/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 13:12:22,025 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 13:12:22,028 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 13:12:22,082 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 13:12:22,082 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 13:12:22,086 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 13:12:22,089 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 13:12:22,106 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 13:12:22,108 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 13:12:22,114 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 13:12:22,115 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 13:12:22,117 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 13:12:22,118 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 13:12:22,121 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 13:12:22,122 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 13:12:22,127 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 13:12:22,128 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 13:12:22,130 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 13:12:22,133 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 13:12:22,139 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 13:12:22,142 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 13:12:22,144 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 13:12:22,145 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 13:12:22,148 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 13:12:22,157 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 13:12:22,157 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 13:12:22,158 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 13:12:22,160 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 13:12:22,161 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 13:12:22,161 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 13:12:22,162 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 13:12:22,163 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 13:12:22,164 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 13:12:22,165 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 13:12:22,166 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 13:12:22,166 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 13:12:22,167 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 13:12:22,167 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 13:12:22,168 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 13:12:22,168 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 13:12:22,169 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 13:12:22,170 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 13:12:22,223 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 13:12:22,223 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 13:12:22,224 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 13:12:22,224 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 13:12:22,226 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 13:12:22,226 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 13:12:22,228 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 13:12:22,229 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 13:12:22,229 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 13:12:22,229 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 13:12:22,230 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 13:12:22,230 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 13:12:22,231 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 13:12:22,231 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 13:12:22,231 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 13:12:22,231 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 13:12:22,231 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 13:12:22,232 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 13:12:22,232 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 13:12:22,232 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 13:12:22,232 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 13:12:22,232 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 13:12:22,232 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 13:12:22,233 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 13:12:22,233 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 13:12:22,233 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 13:12:22,233 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:12:22,233 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 13:12:22,234 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 13:12:22,234 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 13:12:22,234 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 13:12:22,234 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 13:12:22,235 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 13:12:22,235 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 13:12:22,616 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 13:12:22,642 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 13:12:22,645 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 13:12:22,647 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 13:12:22,647 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 13:12:22,649 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-10-16 13:12:22,721 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f8cedc218/319b8a8188424ca7809930fed225dc83/FLAG7916d0d93 [2022-10-16 13:12:23,659 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 13:12:23,660 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-10-16 13:12:23,694 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f8cedc218/319b8a8188424ca7809930fed225dc83/FLAG7916d0d93 [2022-10-16 13:12:24,146 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f8cedc218/319b8a8188424ca7809930fed225dc83 [2022-10-16 13:12:24,149 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 13:12:24,155 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 13:12:24,157 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 13:12:24,157 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 13:12:24,161 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 13:12:24,162 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:12:24" (1/1) ... [2022-10-16 13:12:24,163 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1bde1214 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:24, skipping insertion in model container [2022-10-16 13:12:24,163 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:12:24" (1/1) ... [2022-10-16 13:12:24,171 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 13:12:24,274 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 13:12:25,114 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-10-16 13:12:25,484 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:12:25,514 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 13:12:25,717 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-10-16 13:12:25,816 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:12:25,872 INFO L208 MainTranslator]: Completed translation [2022-10-16 13:12:25,873 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25 WrapperNode [2022-10-16 13:12:25,873 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 13:12:25,874 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 13:12:25,874 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 13:12:25,874 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 13:12:25,884 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:25,959 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:26,060 INFO L138 Inliner]: procedures = 101, calls = 368, calls flagged for inlining = 41, calls inlined = 38, statements flattened = 984 [2022-10-16 13:12:26,060 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 13:12:26,061 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 13:12:26,061 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 13:12:26,061 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 13:12:26,073 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:26,073 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:26,086 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:26,175 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:26,250 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:26,265 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:26,284 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:26,295 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:26,356 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 13:12:26,359 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 13:12:26,359 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 13:12:26,359 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 13:12:26,364 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (1/1) ... [2022-10-16 13:12:26,370 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:12:26,383 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:12:26,397 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 13:12:26,404 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 13:12:26,453 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-16 13:12:26,453 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-16 13:12:26,454 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-16 13:12:26,454 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-16 13:12:26,454 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-16 13:12:26,454 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 13:12:26,454 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_disconnect [2022-10-16 13:12:26,454 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_disconnect [2022-10-16 13:12:26,455 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-10-16 13:12:26,455 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-10-16 13:12:26,455 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 13:12:26,456 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 13:12:26,456 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-10-16 13:12:26,456 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-10-16 13:12:26,456 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 13:12:26,456 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 13:12:26,456 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 13:12:26,456 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-10-16 13:12:26,457 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-10-16 13:12:26,457 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-10-16 13:12:26,457 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-10-16 13:12:26,457 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-10-16 13:12:26,457 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-10-16 13:12:26,457 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-16 13:12:26,457 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-16 13:12:26,457 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 13:12:26,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 13:12:26,458 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 13:12:26,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 13:12:26,458 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 13:12:26,458 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_tx_fixup [2022-10-16 13:12:26,458 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_tx_fixup [2022-10-16 13:12:26,458 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_rx_fixup [2022-10-16 13:12:26,458 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_rx_fixup [2022-10-16 13:12:26,459 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 13:12:26,459 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 13:12:26,459 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-10-16 13:12:26,459 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-10-16 13:12:26,459 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 13:12:26,459 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-16 13:12:26,459 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-10-16 13:12:26,460 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-10-16 13:12:26,460 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 13:12:26,460 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 13:12:26,880 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 13:12:26,883 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 13:12:27,116 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-16 13:12:29,128 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 13:12:29,139 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 13:12:29,140 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-10-16 13:12:29,142 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:12:29 BoogieIcfgContainer [2022-10-16 13:12:29,143 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 13:12:29,145 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 13:12:29,145 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 13:12:29,149 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 13:12:29,149 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 01:12:24" (1/3) ... [2022-10-16 13:12:29,150 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@79f37a20 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:12:29, skipping insertion in model container [2022-10-16 13:12:29,150 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:12:25" (2/3) ... [2022-10-16 13:12:29,150 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@79f37a20 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:12:29, skipping insertion in model container [2022-10-16 13:12:29,150 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:12:29" (3/3) ... [2022-10-16 13:12:29,152 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-10-16 13:12:29,173 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 13:12:29,173 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 20 error locations. [2022-10-16 13:12:29,238 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 13:12:29,246 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@456d04c9, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 13:12:29,247 INFO L358 AbstractCegarLoop]: Starting to check reachability of 20 error locations. [2022-10-16 13:12:29,253 INFO L276 IsEmpty]: Start isEmpty. Operand has 279 states, 209 states have (on average 1.4545454545454546) internal successors, (304), 234 states have internal predecessors, (304), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) [2022-10-16 13:12:29,264 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-10-16 13:12:29,265 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:12:29,266 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:12:29,266 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-16 13:12:29,272 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:12:29,272 INFO L85 PathProgramCache]: Analyzing trace with hash -1608719786, now seen corresponding path program 1 times [2022-10-16 13:12:29,282 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:12:29,283 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [52194343] [2022-10-16 13:12:29,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:12:29,284 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:12:29,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:29,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:12:29,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:29,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:12:29,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:29,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-16 13:12:29,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:29,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:12:29,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:30,008 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-10-16 13:12:30,009 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:12:30,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [52194343] [2022-10-16 13:12:30,010 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [52194343] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:12:30,011 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:12:30,012 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:12:30,014 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530253100] [2022-10-16 13:12:30,014 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:12:30,021 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:12:30,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:12:30,056 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:12:30,057 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:12:30,060 INFO L87 Difference]: Start difference. First operand has 279 states, 209 states have (on average 1.4545454545454546) internal successors, (304), 234 states have internal predecessors, (304), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) Second operand has 5 states, 5 states have (on average 4.4) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:12:32,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:12:32,674 INFO L93 Difference]: Finished difference Result 884 states and 1262 transitions. [2022-10-16 13:12:32,676 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:12:32,677 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.4) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 36 [2022-10-16 13:12:32,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:12:32,698 INFO L225 Difference]: With dead ends: 884 [2022-10-16 13:12:32,698 INFO L226 Difference]: Without dead ends: 577 [2022-10-16 13:12:32,706 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:12:32,710 INFO L413 NwaCegarLoop]: 411 mSDtfsCounter, 634 mSDsluCounter, 766 mSDsCounter, 0 mSdLazyCounter, 374 mSolverCounterSat, 204 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 662 SdHoareTripleChecker+Valid, 1177 SdHoareTripleChecker+Invalid, 578 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 204 IncrementalHoareTripleChecker+Valid, 374 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-10-16 13:12:32,712 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [662 Valid, 1177 Invalid, 578 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [204 Valid, 374 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-10-16 13:12:32,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 577 states. [2022-10-16 13:12:32,813 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 577 to 437. [2022-10-16 13:12:32,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 437 states, 342 states have (on average 1.4269005847953216) internal successors, (488), 361 states have internal predecessors, (488), 53 states have call successors, (53), 22 states have call predecessors, (53), 22 states have return successors, (53), 53 states have call predecessors, (53), 53 states have call successors, (53) [2022-10-16 13:12:32,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 437 states to 437 states and 594 transitions. [2022-10-16 13:12:32,822 INFO L78 Accepts]: Start accepts. Automaton has 437 states and 594 transitions. Word has length 36 [2022-10-16 13:12:32,823 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:12:32,823 INFO L495 AbstractCegarLoop]: Abstraction has 437 states and 594 transitions. [2022-10-16 13:12:32,823 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.4) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:12:32,824 INFO L276 IsEmpty]: Start isEmpty. Operand 437 states and 594 transitions. [2022-10-16 13:12:32,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-10-16 13:12:32,826 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:12:32,827 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:12:32,827 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 13:12:32,827 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-16 13:12:32,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:12:32,828 INFO L85 PathProgramCache]: Analyzing trace with hash -126780671, now seen corresponding path program 1 times [2022-10-16 13:12:32,829 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:12:32,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [80956979] [2022-10-16 13:12:32,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:12:32,829 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:12:32,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:33,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:12:33,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:33,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:12:33,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:33,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-16 13:12:33,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:33,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:12:33,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:33,104 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-10-16 13:12:33,105 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:12:33,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [80956979] [2022-10-16 13:12:33,105 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [80956979] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:12:33,105 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:12:33,106 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:12:33,106 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2137322041] [2022-10-16 13:12:33,106 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:12:33,108 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:12:33,108 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:12:33,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:12:33,109 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:12:33,109 INFO L87 Difference]: Start difference. First operand 437 states and 594 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:12:35,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:12:35,041 INFO L93 Difference]: Finished difference Result 1085 states and 1504 transitions. [2022-10-16 13:12:35,041 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:12:35,041 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 39 [2022-10-16 13:12:35,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:12:35,048 INFO L225 Difference]: With dead ends: 1085 [2022-10-16 13:12:35,048 INFO L226 Difference]: Without dead ends: 664 [2022-10-16 13:12:35,051 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:12:35,052 INFO L413 NwaCegarLoop]: 330 mSDtfsCounter, 317 mSDsluCounter, 635 mSDsCounter, 0 mSdLazyCounter, 292 mSolverCounterSat, 94 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 335 SdHoareTripleChecker+Valid, 965 SdHoareTripleChecker+Invalid, 386 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 94 IncrementalHoareTripleChecker+Valid, 292 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:12:35,053 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [335 Valid, 965 Invalid, 386 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [94 Valid, 292 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-10-16 13:12:35,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 664 states. [2022-10-16 13:12:35,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 664 to 531. [2022-10-16 13:12:35,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 531 states, 426 states have (on average 1.4342723004694835) internal successors, (611), 445 states have internal predecessors, (611), 58 states have call successors, (58), 27 states have call predecessors, (58), 27 states have return successors, (58), 58 states have call predecessors, (58), 58 states have call successors, (58) [2022-10-16 13:12:35,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 531 states to 531 states and 727 transitions. [2022-10-16 13:12:35,107 INFO L78 Accepts]: Start accepts. Automaton has 531 states and 727 transitions. Word has length 39 [2022-10-16 13:12:35,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:12:35,107 INFO L495 AbstractCegarLoop]: Abstraction has 531 states and 727 transitions. [2022-10-16 13:12:35,108 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:12:35,108 INFO L276 IsEmpty]: Start isEmpty. Operand 531 states and 727 transitions. [2022-10-16 13:12:35,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-10-16 13:12:35,110 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:12:35,110 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:12:35,111 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 13:12:35,111 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-16 13:12:35,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:12:35,112 INFO L85 PathProgramCache]: Analyzing trace with hash -487165268, now seen corresponding path program 1 times [2022-10-16 13:12:35,112 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:12:35,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1319134945] [2022-10-16 13:12:35,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:12:35,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:12:35,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:35,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:12:35,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:35,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:12:35,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:35,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-16 13:12:35,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:35,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:12:35,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:35,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-16 13:12:35,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:35,393 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-10-16 13:12:35,394 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:12:35,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1319134945] [2022-10-16 13:12:35,395 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1319134945] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:12:35,395 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:12:35,395 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:12:35,396 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [694146153] [2022-10-16 13:12:35,396 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:12:35,396 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:12:35,398 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:12:35,399 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:12:35,399 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:12:35,399 INFO L87 Difference]: Start difference. First operand 531 states and 727 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-10-16 13:12:38,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:12:38,358 INFO L93 Difference]: Finished difference Result 1163 states and 1625 transitions. [2022-10-16 13:12:38,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:12:38,359 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 55 [2022-10-16 13:12:38,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:12:38,364 INFO L225 Difference]: With dead ends: 1163 [2022-10-16 13:12:38,364 INFO L226 Difference]: Without dead ends: 657 [2022-10-16 13:12:38,366 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:12:38,368 INFO L413 NwaCegarLoop]: 332 mSDtfsCounter, 189 mSDsluCounter, 673 mSDsCounter, 0 mSdLazyCounter, 278 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 1005 SdHoareTripleChecker+Invalid, 359 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 278 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-10-16 13:12:38,368 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [199 Valid, 1005 Invalid, 359 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 278 Invalid, 0 Unknown, 0 Unchecked, 2.9s Time] [2022-10-16 13:12:38,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 657 states. [2022-10-16 13:12:38,402 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 657 to 525. [2022-10-16 13:12:38,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 525 states, 420 states have (on average 1.4357142857142857) internal successors, (603), 440 states have internal predecessors, (603), 58 states have call successors, (58), 27 states have call predecessors, (58), 27 states have return successors, (58), 57 states have call predecessors, (58), 58 states have call successors, (58) [2022-10-16 13:12:38,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 525 states to 525 states and 719 transitions. [2022-10-16 13:12:38,408 INFO L78 Accepts]: Start accepts. Automaton has 525 states and 719 transitions. Word has length 55 [2022-10-16 13:12:38,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:12:38,408 INFO L495 AbstractCegarLoop]: Abstraction has 525 states and 719 transitions. [2022-10-16 13:12:38,409 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-10-16 13:12:38,409 INFO L276 IsEmpty]: Start isEmpty. Operand 525 states and 719 transitions. [2022-10-16 13:12:38,411 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-10-16 13:12:38,411 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:12:38,411 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:12:38,412 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 13:12:38,412 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-16 13:12:38,412 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:12:38,412 INFO L85 PathProgramCache]: Analyzing trace with hash 2045099886, now seen corresponding path program 1 times [2022-10-16 13:12:38,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:12:38,413 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [468725226] [2022-10-16 13:12:38,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:12:38,413 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:12:38,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:38,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:12:38,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:38,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:12:38,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:38,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-16 13:12:38,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:38,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:12:38,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:38,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-16 13:12:38,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:38,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-16 13:12:38,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:38,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-10-16 13:12:38,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:38,726 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-10-16 13:12:38,727 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:12:38,727 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [468725226] [2022-10-16 13:12:38,727 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [468725226] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:12:38,727 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:12:38,728 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-16 13:12:38,728 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [373001371] [2022-10-16 13:12:38,728 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:12:38,728 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:12:38,729 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:12:38,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:12:38,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:12:38,730 INFO L87 Difference]: Start difference. First operand 525 states and 719 transitions. Second operand has 5 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-16 13:12:41,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:12:41,325 INFO L93 Difference]: Finished difference Result 1272 states and 1801 transitions. [2022-10-16 13:12:41,325 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:12:41,325 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 68 [2022-10-16 13:12:41,326 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:12:41,335 INFO L225 Difference]: With dead ends: 1272 [2022-10-16 13:12:41,335 INFO L226 Difference]: Without dead ends: 1262 [2022-10-16 13:12:41,336 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:12:41,338 INFO L413 NwaCegarLoop]: 349 mSDtfsCounter, 690 mSDsluCounter, 632 mSDsCounter, 0 mSdLazyCounter, 404 mSolverCounterSat, 218 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 721 SdHoareTripleChecker+Valid, 981 SdHoareTripleChecker+Invalid, 622 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 218 IncrementalHoareTripleChecker+Valid, 404 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-10-16 13:12:41,338 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [721 Valid, 981 Invalid, 622 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [218 Valid, 404 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-10-16 13:12:41,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1262 states. [2022-10-16 13:12:41,398 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1262 to 1003. [2022-10-16 13:12:41,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1003 states, 821 states have (on average 1.4190012180267966) internal successors, (1165), 842 states have internal predecessors, (1165), 111 states have call successors, (111), 51 states have call predecessors, (111), 51 states have return successors, (111), 109 states have call predecessors, (111), 111 states have call successors, (111) [2022-10-16 13:12:41,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1003 states to 1003 states and 1387 transitions. [2022-10-16 13:12:41,407 INFO L78 Accepts]: Start accepts. Automaton has 1003 states and 1387 transitions. Word has length 68 [2022-10-16 13:12:41,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:12:41,408 INFO L495 AbstractCegarLoop]: Abstraction has 1003 states and 1387 transitions. [2022-10-16 13:12:41,408 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 9.5) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-16 13:12:41,408 INFO L276 IsEmpty]: Start isEmpty. Operand 1003 states and 1387 transitions. [2022-10-16 13:12:41,410 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-10-16 13:12:41,410 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:12:41,411 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:12:41,411 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 13:12:41,411 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-16 13:12:41,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:12:41,412 INFO L85 PathProgramCache]: Analyzing trace with hash -836081943, now seen corresponding path program 1 times [2022-10-16 13:12:41,412 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:12:41,412 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1587642435] [2022-10-16 13:12:41,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:12:41,412 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:12:41,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:41,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:12:41,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:41,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:12:41,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:41,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-16 13:12:41,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:42,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:12:42,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:42,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-16 13:12:42,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:42,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-16 13:12:42,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:42,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-10-16 13:12:42,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:42,113 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2022-10-16 13:12:42,113 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:12:42,114 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1587642435] [2022-10-16 13:12:42,114 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1587642435] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:12:42,114 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [527376598] [2022-10-16 13:12:42,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:12:42,115 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:12:42,115 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:12:42,123 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:12:42,136 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-16 13:12:42,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:42,535 INFO L263 TraceCheckSpWp]: Trace formula consists of 1053 conjuncts, 7 conjunts are in the unsatisfiable core [2022-10-16 13:12:42,546 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:12:42,625 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-10-16 13:12:42,625 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:12:42,626 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [527376598] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:12:42,626 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:12:42,626 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 7 [2022-10-16 13:12:42,626 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1081343279] [2022-10-16 13:12:42,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:12:42,627 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:12:42,627 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:12:42,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:12:42,628 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:12:42,629 INFO L87 Difference]: Start difference. First operand 1003 states and 1387 transitions. Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-16 13:12:42,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:12:42,743 INFO L93 Difference]: Finished difference Result 1989 states and 2756 transitions. [2022-10-16 13:12:42,743 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-16 13:12:42,744 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 71 [2022-10-16 13:12:42,744 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:12:42,751 INFO L225 Difference]: With dead ends: 1989 [2022-10-16 13:12:42,752 INFO L226 Difference]: Without dead ends: 1004 [2022-10-16 13:12:42,756 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 81 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:12:42,757 INFO L413 NwaCegarLoop]: 341 mSDtfsCounter, 2 mSDsluCounter, 679 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1020 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:12:42,758 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 1020 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 13:12:42,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1004 states. [2022-10-16 13:12:42,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1004 to 1004. [2022-10-16 13:12:42,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1004 states, 822 states have (on average 1.4184914841849148) internal successors, (1166), 843 states have internal predecessors, (1166), 111 states have call successors, (111), 51 states have call predecessors, (111), 51 states have return successors, (111), 109 states have call predecessors, (111), 111 states have call successors, (111) [2022-10-16 13:12:42,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1004 states to 1004 states and 1388 transitions. [2022-10-16 13:12:42,840 INFO L78 Accepts]: Start accepts. Automaton has 1004 states and 1388 transitions. Word has length 71 [2022-10-16 13:12:42,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:12:42,841 INFO L495 AbstractCegarLoop]: Abstraction has 1004 states and 1388 transitions. [2022-10-16 13:12:42,841 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-16 13:12:42,841 INFO L276 IsEmpty]: Start isEmpty. Operand 1004 states and 1388 transitions. [2022-10-16 13:12:42,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-10-16 13:12:42,843 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:12:42,843 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:12:42,888 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-10-16 13:12:43,058 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:12:43,059 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-16 13:12:43,061 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:12:43,061 INFO L85 PathProgramCache]: Analyzing trace with hash -586816113, now seen corresponding path program 1 times [2022-10-16 13:12:43,062 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:12:43,062 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [939270868] [2022-10-16 13:12:43,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:12:43,062 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:12:43,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:43,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:12:43,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:43,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:12:43,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:43,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-16 13:12:43,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:43,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-10-16 13:12:43,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:43,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:12:43,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:43,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:12:43,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:43,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-10-16 13:12:43,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:43,757 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-10-16 13:12:43,757 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:12:43,757 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [939270868] [2022-10-16 13:12:43,757 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [939270868] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:12:43,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [585005374] [2022-10-16 13:12:43,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:12:43,758 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:12:43,758 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:12:43,759 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:12:43,777 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-16 13:12:44,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:12:44,205 INFO L263 TraceCheckSpWp]: Trace formula consists of 1083 conjuncts, 12 conjunts are in the unsatisfiable core [2022-10-16 13:12:44,210 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:12:44,382 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 31 proven. 1 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-10-16 13:12:44,383 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:12:44,555 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-10-16 13:12:44,556 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [585005374] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:12:44,556 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:12:44,556 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 12 [2022-10-16 13:12:44,556 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1240858313] [2022-10-16 13:12:44,556 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:12:44,557 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-10-16 13:12:44,557 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:12:44,558 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-10-16 13:12:44,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=95, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:12:44,558 INFO L87 Difference]: Start difference. First operand 1004 states and 1388 transitions. Second operand has 12 states, 12 states have (on average 5.083333333333333) internal successors, (61), 10 states have internal predecessors, (61), 2 states have call successors, (19), 4 states have call predecessors, (19), 5 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:12:45,574 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:12:47,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:12:47,906 INFO L93 Difference]: Finished difference Result 2239 states and 3154 transitions. [2022-10-16 13:12:47,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-10-16 13:12:47,907 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 5.083333333333333) internal successors, (61), 10 states have internal predecessors, (61), 2 states have call successors, (19), 4 states have call predecessors, (19), 5 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 73 [2022-10-16 13:12:47,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:12:47,916 INFO L225 Difference]: With dead ends: 2239 [2022-10-16 13:12:47,916 INFO L226 Difference]: Without dead ends: 1251 [2022-10-16 13:12:47,920 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 152 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=70, Invalid=170, Unknown=0, NotChecked=0, Total=240 [2022-10-16 13:12:47,921 INFO L413 NwaCegarLoop]: 327 mSDtfsCounter, 195 mSDsluCounter, 958 mSDsCounter, 0 mSdLazyCounter, 381 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 205 SdHoareTripleChecker+Valid, 1285 SdHoareTripleChecker+Invalid, 471 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 381 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:12:47,922 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [205 Valid, 1285 Invalid, 471 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 381 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2022-10-16 13:12:47,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1251 states. [2022-10-16 13:12:47,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1251 to 1007. [2022-10-16 13:12:47,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1007 states, 825 states have (on average 1.416969696969697) internal successors, (1169), 846 states have internal predecessors, (1169), 111 states have call successors, (111), 51 states have call predecessors, (111), 51 states have return successors, (111), 109 states have call predecessors, (111), 111 states have call successors, (111) [2022-10-16 13:12:47,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1007 states to 1007 states and 1391 transitions. [2022-10-16 13:12:47,991 INFO L78 Accepts]: Start accepts. Automaton has 1007 states and 1391 transitions. Word has length 73 [2022-10-16 13:12:47,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:12:47,991 INFO L495 AbstractCegarLoop]: Abstraction has 1007 states and 1391 transitions. [2022-10-16 13:12:47,992 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 5.083333333333333) internal successors, (61), 10 states have internal predecessors, (61), 2 states have call successors, (19), 4 states have call predecessors, (19), 5 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:12:47,992 INFO L276 IsEmpty]: Start isEmpty. Operand 1007 states and 1391 transitions. [2022-10-16 13:12:47,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-10-16 13:12:47,993 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:12:47,993 INFO L195 NwaCegarLoop]: trace histogram [8, 5, 5, 5, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:12:48,027 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-16 13:12:48,206 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-10-16 13:12:48,207 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 17 more)] === [2022-10-16 13:12:48,208 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:12:48,208 INFO L85 PathProgramCache]: Analyzing trace with hash 1225926633, now seen corresponding path program 2 times [2022-10-16 13:12:48,208 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:12:48,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1674244230] [2022-10-16 13:12:48,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:12:48,209 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:12:48,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:12:48,407 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 13:12:48,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:12:48,641 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 13:12:48,641 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 13:12:48,642 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 20 remaining) [2022-10-16 13:12:48,645 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 20 remaining) [2022-10-16 13:12:48,645 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 20 remaining) [2022-10-16 13:12:48,645 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 20 remaining) [2022-10-16 13:12:48,646 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 20 remaining) [2022-10-16 13:12:48,646 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location genelink_tx_fixupErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 20 remaining) [2022-10-16 13:12:48,646 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location genelink_tx_fixupErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 20 remaining) [2022-10-16 13:12:48,646 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location genelink_tx_fixupErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 20 remaining) [2022-10-16 13:12:48,647 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location genelink_tx_fixupErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 20 remaining) [2022-10-16 13:12:48,647 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 20 remaining) [2022-10-16 13:12:48,647 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 20 remaining) [2022-10-16 13:12:48,647 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 20 remaining) [2022-10-16 13:12:48,647 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 20 remaining) [2022-10-16 13:12:48,648 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 20 remaining) [2022-10-16 13:12:48,648 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 20 remaining) [2022-10-16 13:12:48,648 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 20 remaining) [2022-10-16 13:12:48,648 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 20 remaining) [2022-10-16 13:12:48,648 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 20 remaining) [2022-10-16 13:12:48,649 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 20 remaining) [2022-10-16 13:12:48,649 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 20 remaining) [2022-10-16 13:12:48,649 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-16 13:12:48,654 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1] [2022-10-16 13:12:48,659 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 13:12:48,706 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:12:48,709 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:12:48,868 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 01:12:48 BoogieIcfgContainer [2022-10-16 13:12:48,868 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 13:12:48,869 INFO L158 Benchmark]: Toolchain (without parser) took 24717.99ms. Allocated memory was 151.0MB in the beginning and 377.5MB in the end (delta: 226.5MB). Free memory was 117.5MB in the beginning and 258.2MB in the end (delta: -140.6MB). Peak memory consumption was 86.5MB. Max. memory is 8.0GB. [2022-10-16 13:12:48,869 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 151.0MB. Free memory is still 121.0MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:12:48,870 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1716.53ms. Allocated memory is still 151.0MB. Free memory was 117.3MB in the beginning and 58.3MB in the end (delta: 59.1MB). Peak memory consumption was 59.8MB. Max. memory is 8.0GB. [2022-10-16 13:12:48,870 INFO L158 Benchmark]: Boogie Procedure Inliner took 186.32ms. Allocated memory is still 151.0MB. Free memory was 58.3MB in the beginning and 51.5MB in the end (delta: 6.8MB). Peak memory consumption was 7.3MB. Max. memory is 8.0GB. [2022-10-16 13:12:48,870 INFO L158 Benchmark]: Boogie Preprocessor took 295.15ms. Allocated memory was 151.0MB in the beginning and 181.4MB in the end (delta: 30.4MB). Free memory was 51.5MB in the beginning and 139.5MB in the end (delta: -88.0MB). Peak memory consumption was 34.7MB. Max. memory is 8.0GB. [2022-10-16 13:12:48,871 INFO L158 Benchmark]: RCFGBuilder took 2783.54ms. Allocated memory was 181.4MB in the beginning and 314.6MB in the end (delta: 133.2MB). Free memory was 139.4MB in the beginning and 161.3MB in the end (delta: -21.9MB). Peak memory consumption was 172.1MB. Max. memory is 8.0GB. [2022-10-16 13:12:48,871 INFO L158 Benchmark]: TraceAbstraction took 19723.21ms. Allocated memory was 314.6MB in the beginning and 377.5MB in the end (delta: 62.9MB). Free memory was 160.8MB in the beginning and 258.2MB in the end (delta: -97.4MB). There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:12:48,874 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 151.0MB. Free memory is still 121.0MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 1716.53ms. Allocated memory is still 151.0MB. Free memory was 117.3MB in the beginning and 58.3MB in the end (delta: 59.1MB). Peak memory consumption was 59.8MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 186.32ms. Allocated memory is still 151.0MB. Free memory was 58.3MB in the beginning and 51.5MB in the end (delta: 6.8MB). Peak memory consumption was 7.3MB. Max. memory is 8.0GB. * Boogie Preprocessor took 295.15ms. Allocated memory was 151.0MB in the beginning and 181.4MB in the end (delta: 30.4MB). Free memory was 51.5MB in the beginning and 139.5MB in the end (delta: -88.0MB). Peak memory consumption was 34.7MB. Max. memory is 8.0GB. * RCFGBuilder took 2783.54ms. Allocated memory was 181.4MB in the beginning and 314.6MB in the end (delta: 133.2MB). Free memory was 139.4MB in the beginning and 161.3MB in the end (delta: -21.9MB). Peak memory consumption was 172.1MB. Max. memory is 8.0GB. * TraceAbstraction took 19723.21ms. Allocated memory was 314.6MB in the beginning and 377.5MB in the end (delta: 62.9MB). Free memory was 160.8MB in the beginning and 258.2MB in the end (delta: -97.4MB). There was no memory consumed. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 5689]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 5861. Possible FailurePath: [L5662] int LDV_IN_INTERRUPT = 1; [L5663] int ldv_state_variable_2 ; [L5664] struct usbnet *genelink_info_group0 ; [L5665] int ref_cnt ; [L5666] int ldv_state_variable_1 ; [L5667] int usb_counter ; [L5668] struct usb_interface *gl620a_driver_group1 ; [L5669] int ldv_state_variable_0 ; [L5670] struct sk_buff *genelink_info_group1 ; [L5860-L5862] static struct driver_info const genelink_info = {(char *)"Genesys GeneLink", 4114, & genelink_bind, 0, 0, 0, 0, 0, 0, 0, & genelink_rx_fixup, & genelink_tx_fixup, 0, 0, 1, 2, 0UL}; [L5863-L5865] static struct usb_device_id const products[2U] = { {3U, 1507U, 1282U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned long )(& genelink_info)}}; [L5866] struct usb_device_id const __mod_usb__products_device_table ; [L5867-L5876] static struct usb_driver gl620a_driver = {"gl620a", & usbnet_probe, & usbnet_disconnect, 0, & usbnet_suspend, & usbnet_resume, 0, 0, 0, (struct usb_device_id const *)(& products), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, 1U, (unsigned char)0}; [L5893] int ldv_retval_2 ; [L5894] int ldv_retval_5 ; [L5895] int ldv_retval_0 ; [L5896] int ldv_retval_4 ; [L5899] int ldv_retval_1 ; [L5901] int ldv_retval_3 ; [L6187] Element set_impl[15] ; [L6188] int last_index = 0; [L6322] Set LDV_SKBS ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5925] struct usb_device_id *ldvarg1 ; [L5926] void *tmp ; [L5927] pm_message_t ldvarg0 ; [L5928] struct usb_interface *ldvarg3 ; [L5929] void *tmp___0 ; [L5930] gfp_t ldvarg2 ; [L5931] int tmp___1 ; [L5932] int tmp___2 ; [L5933] int tmp___3 ; [L5934] int tmp___4 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=32, tmp___0=1, usb_counter=0] [L5936] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={26:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] tmp = ldv_zalloc(32UL) [L5937] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=1, usb_counter=0] [L5938] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] tmp___0 = ldv_zalloc(1560UL) [L5939] ldvarg3 = (struct usb_interface *)tmp___0 [L5940] CALL ldv_initialize() [L6341] CALL ldv_set_init(LDV_SKBS) [L6193] set = set_impl [L6194] last_index = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set={24:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6341] RET ldv_set_init(LDV_SKBS) [L5940] RET ldv_initialize() [L5941] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5942] FCALL memset((void *)(& ldvarg2), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, memset((void *)(& ldvarg2), 0, 4UL)={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5943] ldv_state_variable_1 = 0 [L5944] ref_cnt = 0 [L5945] ldv_state_variable_0 = 1 [L5946] ldv_state_variable_2 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: [L6028] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L6029] COND TRUE ldv_state_variable_0 == 1 [L6030] CALL, EXPR gl620a_driver_init() [L5879] int tmp ; [L5881] CALL, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L6167] ldv_func_ret_type ldv_func_res ; [L6168] int tmp ; [L6170] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6436] return __VERIFIER_nondet_int(); [L6170] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6170] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6171] ldv_func_res = tmp [L6172] ldv_state_variable_1 = 1 [L6173] usb_counter = 0 [L6174] CALL ldv_usb_driver_1() [L5916] void *tmp ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=1, usb_counter=0] [L5918] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] tmp = ldv_zalloc(1560UL) [L5919] gl620a_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L6174] RET ldv_usb_driver_1() [L6175] return (ldv_func_res); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, ldv_func_arg1={23:0}, ldv_func_arg1={23:0}, ldv_func_arg2={8388645:8388644}, ldv_func_arg2={8388645:8388644}, ldv_func_arg3={20:0}, ldv_func_arg3={20:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L5881] RET, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5881] tmp = ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5882] return (tmp); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L6030] RET, EXPR gl620a_driver_init() [L6030] ldv_retval_4 = gl620a_driver_init() [L6031] COND TRUE ldv_retval_4 == 0 [L6032] ldv_state_variable_0 = 3 [L6033] ldv_state_variable_2 = 1 [L6034] CALL ldv_initialize_driver_info_2() [L5904] void *tmp ; [L5905] void *tmp___0 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] CALL, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1472, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1472, tmp___0=1, usb_counter=0] [L5907] RET, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(1472UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] tmp = ldv_zalloc(1472UL) [L5908] genelink_info_group0 = (struct usbnet *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=232, tmp___0=1, usb_counter=0] [L5909] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] tmp___0 = ldv_zalloc(232UL) [L5910] genelink_info_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L6034] RET ldv_initialize_driver_info_2() [L6037] COND FALSE !(ldv_retval_4 != 0) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: [L6052] case 2: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, usb_counter=0] [L6053] COND TRUE ldv_state_variable_2 != 0 [L6054] tmp___4 = __VERIFIER_nondet_int() [L6056] case 0: [L6068] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=1, usb_counter=0] [L6069] COND TRUE ldv_state_variable_2 == 1 [L6070] CALL genelink_bind(genelink_info_group0, ldvarg3) [L5848] unsigned int tmp ; [L5849] unsigned int tmp___0 ; [L5851] dev->hard_mtu = 48580U [L5852] EXPR dev->net [L5852] EXPR dev->net [L5852] EXPR (dev->net)->hard_header_len [L5852] (dev->net)->hard_header_len = (unsigned int )(dev->net)->hard_header_len + 4U [L5853] EXPR dev->udev [L5853] EXPR dev->driver_info [L5853] EXPR (dev->driver_info)->in VAL [(dev->driver_info)->in=8388624, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, dev={0:0}, dev={0:0}, dev->driver_info={8388628:-3}, dev->udev={8388635:8388622}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, intf={0:0}, intf={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5853] CALL __create_pipe(dev->udev, (unsigned int )(dev->driver_info)->in) VAL [\old(endpoint)=8388624, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, dev={8388635:8388622}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5689] EXPR dev->devnum VAL [\old(endpoint)=8388624, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, dev={8388635:8388622}, dev={8388635:8388622}, dev->devnum=8388608, endpoint=8388624, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5689] dev->devnum << 8 VAL [\old(endpoint)=8388624, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={8388645:8388644}, dev={8388635:8388622}, dev={8388635:8388622}, dev->devnum=8388608, endpoint=8388624, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] - UnprovableResult [Line: 6213]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6213]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6217]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6217]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5818]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5818]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5818]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5818]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5689]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5959]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5959]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5969]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5969]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5975]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5975]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6073]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6073]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6095]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6095]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 280 locations, 20 error locations. Started 1 CEGAR loops. OverallTime: 19.4s, OverallIterations: 7, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 13.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2124 SdHoareTripleChecker+Valid, 12.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2027 mSDsluCounter, 6433 SdHoareTripleChecker+Invalid, 12.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4343 mSDsCounter, 688 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1737 IncrementalHoareTripleChecker+Invalid, 2425 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 688 mSolverCounterUnsat, 2090 mSDtfsCounter, 1737 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 322 GetRequests, 279 SyntacticMatches, 2 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1007occurred in iteration=6, InterpolantAutomatonStates: 40, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 6 MinimizatonAttempts, 908 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.0s SatisfiabilityAnalysisTime, 2.7s InterpolantComputationTime, 565 NumberOfCodeBlocks, 565 NumberOfCodeBlocksAsserted, 9 NumberOfCheckSat, 550 ConstructedInterpolants, 0 QuantifiedInterpolants, 1109 SizeOfPredicates, 2 NumberOfNonLiveVariables, 2136 ConjunctsInSsa, 19 ConjunctsInUnsatCore, 9 InterpolantComputations, 5 PerfectInterpolantSequences, 312/330 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-16 13:12:48,905 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...