLink", 4114, & genelink_bind, 0, 0, 0, 0, 0, 0, 0, & genelink_rx_fixup, & genelink_tx_fixup, 0, 0, 1, 2, 0UL}; [L5863-L5865] static struct usb_device_id const products[2U] = { {3U, 1507U, 1282U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned long )(& genelink_info)}}; [L5866] struct usb_device_id const __mod_usb__products_device_table ; [L5867-L5876] static struct usb_driver gl620a_driver = {"gl620a", & usbnet_probe, & usbnet_disconnect, 0, & usbnet_suspend, & usbnet_resume, 0, 0, 0, (struct usb_device_id const *)(& products), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, 1U, (unsigned char)0}; [L5893] int ldv_retval_2 ; [L5894] int ldv_retval_5 ; [L5895] int ldv_retval_0 ; [L5896] int ldv_retval_4 ; [L5899] int ldv_retval_1 ; [L5901] int ldv_retval_3 ; [L6187] Element set_impl[15] ; [L6188] int last_index = 0; [L6322] Set LDV_SKBS ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5925] struct usb_device_id *ldvarg1 ; [L5926] void *tmp ; [L5927] pm_message_t ldvarg0 ; [L5928] struct usb_interface *ldvarg3 ; [L5929] void *tmp___0 ; [L5930] gfp_t ldvarg2 ; [L5931] int tmp___1 ; [L5932] int tmp___2 ; [L5933] int tmp___3 ; [L5934] int tmp___4 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=32, tmp___0=1, usb_counter=0] [L5936] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={26:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] tmp = ldv_zalloc(32UL) [L5937] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=1, usb_counter=0] [L5938] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] tmp___0 = ldv_zalloc(1560UL) [L5939] ldvarg3 = (struct usb_interface *)tmp___0 [L5940] CALL ldv_initialize() [L6341] CALL ldv_set_init(LDV_SKBS) [L6193] set = set_impl [L6194] last_index = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set={24:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6341] RET ldv_set_init(LDV_SKBS) [L5940] RET ldv_initialize() [L5941] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5942] FCALL memset((void *)(& ldvarg2), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, memset((void *)(& ldvarg2), 0, 4UL)={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5943] ldv_state_variable_1 = 0 [L5944] ref_cnt = 0 [L5945] ldv_state_variable_0 = 1 [L5946] ldv_state_variable_2 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: [L6028] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L6029] COND TRUE ldv_state_variable_0 == 1 [L6030] CALL, EXPR gl620a_driver_init() [L5879] int tmp ; [L5881] CALL, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L6167] ldv_func_ret_type ldv_func_res ; [L6168] int tmp ; [L6170] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6436] return __VERIFIER_nondet_int(); [L6170] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6170] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6171] ldv_func_res = tmp [L6172] ldv_state_variable_1 = 1 [L6173] usb_counter = 0 [L6174] CALL ldv_usb_driver_1() [L5916] void *tmp ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=1, usb_counter=0] [L5918] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] tmp = ldv_zalloc(1560UL) [L5919] gl620a_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L6174] RET ldv_usb_driver_1() [L6175] return (ldv_func_res); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, ldv_func_arg1={23:0}, ldv_func_arg1={23:0}, ldv_func_arg2={8388645:8388644}, ldv_func_arg2={8388645:8388644}, ldv_func_arg3={20:0}, ldv_func_arg3={20:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L5881] RET, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5881] tmp = ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5882] return (tmp); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L6030] RET, EXPR gl620a_driver_init() [L6030] ldv_retval_4 = gl620a_driver_init() [L6031] COND TRUE ldv_retval_4 == 0 [L6032] ldv_state_variable_0 = 3 [L6033] ldv_state_variable_2 = 1 [L6034] CALL ldv_initialize_driver_info_2() [L5904] void *tmp ; [L5905] void *tmp___0 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] CALL, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1472, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1472, tmp___0=1, usb_counter=0] [L5907] RET, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(1472UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] tmp = ldv_zalloc(1472UL) [L5908] genelink_info_group0 = (struct usbnet *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=232, tmp___0=1, usb_counter=0] [L5909] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] tmp___0 = ldv_zalloc(232UL) [L5910] genelink_info_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L6034] RET ldv_initialize_driver_info_2() [L6037] COND FALSE !(ldv_retval_4 != 0) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: [L6052] case 2: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, usb_counter=0] [L6053] COND TRUE ldv_state_variable_2 != 0 [L6054] tmp___4 = __VERIFIER_nondet_int() [L6056] case 0: [L6068] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=1, usb_counter=0] [L6069] COND TRUE ldv_state_variable_2 == 1 [L6070] CALL genelink_bind(genelink_info_group0, ldvarg3) [L5848] unsigned int tmp ; [L5849] unsigned int tmp___0 ; [L5851] dev->hard_mtu = 48580U [L5852] EXPR dev->net [L5852] EXPR dev->net [L5852] EXPR (dev->net)->hard_header_len [L5852] (dev->net)->hard_header_len = (unsigned int )(dev->net)->hard_header_len + 4U [L5853] EXPR dev->udev [L5853] EXPR dev->driver_info [L5853] EXPR (dev->driver_info)->in VAL [(dev->driver_info)->in=8388624, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, dev={0:0}, dev={0:0}, dev->driver_info={8388628:-3}, dev->udev={8388635:8388622}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, intf={0:0}, intf={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5853] CALL __create_pipe(dev->udev, (unsigned int )(dev->driver_info)->in) VAL [\old(endpoint)=8388624, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, dev={8388635:8388622}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5689] EXPR dev->devnum VAL [\old(endpoint)=8388624, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, dev={8388635:8388622}, dev={8388635:8388622}, dev->devnum=8388608, endpoint=8388624, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5689] dev->devnum << 8 VAL [\old(endpoint)=8388624, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, dev={8388635:8388622}, dev={8388635:8388622}, dev->devnum=8388608, endpoint=8388624, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] - UnprovableResult [Line: 6213]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6213]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6217]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6217]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5818]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5818]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5818]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5818]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5689]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5959]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5959]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5969]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5969]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5975]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5975]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6073]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6073]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6095]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6095]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 280 locations, 20 error locations. Started 1 CEGAR loops. OverallTime: 29.2s, OverallIterations: 7, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 21.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1 mSolverCounterUnknown, 2126 SdHoareTripleChecker+Valid, 20.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2027 mSDsluCounter, 6430 SdHoareTripleChecker+Invalid, 19.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4342 mSDsCounter, 686 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1736 IncrementalHoareTripleChecker+Invalid, 2423 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 686 mSolverCounterUnsat, 2088 mSDtfsCounter, 1736 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 322 GetRequests, 279 SyntacticMatches, 2 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1007occurred in iteration=6, InterpolantAutomatonStates: 40, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 6 MinimizatonAttempts, 908 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.4s SatisfiabilityAnalysisTime, 3.4s InterpolantComputationTime, 565 NumberOfCodeBlocks, 565 NumberOfCodeBlocksAsserted, 9 NumberOfCheckSat, 550 ConstructedInterpolants, 0 QuantifiedInterpolants, 1109 SizeOfPredicates, 2 NumberOfNonLiveVariables, 2136 ConjunctsInSsa, 19 ConjunctsInUnsatCore, 9 InterpolantComputations, 5 PerfectInterpolantSequences, 312/330 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-15 21:15:41,169 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...