/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--ath--ath6kl--ath6kl_usb.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 13:13:32,272 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 13:13:32,276 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 13:13:32,325 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 13:13:32,326 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 13:13:32,327 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 13:13:32,329 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 13:13:32,331 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 13:13:32,333 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 13:13:32,335 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 13:13:32,336 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 13:13:32,337 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 13:13:32,338 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 13:13:32,339 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 13:13:32,340 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 13:13:32,341 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 13:13:32,342 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 13:13:32,343 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 13:13:32,354 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 13:13:32,356 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 13:13:32,358 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 13:13:32,359 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 13:13:32,360 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 13:13:32,361 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 13:13:32,366 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 13:13:32,366 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 13:13:32,366 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 13:13:32,368 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 13:13:32,368 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 13:13:32,369 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 13:13:32,369 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 13:13:32,370 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 13:13:32,371 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 13:13:32,372 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 13:13:32,376 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 13:13:32,376 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 13:13:32,377 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 13:13:32,377 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 13:13:32,378 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 13:13:32,379 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 13:13:32,380 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 13:13:32,381 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 13:13:32,409 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 13:13:32,409 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 13:13:32,410 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 13:13:32,410 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 13:13:32,411 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 13:13:32,411 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 13:13:32,412 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 13:13:32,412 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 13:13:32,412 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 13:13:32,412 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 13:13:32,413 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 13:13:32,413 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 13:13:32,413 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 13:13:32,413 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 13:13:32,413 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 13:13:32,414 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 13:13:32,414 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 13:13:32,414 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 13:13:32,414 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 13:13:32,414 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 13:13:32,415 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 13:13:32,415 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 13:13:32,415 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 13:13:32,415 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 13:13:32,415 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 13:13:32,416 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 13:13:32,416 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:13:32,416 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 13:13:32,416 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 13:13:32,417 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 13:13:32,417 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 13:13:32,417 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 13:13:32,417 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 13:13:32,417 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 13:13:32,778 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 13:13:32,807 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 13:13:32,811 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 13:13:32,812 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 13:13:32,813 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 13:13:32,814 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--ath--ath6kl--ath6kl_usb.ko-entry_point.cil.out.i [2022-10-16 13:13:32,905 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dab2eb39f/5698df392545475ba2e8268d9414ca66/FLAGaed013768 [2022-10-16 13:13:33,868 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 13:13:33,869 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--ath--ath6kl--ath6kl_usb.ko-entry_point.cil.out.i [2022-10-16 13:13:33,921 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dab2eb39f/5698df392545475ba2e8268d9414ca66/FLAGaed013768 [2022-10-16 13:13:34,373 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dab2eb39f/5698df392545475ba2e8268d9414ca66 [2022-10-16 13:13:34,380 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 13:13:34,386 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 13:13:34,388 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 13:13:34,388 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 13:13:34,392 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 13:13:34,393 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:13:34" (1/1) ... [2022-10-16 13:13:34,394 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5e300e25 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:34, skipping insertion in model container [2022-10-16 13:13:34,394 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:13:34" (1/1) ... [2022-10-16 13:13:34,403 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 13:13:34,554 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 13:13:35,487 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--ath--ath6kl--ath6kl_usb.ko-entry_point.cil.out.i[190557,190570] [2022-10-16 13:13:36,166 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:13:36,191 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 13:13:36,531 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--ath--ath6kl--ath6kl_usb.ko-entry_point.cil.out.i[190557,190570] [2022-10-16 13:13:36,743 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:13:36,866 INFO L208 MainTranslator]: Completed translation [2022-10-16 13:13:36,868 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36 WrapperNode [2022-10-16 13:13:36,868 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 13:13:36,870 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 13:13:36,873 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 13:13:36,873 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 13:13:36,881 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:36,978 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:37,083 INFO L138 Inliner]: procedures = 175, calls = 709, calls flagged for inlining = 71, calls inlined = 62, statements flattened = 1902 [2022-10-16 13:13:37,084 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 13:13:37,085 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 13:13:37,085 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 13:13:37,085 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 13:13:37,096 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:37,096 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:37,112 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:37,113 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:37,213 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:37,232 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:37,252 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:37,264 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:37,287 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 13:13:37,289 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 13:13:37,289 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 13:13:37,289 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 13:13:37,290 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (1/1) ... [2022-10-16 13:13:37,298 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:13:37,321 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:13:37,337 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 13:13:37,356 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 13:13:37,410 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_cleanup_scatter [2022-10-16 13:13:37,410 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_cleanup_scatter [2022-10-16 13:13:37,410 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2022-10-16 13:13:37,411 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2022-10-16 13:13:37,411 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_submit_ctrl_out [2022-10-16 13:13:37,411 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_submit_ctrl_out [2022-10-16 13:13:37,411 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-16 13:13:37,411 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2022-10-16 13:13:37,415 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2022-10-16 13:13:37,415 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2022-10-16 13:13:37,416 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2022-10-16 13:13:37,416 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-16 13:13:37,416 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-16 13:13:37,416 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-16 13:13:37,416 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-16 13:13:37,416 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 13:13:37,417 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_dev [2022-10-16 13:13:37,417 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_dev [2022-10-16 13:13:37,417 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_diag_write32 [2022-10-16 13:13:37,417 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_diag_write32 [2022-10-16 13:13:37,417 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_destroy [2022-10-16 13:13:37,417 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_destroy [2022-10-16 13:13:37,417 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2022-10-16 13:13:37,417 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2022-10-16 13:13:37,418 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-10-16 13:13:37,418 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-10-16 13:13:37,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 13:13:37,418 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 13:13:37,418 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_get_default_pipe [2022-10-16 13:13:37,418 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_get_default_pipe [2022-10-16 13:13:37,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-10-16 13:13:37,419 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-10-16 13:13:37,419 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-10-16 13:13:37,419 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-10-16 13:13:37,419 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_power_off [2022-10-16 13:13:37,419 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_power_off [2022-10-16 13:13:37,419 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 13:13:37,419 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_bmi_read [2022-10-16 13:13:37,420 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_bmi_read [2022-10-16 13:13:37,420 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2022-10-16 13:13:37,420 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2022-10-16 13:13:37,420 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 13:13:37,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 13:13:37,421 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_stop [2022-10-16 13:13:37,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_stop [2022-10-16 13:13:37,421 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_get_free_queue_number [2022-10-16 13:13:37,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_get_free_queue_number [2022-10-16 13:13:37,421 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_free_urb_to_pipe [2022-10-16 13:13:37,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_free_urb_to_pipe [2022-10-16 13:13:37,422 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_flush_all [2022-10-16 13:13:37,422 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_flush_all [2022-10-16 13:13:37,422 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2022-10-16 13:13:37,423 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-10-16 13:13:37,423 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-10-16 13:13:37,423 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-16 13:13:37,424 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-16 13:13:37,424 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_ctrl_msg_exchange [2022-10-16 13:13:37,424 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_ctrl_msg_exchange [2022-10-16 13:13:37,425 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 13:13:37,425 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_cleanup_recv_urb [2022-10-16 13:13:37,425 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_cleanup_recv_urb [2022-10-16 13:13:37,426 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-10-16 13:13:37,426 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-10-16 13:13:37,427 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_submit_ctrl_in [2022-10-16 13:13:37,427 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_submit_ctrl_in [2022-10-16 13:13:37,427 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 13:13:37,427 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_power_on [2022-10-16 13:13:37,427 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_power_on [2022-10-16 13:13:37,428 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_priv [2022-10-16 13:13:37,429 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_priv [2022-10-16 13:13:37,429 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 13:13:37,429 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 13:13:37,430 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2022-10-16 13:13:37,430 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2022-10-16 13:13:37,430 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 13:13:37,430 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2022-10-16 13:13:37,431 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2022-10-16 13:13:37,431 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2022-10-16 13:13:37,431 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2022-10-16 13:13:37,431 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_alloc_urb_from_pipe [2022-10-16 13:13:37,431 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_alloc_urb_from_pipe [2022-10-16 13:13:37,432 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-10-16 13:13:37,432 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_remove [2022-10-16 13:13:37,432 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_remove [2022-10-16 13:13:37,432 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2022-10-16 13:13:37,432 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2022-10-16 13:13:37,433 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-10-16 13:13:37,433 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-10-16 13:13:37,433 INFO L130 BoogieDeclarations]: Found specification of procedure usb_anchor_urb [2022-10-16 13:13:37,433 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_anchor_urb [2022-10-16 13:13:37,433 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 13:13:37,434 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 13:13:37,435 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_post_recv_transfers [2022-10-16 13:13:37,435 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_post_recv_transfers [2022-10-16 13:13:37,435 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-10-16 13:13:37,435 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-10-16 13:13:37,436 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2022-10-16 13:13:37,436 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2022-10-16 13:13:37,440 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_map_service_pipe [2022-10-16 13:13:37,440 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_map_service_pipe [2022-10-16 13:13:37,440 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-10-16 13:13:37,440 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-10-16 13:13:37,440 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unanchor_urb [2022-10-16 13:13:37,441 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unanchor_urb [2022-10-16 13:13:37,441 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2022-10-16 13:13:37,441 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2022-10-16 13:13:37,441 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 13:13:37,441 INFO L130 BoogieDeclarations]: Found specification of procedure ath6kl_usb_send [2022-10-16 13:13:37,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ath6kl_usb_send [2022-10-16 13:13:37,442 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-10-16 13:13:37,442 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-10-16 13:13:37,442 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2022-10-16 13:13:37,442 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2022-10-16 13:13:37,442 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-16 13:13:37,442 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-10-16 13:13:37,443 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-10-16 13:13:37,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-10-16 13:13:37,443 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 13:13:37,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 13:13:38,016 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 13:13:38,019 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 13:13:38,167 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-16 13:13:41,598 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 13:13:41,615 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 13:13:41,615 INFO L300 CfgBuilder]: Removed 3 assume(true) statements. [2022-10-16 13:13:41,619 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:13:41 BoogieIcfgContainer [2022-10-16 13:13:41,619 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 13:13:41,621 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 13:13:41,622 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 13:13:41,626 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 13:13:41,626 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 01:13:34" (1/3) ... [2022-10-16 13:13:41,627 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3ef932ee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:13:41, skipping insertion in model container [2022-10-16 13:13:41,627 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:36" (2/3) ... [2022-10-16 13:13:41,627 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3ef932ee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:13:41, skipping insertion in model container [2022-10-16 13:13:41,628 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:13:41" (3/3) ... [2022-10-16 13:13:41,629 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--ath--ath6kl--ath6kl_usb.ko-entry_point.cil.out.i [2022-10-16 13:13:41,653 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 13:13:41,654 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 40 error locations. [2022-10-16 13:13:41,741 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 13:13:41,751 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@357ef0f6, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 13:13:41,751 INFO L358 AbstractCegarLoop]: Starting to check reachability of 40 error locations. [2022-10-16 13:13:41,760 INFO L276 IsEmpty]: Start isEmpty. Operand has 806 states, 558 states have (on average 1.3978494623655915) internal successors, (780), 611 states have internal predecessors, (780), 158 states have call successors, (158), 50 states have call predecessors, (158), 49 states have return successors, (154), 154 states have call predecessors, (154), 154 states have call successors, (154) [2022-10-16 13:13:41,785 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-10-16 13:13:41,785 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:13:41,786 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:13:41,787 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ath6kl_usb_power_onErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ath6kl_usb_power_onErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 37 more)] === [2022-10-16 13:13:41,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:13:41,795 INFO L85 PathProgramCache]: Analyzing trace with hash -631360599, now seen corresponding path program 1 times [2022-10-16 13:13:41,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:13:41,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [40746964] [2022-10-16 13:13:41,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:13:41,810 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:13:42,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:13:42,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:13:42,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:13:42,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:13:42,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:13:42,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:13:42,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:13:42,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:13:42,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:13:42,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:13:42,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:13:42,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:42,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:13:42,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:43,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-10-16 13:13:43,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:43,021 INFO L134 CoverageAnalysis]: Checked inductivity of 224 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 224 trivial. 0 not checked. [2022-10-16 13:13:43,022 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:13:43,022 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [40746964] [2022-10-16 13:13:43,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [40746964] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:13:43,023 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:13:43,023 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:13:43,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1916814460] [2022-10-16 13:13:43,026 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:13:43,031 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:13:43,032 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:13:43,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:13:43,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:13:43,071 INFO L87 Difference]: Start difference. First operand has 806 states, 558 states have (on average 1.3978494623655915) internal successors, (780), 611 states have internal predecessors, (780), 158 states have call successors, (158), 50 states have call predecessors, (158), 49 states have return successors, (154), 154 states have call predecessors, (154), 154 states have call successors, (154) Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (15), 3 states have call predecessors, (15), 1 states have return successors, (13), 1 states have call predecessors, (13), 1 states have call successors, (13) [2022-10-16 13:13:48,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:13:48,219 INFO L93 Difference]: Finished difference Result 2336 states and 3274 transitions. [2022-10-16 13:13:48,223 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:13:48,225 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (15), 3 states have call predecessors, (15), 1 states have return successors, (13), 1 states have call predecessors, (13), 1 states have call successors, (13) Word has length 97 [2022-10-16 13:13:48,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:13:48,283 INFO L225 Difference]: With dead ends: 2336 [2022-10-16 13:13:48,284 INFO L226 Difference]: Without dead ends: 1500 [2022-10-16 13:13:48,299 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:13:48,304 INFO L413 NwaCegarLoop]: 1124 mSDtfsCounter, 1491 mSDsluCounter, 1633 mSDsCounter, 0 mSdLazyCounter, 1317 mSolverCounterSat, 688 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1565 SdHoareTripleChecker+Valid, 2757 SdHoareTripleChecker+Invalid, 2005 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 688 IncrementalHoareTripleChecker+Valid, 1317 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.7s IncrementalHoareTripleChecker+Time [2022-10-16 13:13:48,305 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1565 Valid, 2757 Invalid, 2005 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [688 Valid, 1317 Invalid, 0 Unknown, 0 Unchecked, 4.7s Time] [2022-10-16 13:13:48,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1500 states. [2022-10-16 13:13:48,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1500 to 1222. [2022-10-16 13:13:48,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1222 states, 873 states have (on average 1.3757159221076747) internal successors, (1201), 927 states have internal predecessors, (1201), 228 states have call successors, (228), 81 states have call predecessors, (228), 81 states have return successors, (228), 228 states have call predecessors, (228), 228 states have call successors, (228) [2022-10-16 13:13:48,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1222 states to 1222 states and 1657 transitions. [2022-10-16 13:13:48,530 INFO L78 Accepts]: Start accepts. Automaton has 1222 states and 1657 transitions. Word has length 97 [2022-10-16 13:13:48,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:13:48,531 INFO L495 AbstractCegarLoop]: Abstraction has 1222 states and 1657 transitions. [2022-10-16 13:13:48,532 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (15), 3 states have call predecessors, (15), 1 states have return successors, (13), 1 states have call predecessors, (13), 1 states have call successors, (13) [2022-10-16 13:13:48,532 INFO L276 IsEmpty]: Start isEmpty. Operand 1222 states and 1657 transitions. [2022-10-16 13:13:48,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-10-16 13:13:48,545 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:13:48,545 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:13:48,546 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 13:13:48,546 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ath6kl_usb_flush_allErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ath6kl_usb_power_onErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ath6kl_usb_power_onErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 37 more)] === [2022-10-16 13:13:48,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:13:48,547 INFO L85 PathProgramCache]: Analyzing trace with hash 1386314041, now seen corresponding path program 1 times [2022-10-16 13:13:48,547 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:13:48,547 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1035127197] [2022-10-16 13:13:48,548 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:13:48,548 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:13:48,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:48,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:13:48,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:48,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:13:48,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:48,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:13:48,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:13:49,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:13:49,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:13:49,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:13:49,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:13:49,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:13:49,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:13:49,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:13:49,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:13:49,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-10-16 13:13:49,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-10-16 13:13:49,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:49,207 INFO L134 CoverageAnalysis]: Checked inductivity of 224 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 224 trivial. 0 not checked. [2022-10-16 13:13:49,207 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:13:49,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1035127197] [2022-10-16 13:13:49,208 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1035127197] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:13:49,208 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:13:49,208 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:13:49,209 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1230965260] [2022-10-16 13:13:49,209 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:13:49,211 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:13:49,211 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:13:49,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:13:49,212 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:13:49,212 INFO L87 Difference]: Start difference. First operand 1222 states and 1657 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (15), 4 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-10-16 13:13:50,960 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.74s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:13:55,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:13:55,053 INFO L93 Difference]: Finished difference Result 3294 states and 4515 transitions. [2022-10-16 13:13:55,053 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:13:55,054 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (15), 4 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 100 [2022-10-16 13:13:55,054 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:13:55,072 INFO L225 Difference]: With dead ends: 3294 [2022-10-16 13:13:55,072 INFO L226 Difference]: Without dead ends: 2102 [2022-10-16 13:13:55,078 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:13:55,080 INFO L413 NwaCegarLoop]: 1538 mSDtfsCounter, 1266 mSDsluCounter, 2134 mSDsCounter, 0 mSdLazyCounter, 1389 mSolverCounterSat, 615 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1330 SdHoareTripleChecker+Valid, 3672 SdHoareTripleChecker+Invalid, 2004 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 615 IncrementalHoareTripleChecker+Valid, 1389 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.5s IncrementalHoareTripleChecker+Time [2022-10-16 13:13:55,081 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1330 Valid, 3672 Invalid, 2004 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [615 Valid, 1389 Invalid, 0 Unknown, 0 Unchecked, 5.5s Time] [2022-10-16 13:13:55,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2102 states. [2022-10-16 13:13:55,195 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2102 to 1715. [2022-10-16 13:13:55,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1715 states, 1235 states have (on average 1.3789473684210527) internal successors, (1703), 1293 states have internal predecessors, (1703), 317 states have call successors, (317), 123 states have call predecessors, (317), 123 states have return successors, (317), 317 states have call predecessors, (317), 317 states have call successors, (317) [2022-10-16 13:13:55,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1715 states to 1715 states and 2337 transitions. [2022-10-16 13:13:55,213 INFO L78 Accepts]: Start accepts. Automaton has 1715 states and 2337 transitions. Word has length 100 [2022-10-16 13:13:55,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:13:55,214 INFO L495 AbstractCegarLoop]: Abstraction has 1715 states and 2337 transitions. [2022-10-16 13:13:55,215 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (15), 4 states have call predecessors, (15), 1 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-10-16 13:13:55,215 INFO L276 IsEmpty]: Start isEmpty. Operand 1715 states and 2337 transitions. [2022-10-16 13:13:55,217 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2022-10-16 13:13:55,217 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:13:55,218 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:13:55,218 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 13:13:55,218 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ath6kl_usb_flush_allErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ath6kl_usb_power_onErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ath6kl_usb_power_onErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 37 more)] === [2022-10-16 13:13:55,219 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:13:55,219 INFO L85 PathProgramCache]: Analyzing trace with hash 996175650, now seen corresponding path program 1 times [2022-10-16 13:13:55,219 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:13:55,219 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [467533768] [2022-10-16 13:13:55,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:13:55,220 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:13:55,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:13:55,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:13:55,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:13:55,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:13:55,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:13:55,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:13:55,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:13:55,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:13:55,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:13:55,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:13:55,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:13:55,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:13:55,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-10-16 13:13:55,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-10-16 13:13:55,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2022-10-16 13:13:55,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:13:55,637 INFO L134 CoverageAnalysis]: Checked inductivity of 270 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 268 trivial. 0 not checked. [2022-10-16 13:13:55,638 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:13:55,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [467533768] [2022-10-16 13:13:55,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [467533768] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:13:55,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:13:55,640 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:13:55,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1254418401] [2022-10-16 13:13:55,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:13:55,646 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:13:55,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:13:55,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:13:55,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:13:55,648 INFO L87 Difference]: Start difference. First operand 1715 states and 2337 transitions. Second operand has 5 states, 5 states have (on average 10.6) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (16), 4 states have call predecessors, (16), 1 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:13:56,690 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:00,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:00,166 INFO L93 Difference]: Finished difference Result 3739 states and 5177 transitions. [2022-10-16 13:14:00,166 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:14:00,167 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.6) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (16), 4 states have call predecessors, (16), 1 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 120 [2022-10-16 13:14:00,168 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:00,185 INFO L225 Difference]: With dead ends: 3739 [2022-10-16 13:14:00,185 INFO L226 Difference]: Without dead ends: 2067 [2022-10-16 13:14:00,195 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:14:00,196 INFO L413 NwaCegarLoop]: 999 mSDtfsCounter, 557 mSDsluCounter, 1679 mSDsCounter, 0 mSdLazyCounter, 1042 mSolverCounterSat, 409 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 567 SdHoareTripleChecker+Valid, 2678 SdHoareTripleChecker+Invalid, 1451 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 409 IncrementalHoareTripleChecker+Valid, 1042 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.3s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:00,197 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [567 Valid, 2678 Invalid, 1451 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [409 Valid, 1042 Invalid, 0 Unknown, 0 Unchecked, 4.3s Time] [2022-10-16 13:14:00,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2067 states. [2022-10-16 13:14:00,318 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2067 to 1708. [2022-10-16 13:14:00,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1708 states, 1228 states have (on average 1.3786644951140066) internal successors, (1693), 1287 states have internal predecessors, (1693), 317 states have call successors, (317), 123 states have call predecessors, (317), 123 states have return successors, (317), 316 states have call predecessors, (317), 317 states have call successors, (317) [2022-10-16 13:14:00,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1708 states to 1708 states and 2327 transitions. [2022-10-16 13:14:00,344 INFO L78 Accepts]: Start accepts. Automaton has 1708 states and 2327 transitions. Word has length 120 [2022-10-16 13:14:00,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:00,345 INFO L495 AbstractCegarLoop]: Abstraction has 1708 states and 2327 transitions. [2022-10-16 13:14:00,346 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.6) internal successors, (53), 3 states have internal predecessors, (53), 2 states have call successors, (16), 4 states have call predecessors, (16), 1 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:14:00,346 INFO L276 IsEmpty]: Start isEmpty. Operand 1708 states and 2327 transitions. [2022-10-16 13:14:00,350 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2022-10-16 13:14:00,350 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:00,351 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:00,351 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 13:14:00,351 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ath6kl_usb_power_onErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ath6kl_usb_power_onErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 37 more)] === [2022-10-16 13:14:00,352 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:00,352 INFO L85 PathProgramCache]: Analyzing trace with hash 1724720929, now seen corresponding path program 1 times [2022-10-16 13:14:00,352 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:00,352 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1191510257] [2022-10-16 13:14:00,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:00,353 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:00,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:00,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:14:00,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:14:00,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:14:00,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:14:00,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:14:00,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:14:00,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:14:00,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:14:00,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:14:00,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:14:00,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:14:00,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-10-16 13:14:00,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-10-16 13:14:00,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:00,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-10-16 13:14:00,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:01,014 INFO L134 CoverageAnalysis]: Checked inductivity of 319 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 316 trivial. 0 not checked. [2022-10-16 13:14:01,014 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:01,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1191510257] [2022-10-16 13:14:01,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1191510257] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:01,016 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:01,016 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:14:01,016 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568063171] [2022-10-16 13:14:01,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:01,018 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:14:01,018 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:01,019 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:14:01,021 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:14:01,021 INFO L87 Difference]: Start difference. First operand 1708 states and 2327 transitions. Second operand has 5 states, 5 states have (on average 10.6) internal successors, (53), 3 states have internal predecessors, (53), 3 states have call successors, (17), 3 states have call predecessors, (17), 1 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:14:02,435 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:07,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:07,590 INFO L93 Difference]: Finished difference Result 5028 states and 6931 transitions. [2022-10-16 13:14:07,591 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:14:07,591 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.6) internal successors, (53), 3 states have internal predecessors, (53), 3 states have call successors, (17), 3 states have call predecessors, (17), 1 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 124 [2022-10-16 13:14:07,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:07,621 INFO L225 Difference]: With dead ends: 5028 [2022-10-16 13:14:07,622 INFO L226 Difference]: Without dead ends: 3365 [2022-10-16 13:14:07,635 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:07,639 INFO L413 NwaCegarLoop]: 1248 mSDtfsCounter, 1729 mSDsluCounter, 1724 mSDsCounter, 0 mSdLazyCounter, 1568 mSolverCounterSat, 846 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1806 SdHoareTripleChecker+Valid, 2972 SdHoareTripleChecker+Invalid, 2414 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 846 IncrementalHoareTripleChecker+Valid, 1568 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:07,641 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1806 Valid, 2972 Invalid, 2414 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [846 Valid, 1568 Invalid, 0 Unknown, 0 Unchecked, 6.1s Time] [2022-10-16 13:14:07,649 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3365 states. [2022-10-16 13:14:07,822 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3365 to 2706. [2022-10-16 13:14:07,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2706 states, 1982 states have (on average 1.3592330978809284) internal successors, (2694), 2054 states have internal predecessors, (2694), 476 states have call successors, (476), 208 states have call predecessors, (476), 208 states have return successors, (476), 474 states have call predecessors, (476), 476 states have call successors, (476) [2022-10-16 13:14:07,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2706 states to 2706 states and 3646 transitions. [2022-10-16 13:14:07,855 INFO L78 Accepts]: Start accepts. Automaton has 2706 states and 3646 transitions. Word has length 124 [2022-10-16 13:14:07,857 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:07,857 INFO L495 AbstractCegarLoop]: Abstraction has 2706 states and 3646 transitions. [2022-10-16 13:14:07,857 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.6) internal successors, (53), 3 states have internal predecessors, (53), 3 states have call successors, (17), 3 states have call predecessors, (17), 1 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:14:07,858 INFO L276 IsEmpty]: Start isEmpty. Operand 2706 states and 3646 transitions. [2022-10-16 13:14:07,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2022-10-16 13:14:07,860 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:07,860 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:07,860 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 13:14:07,860 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ath6kl_usb_flush_allErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ath6kl_usb_power_onErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ath6kl_usb_power_onErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 37 more)] === [2022-10-16 13:14:07,861 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:07,861 INFO L85 PathProgramCache]: Analyzing trace with hash -1239403839, now seen corresponding path program 1 times [2022-10-16 13:14:07,861 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:07,861 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710508786] [2022-10-16 13:14:07,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:07,863 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:07,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:08,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:14:08,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:14:08,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:14:08,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:14:08,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:14:08,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:14:08,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:14:08,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:14:08,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:14:08,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:14:08,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:14:08,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-10-16 13:14:08,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-10-16 13:14:08,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-10-16 13:14:08,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-10-16 13:14:08,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:08,556 INFO L134 CoverageAnalysis]: Checked inductivity of 318 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 316 trivial. 0 not checked. [2022-10-16 13:14:08,557 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:08,557 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710508786] [2022-10-16 13:14:08,557 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1710508786] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:08,557 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:08,558 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:14:08,558 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1645782253] [2022-10-16 13:14:08,558 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:08,561 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:14:08,562 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:08,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:14:08,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:14:08,563 INFO L87 Difference]: Start difference. First operand 2706 states and 3646 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (17), 4 states have call predecessors, (17), 1 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-10-16 13:14:10,586 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:12,602 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:18,372 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:19,073 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:19,074 INFO L93 Difference]: Finished difference Result 7388 states and 10071 transitions. [2022-10-16 13:14:19,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:14:19,075 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (17), 4 states have call predecessors, (17), 1 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 127 [2022-10-16 13:14:19,076 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:19,121 INFO L225 Difference]: With dead ends: 7388 [2022-10-16 13:14:19,121 INFO L226 Difference]: Without dead ends: 4727 [2022-10-16 13:14:19,135 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:19,140 INFO L413 NwaCegarLoop]: 1192 mSDtfsCounter, 1803 mSDsluCounter, 1600 mSDsCounter, 0 mSdLazyCounter, 1305 mSolverCounterSat, 814 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1884 SdHoareTripleChecker+Valid, 2792 SdHoareTripleChecker+Invalid, 2122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 814 IncrementalHoareTripleChecker+Valid, 1305 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:19,148 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1884 Valid, 2792 Invalid, 2122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [814 Valid, 1305 Invalid, 3 Unknown, 0 Unchecked, 10.0s Time] [2022-10-16 13:14:19,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4727 states. [2022-10-16 13:14:19,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4727 to 3766. [2022-10-16 13:14:19,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3766 states, 2772 states have (on average 1.352092352092352) internal successors, (3748), 2855 states have internal predecessors, (3748), 647 states have call successors, (647), 307 states have call predecessors, (647), 307 states have return successors, (647), 645 states have call predecessors, (647), 647 states have call successors, (647) [2022-10-16 13:14:19,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3766 states to 3766 states and 5042 transitions. [2022-10-16 13:14:19,427 INFO L78 Accepts]: Start accepts. Automaton has 3766 states and 5042 transitions. Word has length 127 [2022-10-16 13:14:19,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:19,429 INFO L495 AbstractCegarLoop]: Abstraction has 3766 states and 5042 transitions. [2022-10-16 13:14:19,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (17), 4 states have call predecessors, (17), 1 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-10-16 13:14:19,429 INFO L276 IsEmpty]: Start isEmpty. Operand 3766 states and 5042 transitions. [2022-10-16 13:14:19,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2022-10-16 13:14:19,435 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:19,436 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:19,436 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-16 13:14:19,436 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ath6kl_usb_power_onErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ath6kl_usb_power_onErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 37 more)] === [2022-10-16 13:14:19,437 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:19,437 INFO L85 PathProgramCache]: Analyzing trace with hash -1882935674, now seen corresponding path program 1 times [2022-10-16 13:14:19,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:19,438 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2060270008] [2022-10-16 13:14:19,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:19,439 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:19,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:19,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:14:20,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:14:20,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:14:20,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:14:20,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:14:20,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:14:20,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:14:20,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:14:20,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:14:20,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:14:20,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:14:20,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-10-16 13:14:20,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-10-16 13:14:20,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-10-16 13:14:20,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,351 INFO L134 CoverageAnalysis]: Checked inductivity of 319 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 316 trivial. 0 not checked. [2022-10-16 13:14:20,352 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:20,352 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2060270008] [2022-10-16 13:14:20,352 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2060270008] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:14:20,352 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2107204055] [2022-10-16 13:14:20,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:20,353 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:20,353 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:20,360 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:14:20,382 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-16 13:14:20,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:20,832 INFO L263 TraceCheckSpWp]: Trace formula consists of 1491 conjuncts, 15 conjunts are in the unsatisfiable core [2022-10-16 13:14:20,849 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:14:20,941 INFO L134 CoverageAnalysis]: Checked inductivity of 319 backedges. 51 proven. 0 refuted. 0 times theorem prover too weak. 268 trivial. 0 not checked. [2022-10-16 13:14:20,941 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:14:20,942 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2107204055] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:20,942 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:14:20,942 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 8 [2022-10-16 13:14:20,942 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [987302467] [2022-10-16 13:14:20,942 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:20,943 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:14:20,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:20,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:14:20,944 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:20,944 INFO L87 Difference]: Start difference. First operand 3766 states and 5042 transitions. Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:14:21,953 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:21,954 INFO L93 Difference]: Finished difference Result 7489 states and 10028 transitions. [2022-10-16 13:14:21,954 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-16 13:14:21,955 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 130 [2022-10-16 13:14:21,955 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:21,981 INFO L225 Difference]: With dead ends: 7489 [2022-10-16 13:14:21,981 INFO L226 Difference]: Without dead ends: 3766 [2022-10-16 13:14:21,996 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 156 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-10-16 13:14:21,997 INFO L413 NwaCegarLoop]: 1058 mSDtfsCounter, 1 mSDsluCounter, 2110 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 3168 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:21,997 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 3168 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-10-16 13:14:22,003 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3766 states. [2022-10-16 13:14:22,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3766 to 3766. [2022-10-16 13:14:22,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3766 states, 2772 states have (on average 1.3517316017316017) internal successors, (3747), 2855 states have internal predecessors, (3747), 647 states have call successors, (647), 307 states have call predecessors, (647), 307 states have return successors, (647), 645 states have call predecessors, (647), 647 states have call successors, (647) [2022-10-16 13:14:22,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3766 states to 3766 states and 5041 transitions. [2022-10-16 13:14:22,229 INFO L78 Accepts]: Start accepts. Automaton has 3766 states and 5041 transitions. Word has length 130 [2022-10-16 13:14:22,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:22,230 INFO L495 AbstractCegarLoop]: Abstraction has 3766 states and 5041 transitions. [2022-10-16 13:14:22,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:14:22,230 INFO L276 IsEmpty]: Start isEmpty. Operand 3766 states and 5041 transitions. [2022-10-16 13:14:22,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2022-10-16 13:14:22,232 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:22,233 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:22,276 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-16 13:14:22,446 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-10-16 13:14:22,446 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ath6kl_usb_power_onErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ath6kl_usb_power_onErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 37 more)] === [2022-10-16 13:14:22,448 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:22,448 INFO L85 PathProgramCache]: Analyzing trace with hash -1608176060, now seen corresponding path program 1 times [2022-10-16 13:14:22,448 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:22,448 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2135034044] [2022-10-16 13:14:22,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:22,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:22,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:22,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:22,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:22,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:14:22,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:22,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:14:22,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:14:23,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:14:23,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:14:23,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:14:23,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:14:23,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:14:23,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:14:23,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:14:23,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:14:23,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-10-16 13:14:23,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-10-16 13:14:23,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-10-16 13:14:23,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,300 INFO L134 CoverageAnalysis]: Checked inductivity of 319 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 316 trivial. 0 not checked. [2022-10-16 13:14:23,300 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:23,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2135034044] [2022-10-16 13:14:23,301 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2135034044] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:14:23,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1905801600] [2022-10-16 13:14:23,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:23,301 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:23,302 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:23,303 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:14:23,320 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-16 13:14:23,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,924 INFO L263 TraceCheckSpWp]: Trace formula consists of 1492 conjuncts, 5 conjunts are in the unsatisfiable core [2022-10-16 13:14:23,941 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:14:24,046 INFO L134 CoverageAnalysis]: Checked inductivity of 319 backedges. 92 proven. 0 refuted. 0 times theorem prover too weak. 227 trivial. 0 not checked. [2022-10-16 13:14:24,047 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:14:24,047 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1905801600] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:24,047 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:14:24,047 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 7 [2022-10-16 13:14:24,048 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [686539177] [2022-10-16 13:14:24,048 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:24,048 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:14:24,048 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:24,049 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:14:24,049 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:14:24,049 INFO L87 Difference]: Start difference. First operand 3766 states and 5041 transitions. Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:14:24,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:24,286 INFO L93 Difference]: Finished difference Result 7518 states and 10079 transitions. [2022-10-16 13:14:24,287 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-16 13:14:24,287 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 130 [2022-10-16 13:14:24,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:24,315 INFO L225 Difference]: With dead ends: 7518 [2022-10-16 13:14:24,315 INFO L226 Difference]: Without dead ends: 3774 [2022-10-16 13:14:24,331 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 156 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:24,331 INFO L413 NwaCegarLoop]: 1056 mSDtfsCounter, 2 mSDsluCounter, 2106 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3162 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:24,332 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 3162 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 13:14:24,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3774 states. [2022-10-16 13:14:24,560 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3774 to 3774. [2022-10-16 13:14:24,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3774 states, 2780 states have (on average 1.3507194244604317) internal successors, (3755), 2863 states have internal predecessors, (3755), 647 states have call successors, (647), 307 states have call predecessors, (647), 307 states have return successors, (647), 645 states have call predecessors, (647), 647 states have call successors, (647) [2022-10-16 13:14:24,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3774 states to 3774 states and 5049 transitions. [2022-10-16 13:14:24,590 INFO L78 Accepts]: Start accepts. Automaton has 3774 states and 5049 transitions. Word has length 130 [2022-10-16 13:14:24,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:24,591 INFO L495 AbstractCegarLoop]: Abstraction has 3774 states and 5049 transitions. [2022-10-16 13:14:24,591 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:14:24,591 INFO L276 IsEmpty]: Start isEmpty. Operand 3774 states and 5049 transitions. [2022-10-16 13:14:24,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2022-10-16 13:14:24,594 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:24,594 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:24,643 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-16 13:14:24,808 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-10-16 13:14:24,808 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ath6kl_usb_power_onErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ath6kl_usb_power_onErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 37 more)] === [2022-10-16 13:14:24,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:24,809 INFO L85 PathProgramCache]: Analyzing trace with hash 1828490438, now seen corresponding path program 1 times [2022-10-16 13:14:24,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:24,810 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [733342904] [2022-10-16 13:14:24,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:24,810 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:24,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:25,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:14:25,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:14:25,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:14:25,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:14:25,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-10-16 13:14:25,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:14:25,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:14:25,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-10-16 13:14:25,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:14:25,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:14:25,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:14:25,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-10-16 13:14:25,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:14:25,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2022-10-16 13:14:25,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:25,893 INFO L134 CoverageAnalysis]: Checked inductivity of 324 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 317 trivial. 0 not checked. [2022-10-16 13:14:25,894 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:25,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [733342904] [2022-10-16 13:14:25,894 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [733342904] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:14:25,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2093472418] [2022-10-16 13:14:25,894 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:25,895 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:25,895 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:25,896 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:14:25,904 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-10-16 13:14:26,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,542 INFO L263 TraceCheckSpWp]: Trace formula consists of 1522 conjuncts, 11 conjunts are in the unsatisfiable core [2022-10-16 13:14:26,549 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:14:26,635 INFO L134 CoverageAnalysis]: Checked inductivity of 324 backedges. 95 proven. 1 refuted. 0 times theorem prover too weak. 228 trivial. 0 not checked. [2022-10-16 13:14:26,636 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:14:26,840 INFO L134 CoverageAnalysis]: Checked inductivity of 324 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 317 trivial. 0 not checked. [2022-10-16 13:14:26,840 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2093472418] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:14:26,840 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:14:26,841 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 12 [2022-10-16 13:14:26,841 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1198327855] [2022-10-16 13:14:26,841 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:14:26,842 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-10-16 13:14:26,842 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:26,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-10-16 13:14:26,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:14:26,843 INFO L87 Difference]: Start difference. First operand 3774 states and 5049 transitions. Second operand has 12 states, 12 states have (on average 6.5) internal successors, (78), 10 states have internal predecessors, (78), 2 states have call successors, (36), 4 states have call predecessors, (36), 5 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2022-10-16 13:14:28,859 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:34,000 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:34,000 INFO L93 Difference]: Finished difference Result 8428 states and 11475 transitions. [2022-10-16 13:14:34,001 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-16 13:14:34,001 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 6.5) internal successors, (78), 10 states have internal predecessors, (78), 2 states have call successors, (36), 4 states have call predecessors, (36), 5 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 132 [2022-10-16 13:14:34,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:34,035 INFO L225 Difference]: With dead ends: 8428 [2022-10-16 13:14:34,036 INFO L226 Difference]: Without dead ends: 4674 [2022-10-16 13:14:34,052 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 305 GetRequests, 286 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=107, Invalid=273, Unknown=0, NotChecked=0, Total=380 [2022-10-16 13:14:34,053 INFO L413 NwaCegarLoop]: 1027 mSDtfsCounter, 541 mSDsluCounter, 3168 mSDsCounter, 0 mSdLazyCounter, 1943 mSolverCounterSat, 420 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 551 SdHoareTripleChecker+Valid, 4195 SdHoareTripleChecker+Invalid, 2363 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 420 IncrementalHoareTripleChecker+Valid, 1943 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.4s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:34,053 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [551 Valid, 4195 Invalid, 2363 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [420 Valid, 1943 Invalid, 0 Unknown, 0 Unchecked, 6.4s Time] [2022-10-16 13:14:34,060 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4674 states. [2022-10-16 13:14:34,330 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4674 to 3784. [2022-10-16 13:14:34,338 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3784 states, 2790 states have (on average 1.3494623655913978) internal successors, (3765), 2873 states have internal predecessors, (3765), 647 states have call successors, (647), 307 states have call predecessors, (647), 307 states have return successors, (647), 645 states have call predecessors, (647), 647 states have call successors, (647) [2022-10-16 13:14:34,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3784 states to 3784 states and 5059 transitions. [2022-10-16 13:14:34,357 INFO L78 Accepts]: Start accepts. Automaton has 3784 states and 5059 transitions. Word has length 132 [2022-10-16 13:14:34,357 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:34,357 INFO L495 AbstractCegarLoop]: Abstraction has 3784 states and 5059 transitions. [2022-10-16 13:14:34,358 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 6.5) internal successors, (78), 10 states have internal predecessors, (78), 2 states have call successors, (36), 4 states have call predecessors, (36), 5 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2022-10-16 13:14:34,358 INFO L276 IsEmpty]: Start isEmpty. Operand 3784 states and 5059 transitions. [2022-10-16 13:14:34,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2022-10-16 13:14:34,360 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:34,360 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 8, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:34,408 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-10-16 13:14:34,575 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:34,575 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ath6kl_usb_power_onErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ath6kl_usb_power_onErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 37 more)] === [2022-10-16 13:14:34,576 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:34,576 INFO L85 PathProgramCache]: Analyzing trace with hash -24534972, now seen corresponding path program 2 times [2022-10-16 13:14:34,576 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:34,576 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [338243632] [2022-10-16 13:14:34,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:34,576 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:34,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:14:34,788 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 13:14:34,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:14:35,080 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 13:14:35,080 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 13:14:35,081 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (39 of 40 remaining) [2022-10-16 13:14:35,084 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ath6kl_usb_power_onErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (38 of 40 remaining) [2022-10-16 13:14:35,084 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ath6kl_usb_power_onErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (37 of 40 remaining) [2022-10-16 13:14:35,084 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (36 of 40 remaining) [2022-10-16 13:14:35,085 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (35 of 40 remaining) [2022-10-16 13:14:35,085 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (34 of 40 remaining) [2022-10-16 13:14:35,085 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (33 of 40 remaining) [2022-10-16 13:14:35,085 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (32 of 40 remaining) [2022-10-16 13:14:35,086 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (31 of 40 remaining) [2022-10-16 13:14:35,086 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (30 of 40 remaining) [2022-10-16 13:14:35,086 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (29 of 40 remaining) [2022-10-16 13:14:35,086 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (28 of 40 remaining) [2022-10-16 13:14:35,086 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (27 of 40 remaining) [2022-10-16 13:14:35,086 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ath6kl_usb_destroyErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (26 of 40 remaining) [2022-10-16 13:14:35,087 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ath6kl_usb_destroyErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 40 remaining) [2022-10-16 13:14:35,087 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 40 remaining) [2022-10-16 13:14:35,087 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 40 remaining) [2022-10-16 13:14:35,087 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 40 remaining) [2022-10-16 13:14:35,087 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 40 remaining) [2022-10-16 13:14:35,088 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 40 remaining) [2022-10-16 13:14:35,088 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ath6kl_usb_flush_allErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 40 remaining) [2022-10-16 13:14:35,088 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ath6kl_usb_flush_allErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 40 remaining) [2022-10-16 13:14:35,088 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 40 remaining) [2022-10-16 13:14:35,088 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 40 remaining) [2022-10-16 13:14:35,089 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 40 remaining) [2022-10-16 13:14:35,089 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 40 remaining) [2022-10-16 13:14:35,089 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 40 remaining) [2022-10-16 13:14:35,089 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 40 remaining) [2022-10-16 13:14:35,089 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 40 remaining) [2022-10-16 13:14:35,089 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 40 remaining) [2022-10-16 13:14:35,090 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 40 remaining) [2022-10-16 13:14:35,090 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 40 remaining) [2022-10-16 13:14:35,090 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 40 remaining) [2022-10-16 13:14:35,090 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 40 remaining) [2022-10-16 13:14:35,090 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 40 remaining) [2022-10-16 13:14:35,091 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 40 remaining) [2022-10-16 13:14:35,091 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 40 remaining) [2022-10-16 13:14:35,091 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 40 remaining) [2022-10-16 13:14:35,091 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 40 remaining) [2022-10-16 13:14:35,091 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 40 remaining) [2022-10-16 13:14:35,092 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-16 13:14:35,096 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:35,102 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 13:14:35,149 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:14:35,152 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:14:35,365 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 01:14:35 BoogieIcfgContainer [2022-10-16 13:14:35,365 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 13:14:35,366 INFO L158 Benchmark]: Toolchain (without parser) took 60984.32ms. Allocated memory was 154.1MB in the beginning and 690.0MB in the end (delta: 535.8MB). Free memory was 119.0MB in the beginning and 349.0MB in the end (delta: -230.0MB). Peak memory consumption was 305.9MB. Max. memory is 8.0GB. [2022-10-16 13:14:35,366 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 154.1MB. Free memory was 125.4MB in the beginning and 125.3MB in the end (delta: 142.0kB). There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:14:35,367 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2481.16ms. Allocated memory was 154.1MB in the beginning and 186.6MB in the end (delta: 32.5MB). Free memory was 118.9MB in the beginning and 135.2MB in the end (delta: -16.3MB). Peak memory consumption was 101.8MB. Max. memory is 8.0GB. [2022-10-16 13:14:35,367 INFO L158 Benchmark]: Boogie Procedure Inliner took 214.48ms. Allocated memory is still 186.6MB. Free memory was 135.2MB in the beginning and 123.7MB in the end (delta: 11.5MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. [2022-10-16 13:14:35,367 INFO L158 Benchmark]: Boogie Preprocessor took 202.99ms. Allocated memory is still 186.6MB. Free memory was 123.7MB in the beginning and 109.0MB in the end (delta: 14.7MB). Peak memory consumption was 14.7MB. Max. memory is 8.0GB. [2022-10-16 13:14:35,368 INFO L158 Benchmark]: RCFGBuilder took 4330.40ms. Allocated memory was 186.6MB in the beginning and 444.6MB in the end (delta: 257.9MB). Free memory was 109.0MB in the beginning and 377.5MB in the end (delta: -268.4MB). Peak memory consumption was 182.5MB. Max. memory is 8.0GB. [2022-10-16 13:14:35,368 INFO L158 Benchmark]: TraceAbstraction took 53743.78ms. Allocated memory was 444.6MB in the beginning and 690.0MB in the end (delta: 245.4MB). Free memory was 377.0MB in the beginning and 349.0MB in the end (delta: 27.9MB). Peak memory consumption was 273.3MB. Max. memory is 8.0GB. [2022-10-16 13:14:35,370 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 154.1MB. Free memory was 125.4MB in the beginning and 125.3MB in the end (delta: 142.0kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 2481.16ms. Allocated memory was 154.1MB in the beginning and 186.6MB in the end (delta: 32.5MB). Free memory was 118.9MB in the beginning and 135.2MB in the end (delta: -16.3MB). Peak memory consumption was 101.8MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 214.48ms. Allocated memory is still 186.6MB. Free memory was 135.2MB in the beginning and 123.7MB in the end (delta: 11.5MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. * Boogie Preprocessor took 202.99ms. Allocated memory is still 186.6MB. Free memory was 123.7MB in the beginning and 109.0MB in the end (delta: 14.7MB). Peak memory consumption was 14.7MB. Max. memory is 8.0GB. * RCFGBuilder took 4330.40ms. Allocated memory was 186.6MB in the beginning and 444.6MB in the end (delta: 257.9MB). Free memory was 109.0MB in the beginning and 377.5MB in the end (delta: -268.4MB). Peak memory consumption was 182.5MB. Max. memory is 8.0GB. * TraceAbstraction took 53743.78ms. Allocated memory was 444.6MB in the beginning and 690.0MB in the end (delta: 245.4MB). Free memory was 377.0MB in the beginning and 349.0MB in the end (delta: 27.9MB). Peak memory consumption was 273.3MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 6867]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 7944. Possible FailurePath: [L6787] int LDV_IN_INTERRUPT = 1; [L6788] int ldv_state_variable_2 ; [L6789] int ref_cnt ; [L6790] int ldv_state_variable_1 ; [L6791] struct ath6kl *ath6kl_usb_ops_group0 ; [L6792] int usb_counter ; [L6793] struct usb_interface *ath6kl_usb_driver_group1 ; [L6794] int ldv_state_variable_0 ; [L7814-L7818] static struct ath6kl_hif_ops const ath6kl_usb_ops = {0, 0, 0, 0, 0, 0, 0, 0, & ath6kl_usb_cleanup_scatter, & ath6kl_usb_suspend, & ath6kl_usb_resume, & ath6kl_usb_diag_read32, & ath6kl_usb_diag_write32, & ath6kl_usb_bmi_read, & ath6kl_usb_bmi_write, & ath6kl_usb_power_on, & ath6kl_usb_power_off, & ath6kl_usb_stop, & ath6kl_usb_send, & ath6kl_usb_get_default_pipe, & ath6kl_usb_map_service_pipe, & ath6kl_usb_get_free_queue_number}; [L7929-L7931] static struct usb_device_id ath6kl_usb_ids[2U] = { {3U, 3315U, 37748U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L7932] struct usb_device_id const __mod_usb__ath6kl_usb_ids_device_table ; [L7933-L7939] static struct usb_driver ath6kl_usb_driver = {"ath6kl_usb", & ath6kl_usb_probe, & ath6kl_usb_remove, 0, & ath6kl_usb_pm_suspend, & ath6kl_usb_pm_resume, & ath6kl_usb_pm_reset_resume, 0, 0, (struct usb_device_id const *)(& ath6kl_usb_ids), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, 1U, (unsigned char)0}; [L7960] int ldv_retval_2 ; [L7961] int ldv_retval_0 ; [L7962] int ldv_retval_5 ; [L7963] int ldv_retval_4 ; [L7964] int ldv_retval_6 ; [L7966] int ldv_retval_1 ; [L7969] int ldv_retval_3 ; [L8488] Element set_impl[15] ; [L8489] int last_index = 0; [L8623] Set LDV_SKBS ; VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L7990] struct usb_device_id *ldvarg1 ; [L7991] void *tmp ; [L7992] pm_message_t ldvarg0 ; [L7993] u32 *ldvarg18 ; [L7994] void *tmp___0 ; [L7995] u8 *ldvarg11 ; [L7996] void *tmp___1 ; [L7997] u8 ldvarg7 ; [L7998] u8 tmp___2 ; [L7999] u32 ldvarg3 ; [L8000] u32 tmp___3 ; [L8001] u8 *ldvarg12 ; [L8002] void *tmp___4 ; [L8003] u8 *ldvarg8 ; [L8004] void *tmp___5 ; [L8005] u32 ldvarg13 ; [L8006] u32 tmp___6 ; [L8007] u16 ldvarg10 ; [L8008] u16 tmp___7 ; [L8009] u8 *ldvarg9 ; [L8010] void *tmp___8 ; [L8011] struct sk_buff *ldvarg5 ; [L8012] void *tmp___9 ; [L8013] u8 ldvarg6 ; [L8014] u8 tmp___10 ; [L8015] struct cfg80211_wowlan *ldvarg15 ; [L8016] void *tmp___11 ; [L8017] u32 ldvarg16 ; [L8018] u32 tmp___12 ; [L8019] struct sk_buff *ldvarg4 ; [L8020] void *tmp___13 ; [L8021] u8 *ldvarg14 ; [L8022] void *tmp___14 ; [L8023] u8 *ldvarg17 ; [L8024] void *tmp___15 ; [L8025] u32 ldvarg19 ; [L8026] u32 tmp___16 ; [L8027] __le32 ldvarg2 ; [L8028] int tmp___17 ; [L8029] int tmp___18 ; [L8030] int tmp___19 ; [L8031] int tmp___20 ; VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg2={62:0}, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L8033] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=32, tmp___0=1, usb_counter=0] [L8033] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={61:0}, ldvarg2={62:0}, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L8033] tmp = ldv_zalloc(32UL) [L8034] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg2={62:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, usb_counter=0] [L8035] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=4, tmp___0=1, usb_counter=0] [L8035] RET, EXPR ldv_zalloc(4UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg2={62:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, usb_counter=0] [L8035] tmp___0 = ldv_zalloc(4UL) [L8036] ldvarg18 = (u32 *)tmp___0 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg18={0:0}, ldvarg2={62:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L8037] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=1, tmp___0=1, usb_counter=0] [L8037] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg18={0:0}, ldvarg2={62:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L8037] tmp___1 = ldv_zalloc(1UL) [L8038] ldvarg11 = (u8 *)tmp___1 [L8039] tmp___2 = __VERIFIER_nondet_u8() [L8040] ldvarg7 = tmp___2 [L8041] tmp___3 = __VERIFIER_nondet_u32() [L8042] ldvarg3 = tmp___3 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg7=20, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2=20, tmp___3=33, usb_counter=0] [L8043] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=1, tmp___0=1, usb_counter=0] [L8043] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg11={0:0}, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg7=20, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2=20, tmp___3=33, usb_counter=0] [L8043] tmp___4 = ldv_zalloc(1UL) [L8044] ldvarg12 = (u8 *)tmp___4 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg7=20, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2=20, tmp___3=33, tmp___4={0:0}, usb_counter=0] [L8045] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=1, tmp___0=1, usb_counter=0] [L8045] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg7=20, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2=20, tmp___3=33, tmp___4={0:0}, usb_counter=0] [L8045] tmp___5 = ldv_zalloc(1UL) [L8046] ldvarg8 = (u8 *)tmp___5 [L8047] tmp___6 = __VERIFIER_nondet_u32() [L8048] ldvarg13 = tmp___6 [L8049] tmp___7 = __VERIFIER_nondet_u16() [L8050] ldvarg10 = tmp___7 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg7=20, ldvarg8={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, usb_counter=0] [L8051] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=1, tmp___0=1, usb_counter=0] [L8051] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg7=20, ldvarg8={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, usb_counter=0] [L8051] tmp___8 = ldv_zalloc(1UL) [L8052] ldvarg9 = (u8 *)tmp___8 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, usb_counter=0] [L8053] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=232, tmp___0=1, usb_counter=0] [L8053] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(232UL)={0:0}, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, usb_counter=0] [L8053] tmp___9 = ldv_zalloc(232UL) [L8054] ldvarg5 = (struct sk_buff *)tmp___9 [L8055] tmp___10 = __VERIFIER_nondet_u8() [L8056] ldvarg6 = tmp___10 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8057] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=32, tmp___0=1, usb_counter=0] [L8057] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8057] tmp___11 = ldv_zalloc(32UL) [L8058] ldvarg15 = (struct cfg80211_wowlan *)tmp___11 [L8059] tmp___12 = __VERIFIER_nondet_u32() [L8060] ldvarg16 = tmp___12 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg15={0:0}, ldvarg16=6, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8061] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=232, tmp___0=1, usb_counter=0] [L8061] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(232UL)={0:0}, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg15={0:0}, ldvarg16=6, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8061] tmp___13 = ldv_zalloc(232UL) [L8062] ldvarg4 = (struct sk_buff *)tmp___13 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg15={0:0}, ldvarg16=6, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8063] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=1, tmp___0=1, usb_counter=0] [L8063] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg15={0:0}, ldvarg16=6, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8063] tmp___14 = ldv_zalloc(1UL) [L8064] ldvarg14 = (u8 *)tmp___14 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8065] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=1, tmp___0=1, usb_counter=0] [L8065] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg18={0:0}, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8065] tmp___15 = ldv_zalloc(1UL) [L8066] ldvarg17 = (u8 *)tmp___15 [L8067] tmp___16 = __VERIFIER_nondet_u32() [L8068] ldvarg19 = tmp___16 [L8069] CALL ldv_initialize() [L8642] CALL ldv_set_init(LDV_SKBS) [L8494] set = set_impl [L8495] last_index = 0 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, set={58:0}, set={0:0}, set_impl={58:0}, usb_counter=0] [L8642] RET ldv_set_init(LDV_SKBS) [L8069] RET ldv_initialize() [L8070] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19=2, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={61:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___15={0:0}, tmp___16=2, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8071] FCALL memset((void *)(& ldvarg2), 0, 4UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19=2, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, memset((void *)(& ldvarg2), 0, 4UL)={62:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___15={0:0}, tmp___16=2, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8072] ldv_state_variable_1 = 0 [L8073] ref_cnt = 0 [L8074] ldv_state_variable_0 = 1 [L8075] ldv_state_variable_2 = 0 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19=2, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___15={0:0}, tmp___16=2, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8077] tmp___17 = __VERIFIER_nondet_int() [L8079] case 0: [L8145] case 1: VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19=2, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___15={0:0}, tmp___16=2, tmp___17=1, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8146] COND TRUE ldv_state_variable_0 != 0 [L8147] tmp___19 = __VERIFIER_nondet_int() [L8149] case 0: [L8157] case 1: VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19=2, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___15={0:0}, tmp___16=2, tmp___17=1, tmp___19=1, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8158] COND TRUE ldv_state_variable_0 == 1 [L8159] CALL, EXPR ath6kl_usb_init() [L7942] int ret ; [L7944] CALL, EXPR ldv_usb_register_driver_14(& ath6kl_usb_driver, & __this_module, "ath6kl_usb") [L8468] ldv_func_ret_type ldv_func_res ; [L8469] int tmp ; [L8471] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8813] return __VERIFIER_nondet_int(); [L8471] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8471] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8472] ldv_func_res = tmp [L8473] ldv_state_variable_1 = 1 [L8474] usb_counter = 0 [L8475] CALL ldv_usb_driver_1() [L7972] void *tmp ; VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L7974] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, size=1560, tmp___0=1, usb_counter=0] [L7974] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L7974] tmp = ldv_zalloc(1560UL) [L7975] ath6kl_usb_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, tmp={0:0}, usb_counter=0] [L8475] RET ldv_usb_driver_1() [L8476] return (ldv_func_res); VAL [\result=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, ldv_func_arg1={57:0}, ldv_func_arg1={57:0}, ldv_func_arg2={4294967315:4294967309}, ldv_func_arg2={4294967315:4294967309}, ldv_func_arg3={53:0}, ldv_func_arg3={53:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, set_impl={58:0}, tmp=0, usb_counter=0] [L7944] RET, EXPR ldv_usb_register_driver_14(& ath6kl_usb_driver, & __this_module, "ath6kl_usb") [L7944] ret = ldv_usb_register_driver_14(& ath6kl_usb_driver, & __this_module, "ath6kl_usb") [L7945] COND FALSE !(ret != 0) [L7950] return (0); VAL [\result=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, ret=0, set_impl={58:0}, usb_counter=0] [L8159] RET, EXPR ath6kl_usb_init() [L8159] ldv_retval_4 = ath6kl_usb_init() [L8160] COND TRUE ldv_retval_4 == 0 [L8161] ldv_state_variable_0 = 3 [L8162] ldv_state_variable_2 = 1 [L8163] CALL ldv_initialize_ath6kl_hif_ops_2() [L7981] void *tmp ; VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L7983] CALL, EXPR ldv_zalloc(31704UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6729] void *p ; [L6730] void *tmp ; [L6731] int tmp___0 ; [L6733] tmp___0 = __VERIFIER_nondet_int() [L6734] COND TRUE tmp___0 != 0 [L6735] return ((void *)0); VAL [\old(size)=31704, \result={0:0}, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, set_impl={58:0}, size=31704, tmp___0=1, usb_counter=0] [L7983] RET, EXPR ldv_zalloc(31704UL) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(31704UL)={0:0}, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L7983] tmp = ldv_zalloc(31704UL) [L7984] ath6kl_usb_ops_group0 = (struct ath6kl *)tmp VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, set_impl={58:0}, tmp={0:0}, usb_counter=0] [L8163] RET ldv_initialize_ath6kl_hif_ops_2() [L8166] COND FALSE !(ldv_retval_4 != 0) VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19=2, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___15={0:0}, tmp___16=2, tmp___17=1, tmp___19=1, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8077] tmp___17 = __VERIFIER_nondet_int() [L8079] case 0: [L8145] case 1: [L8181] case 2: VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19=2, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___15={0:0}, tmp___16=2, tmp___17=2, tmp___19=1, tmp___2=20, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8182] COND TRUE ldv_state_variable_2 != 0 [L8183] tmp___20 = __VERIFIER_nondet_int() [L8185] case 0: [L8192] case 1: [L8199] case 2: [L8216] case 3: [L8233] case 4: [L8243] case 5: VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19=2, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___15={0:0}, tmp___16=2, tmp___17=2, tmp___19=1, tmp___2=20, tmp___20=5, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8244] COND TRUE ldv_state_variable_2 == 1 VAL [__mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={61:0}, ldvarg1={0:0}, ldvarg10=15, ldvarg11={0:0}, ldvarg12={0:0}, ldvarg13=0, ldvarg14={0:0}, ldvarg15={0:0}, ldvarg16=6, ldvarg17={0:0}, ldvarg18={0:0}, ldvarg19=2, ldvarg2={62:0}, ldvarg3=33, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6=29, ldvarg7=20, ldvarg8={0:0}, ldvarg9={0:0}, ref_cnt=0, set_impl={58:0}, tmp={0:0}, tmp___0={0:0}, tmp___1={0:0}, tmp___10=29, tmp___11={0:0}, tmp___12=6, tmp___13={0:0}, tmp___14={0:0}, tmp___15={0:0}, tmp___16=2, tmp___17=2, tmp___19=1, tmp___2=20, tmp___20=5, tmp___3=33, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=15, tmp___8={0:0}, tmp___9={0:0}, usb_counter=0] [L8245] CALL ath6kl_usb_bmi_read(ath6kl_usb_ops_group0, ldvarg14, ldvarg13) VAL [\old(len)=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ar={0:0}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, buf={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L7747] struct ath6kl_usb *ar_usb ; [L7748] int ret ; [L7750] EXPR ar->hif_priv [L7750] ar_usb = (struct ath6kl_usb *)ar->hif_priv [L7751] CALL ath6kl_usb_submit_ctrl_in(ar_usb, 2, 0, 0, (void *)buf, len) VAL [\old(index)=0, \old(req)=2, \old(size)=0, \old(value)=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ar_usb={4294967324:-50}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, data={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L7646] u8 *buf ; [L7647] int ret ; [L7648] void *tmp ; [L7649] unsigned int tmp___0 ; [L7650] size_t __len ; [L7651] void *__ret ; [L7653] buf = (u8 *)0U VAL [\old(index)=0, \old(req)=2, \old(size)=0, \old(value)=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ar_usb={4294967324:-50}, ar_usb={4294967324:-50}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, buf={0:0}, data={0:0}, data={0:0}, index=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, req=2, set_impl={58:0}, size=0, usb_counter=0, value=0] [L7654] COND FALSE !(size != 0U) VAL [\old(index)=0, \old(req)=2, \old(size)=0, \old(value)=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ar_usb={4294967324:-50}, ar_usb={4294967324:-50}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, buf={0:0}, data={0:0}, data={0:0}, index=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, req=2, set_impl={58:0}, size=0, usb_counter=0, value=0] [L7663] EXPR ar_usb->udev VAL [\old(index)=0, \old(req)=2, \old(size)=0, \old(value)=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ar_usb={4294967324:-50}, ar_usb={4294967324:-50}, ar_usb->udev={4294967327:4294967301}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, buf={0:0}, data={0:0}, data={0:0}, index=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, req=2, set_impl={58:0}, size=0, usb_counter=0, value=0] [L7663] CALL __create_pipe(ar_usb->udev, 0U) VAL [\old(endpoint)=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, dev={4294967327:4294967301}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6867] EXPR dev->devnum VAL [\old(endpoint)=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, dev={4294967327:4294967301}, dev={4294967327:4294967301}, dev->devnum=8388608, endpoint=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, set_impl={58:0}, usb_counter=0] [L6867] dev->devnum << 8 VAL [\old(endpoint)=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __mod_usb__ath6kl_usb_ids_device_table=0, __this_module={4294967315:4294967309}, ath6kl_usb_driver={57:0}, ath6kl_usb_driver_group1={0:0}, ath6kl_usb_ids={56:0}, ath6kl_usb_ops={55:0}, ath6kl_usb_ops_group0={0:0}, dev={4294967327:4294967301}, dev={4294967327:4294967301}, dev->devnum=8388608, endpoint=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ref_cnt=0, set_impl={58:0}, usb_counter=0] - UnprovableResult [Line: 7461]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7461]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8542]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8542]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8545]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8545]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8551]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8551]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8552]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8552]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8554]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8554]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7004]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7004]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6867]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8514]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8514]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8518]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8518]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7216]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7216]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7388]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7388]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6955]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6955]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7150]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7150]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8088]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8088]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8118]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8118]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8124]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8124]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8352]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8352]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8358]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8358]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8393]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8393]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 51 procedures, 807 locations, 40 error locations. Started 1 CEGAR loops. OverallTime: 53.4s, OverallIterations: 9, TraceHistogramMax: 13, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 41.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 3 mSolverCounterUnknown, 7706 SdHoareTripleChecker+Valid, 37.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7390 mSDsluCounter, 25396 SdHoareTripleChecker+Invalid, 35.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 16154 mSDsCounter, 3796 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 8583 IncrementalHoareTripleChecker+Invalid, 12382 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3796 mSolverCounterUnsat, 9242 mSDtfsCounter, 8583 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 814 GetRequests, 753 SyntacticMatches, 2 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=3784occurred in iteration=8, InterpolantAutomatonStates: 54, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.8s AutomataMinimizationTime, 8 MinimizatonAttempts, 3534 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.4s SsaConstructionTime, 1.6s SatisfiabilityAnalysisTime, 5.7s InterpolantComputationTime, 1490 NumberOfCodeBlocks, 1490 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 1472 ConstructedInterpolants, 0 QuantifiedInterpolants, 2754 SizeOfPredicates, 8 NumberOfNonLiveVariables, 4505 ConjunctsInSsa, 31 ConjunctsInUnsatCore, 12 InterpolantComputations, 7 PerfectInterpolantSequences, 3582/3603 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-16 13:14:35,418 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...