/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 13:13:57,002 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 13:13:57,005 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 13:13:57,057 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 13:13:57,058 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 13:13:57,060 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 13:13:57,062 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 13:13:57,065 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 13:13:57,067 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 13:13:57,068 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 13:13:57,070 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 13:13:57,072 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 13:13:57,072 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 13:13:57,074 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 13:13:57,075 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 13:13:57,077 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 13:13:57,078 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 13:13:57,079 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 13:13:57,081 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 13:13:57,084 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 13:13:57,086 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 13:13:57,088 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 13:13:57,089 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 13:13:57,090 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 13:13:57,095 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 13:13:57,096 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 13:13:57,096 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 13:13:57,097 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 13:13:57,098 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 13:13:57,099 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 13:13:57,099 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 13:13:57,100 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 13:13:57,101 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 13:13:57,102 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 13:13:57,103 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 13:13:57,104 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 13:13:57,105 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 13:13:57,105 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 13:13:57,105 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 13:13:57,106 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 13:13:57,107 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 13:13:57,116 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 13:13:57,170 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 13:13:57,170 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 13:13:57,171 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 13:13:57,171 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 13:13:57,173 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 13:13:57,173 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 13:13:57,174 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 13:13:57,174 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 13:13:57,174 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 13:13:57,176 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 13:13:57,177 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 13:13:57,178 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 13:13:57,178 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 13:13:57,178 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 13:13:57,179 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 13:13:57,179 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 13:13:57,179 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 13:13:57,180 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 13:13:57,180 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 13:13:57,180 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 13:13:57,180 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 13:13:57,181 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 13:13:57,181 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 13:13:57,181 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 13:13:57,181 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 13:13:57,182 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 13:13:57,182 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:13:57,182 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 13:13:57,183 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 13:13:57,183 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 13:13:57,183 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 13:13:57,183 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 13:13:57,184 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 13:13:57,184 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 13:13:57,624 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 13:13:57,665 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 13:13:57,668 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 13:13:57,670 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 13:13:57,671 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 13:13:57,673 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i [2022-10-16 13:13:57,750 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c3ee7e02c/8f80bcd3450043f8ba613cf13c9154e4/FLAGe5d706d19 [2022-10-16 13:13:58,841 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 13:13:58,842 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i [2022-10-16 13:13:58,889 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c3ee7e02c/8f80bcd3450043f8ba613cf13c9154e4/FLAGe5d706d19 [2022-10-16 13:13:58,912 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c3ee7e02c/8f80bcd3450043f8ba613cf13c9154e4 [2022-10-16 13:13:58,917 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 13:13:58,924 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 13:13:58,930 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 13:13:58,930 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 13:13:58,934 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 13:13:58,935 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:13:58" (1/1) ... [2022-10-16 13:13:58,936 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@239c532b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:13:58, skipping insertion in model container [2022-10-16 13:13:58,940 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:13:58" (1/1) ... [2022-10-16 13:13:58,949 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 13:13:59,120 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 13:14:00,125 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i[180577,180590] [2022-10-16 13:14:00,948 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:14:00,981 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 13:14:01,288 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i[180577,180590] [2022-10-16 13:14:01,589 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:14:01,663 INFO L208 MainTranslator]: Completed translation [2022-10-16 13:14:01,664 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01 WrapperNode [2022-10-16 13:14:01,664 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 13:14:01,666 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 13:14:01,666 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 13:14:01,666 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 13:14:01,676 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:01,801 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:01,954 INFO L138 Inliner]: procedures = 180, calls = 1285, calls flagged for inlining = 87, calls inlined = 41, statements flattened = 1760 [2022-10-16 13:14:01,955 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 13:14:01,956 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 13:14:01,956 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 13:14:01,956 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 13:14:01,968 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:01,968 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:01,997 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:01,998 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:02,095 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:02,122 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:02,135 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:02,145 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:02,162 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 13:14:02,163 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 13:14:02,164 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 13:14:02,164 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 13:14:02,165 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (1/1) ... [2022-10-16 13:14:02,174 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:14:02,191 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:02,210 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 13:14:02,226 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 13:14:02,292 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_reset_device [2022-10-16 13:14:02,292 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_reset_device [2022-10-16 13:14:02,293 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_resume [2022-10-16 13:14:02,293 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_resume [2022-10-16 13:14:02,294 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2022-10-16 13:14:02,294 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2022-10-16 13:14:02,294 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2022-10-16 13:14:02,294 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2022-10-16 13:14:02,294 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2022-10-16 13:14:02,294 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2022-10-16 13:14:02,294 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-16 13:14:02,295 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-16 13:14:02,295 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 13:14:02,295 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-10-16 13:14:02,295 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-10-16 13:14:02,295 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2022-10-16 13:14:02,295 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2022-10-16 13:14:02,295 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-10-16 13:14:02,296 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-10-16 13:14:02,296 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 13:14:02,296 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 13:14:02,296 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-10-16 13:14:02,296 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-10-16 13:14:02,296 INFO L130 BoogieDeclarations]: Found specification of procedure activate_suitable_timer_1 [2022-10-16 13:14:02,296 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_suitable_timer_1 [2022-10-16 13:14:02,297 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_submit_rx_urb [2022-10-16 13:14:02,297 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_submit_rx_urb [2022-10-16 13:14:02,297 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-10-16 13:14:02,297 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-10-16 13:14:02,297 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-10-16 13:14:02,297 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-10-16 13:14:02,297 INFO L130 BoogieDeclarations]: Found specification of procedure __if_usb_submit_rx_urb [2022-10-16 13:14:02,298 INFO L138 BoogieDeclarations]: Found implementation of procedure __if_usb_submit_rx_urb [2022-10-16 13:14:02,298 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 13:14:02,298 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2022-10-16 13:14:02,298 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2022-10-16 13:14:02,298 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 13:14:02,298 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 13:14:02,298 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_free [2022-10-16 13:14:02,299 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_free [2022-10-16 13:14:02,299 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-10-16 13:14:02,299 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-10-16 13:14:02,299 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-16 13:14:02,299 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-16 13:14:02,299 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 13:14:02,299 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_disconnect [2022-10-16 13:14:02,300 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_disconnect [2022-10-16 13:14:02,300 INFO L130 BoogieDeclarations]: Found specification of procedure usb_tx_block [2022-10-16 13:14:02,300 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_tx_block [2022-10-16 13:14:02,301 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 13:14:02,301 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_timer_1 [2022-10-16 13:14:02,302 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_timer_1 [2022-10-16 13:14:02,302 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 13:14:02,302 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 13:14:02,302 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-10-16 13:14:02,303 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 13:14:02,303 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2022-10-16 13:14:02,303 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2022-10-16 13:14:02,304 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-10-16 13:14:02,304 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-10-16 13:14:02,304 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-10-16 13:14:02,305 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-10-16 13:14:02,305 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2022-10-16 13:14:02,305 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2022-10-16 13:14:02,306 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 13:14:02,306 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 13:14:02,306 INFO L130 BoogieDeclarations]: Found specification of procedure lbs_remove_card [2022-10-16 13:14:02,307 INFO L138 BoogieDeclarations]: Found implementation of procedure lbs_remove_card [2022-10-16 13:14:02,307 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2022-10-16 13:14:02,307 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2022-10-16 13:14:02,308 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2022-10-16 13:14:02,308 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2022-10-16 13:14:02,308 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2022-10-16 13:14:02,309 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2022-10-16 13:14:02,309 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 13:14:02,310 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-10-16 13:14:02,310 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-10-16 13:14:02,310 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2022-10-16 13:14:02,311 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2022-10-16 13:14:02,311 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-10-16 13:14:02,311 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-10-16 13:14:02,311 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 13:14:02,311 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 13:14:02,311 INFO L130 BoogieDeclarations]: Found specification of procedure preempt_count [2022-10-16 13:14:02,311 INFO L138 BoogieDeclarations]: Found implementation of procedure preempt_count [2022-10-16 13:14:02,849 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 13:14:02,852 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 13:14:03,523 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-16 13:14:05,085 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 13:14:05,099 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 13:14:05,099 INFO L300 CfgBuilder]: Removed 3 assume(true) statements. [2022-10-16 13:14:05,103 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:14:05 BoogieIcfgContainer [2022-10-16 13:14:05,103 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 13:14:05,106 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 13:14:05,106 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 13:14:05,110 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 13:14:05,110 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 01:13:58" (1/3) ... [2022-10-16 13:14:05,111 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1cd05675 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:14:05, skipping insertion in model container [2022-10-16 13:14:05,111 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:01" (2/3) ... [2022-10-16 13:14:05,112 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1cd05675 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:14:05, skipping insertion in model container [2022-10-16 13:14:05,112 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:14:05" (3/3) ... [2022-10-16 13:14:05,114 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i [2022-10-16 13:14:05,139 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 13:14:05,139 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 24 error locations. [2022-10-16 13:14:05,221 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 13:14:05,230 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1afa6244, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 13:14:05,230 INFO L358 AbstractCegarLoop]: Starting to check reachability of 24 error locations. [2022-10-16 13:14:05,243 INFO L276 IsEmpty]: Start isEmpty. Operand has 567 states, 406 states have (on average 1.3990147783251232) internal successors, (568), 443 states have internal predecessors, (568), 101 states have call successors, (101), 36 states have call predecessors, (101), 35 states have return successors, (97), 94 states have call predecessors, (97), 97 states have call successors, (97) [2022-10-16 13:14:05,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-10-16 13:14:05,263 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:05,265 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:05,265 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:05,272 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:05,272 INFO L85 PathProgramCache]: Analyzing trace with hash -2057351254, now seen corresponding path program 1 times [2022-10-16 13:14:05,284 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:05,284 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1695340599] [2022-10-16 13:14:05,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:05,285 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:05,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:06,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:06,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:06,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:06,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:06,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-10-16 13:14:06,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:06,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-10-16 13:14:06,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:06,200 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-10-16 13:14:06,200 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:06,201 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1695340599] [2022-10-16 13:14:06,202 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1695340599] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:06,202 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:06,202 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:14:06,204 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1203496335] [2022-10-16 13:14:06,205 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:06,211 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:14:06,212 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:06,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:14:06,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:14:06,252 INFO L87 Difference]: Start difference. First operand has 567 states, 406 states have (on average 1.3990147783251232) internal successors, (568), 443 states have internal predecessors, (568), 101 states have call successors, (101), 36 states have call predecessors, (101), 35 states have return successors, (97), 94 states have call predecessors, (97), 97 states have call successors, (97) Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-16 13:14:08,312 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:08,312 INFO L93 Difference]: Finished difference Result 1285 states and 1767 transitions. [2022-10-16 13:14:08,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:14:08,315 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-10-16 13:14:08,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:08,339 INFO L225 Difference]: With dead ends: 1285 [2022-10-16 13:14:08,339 INFO L226 Difference]: Without dead ends: 690 [2022-10-16 13:14:08,349 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:14:08,354 INFO L413 NwaCegarLoop]: 716 mSDtfsCounter, 580 mSDsluCounter, 1152 mSDsCounter, 0 mSdLazyCounter, 697 mSolverCounterSat, 285 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 586 SdHoareTripleChecker+Valid, 1868 SdHoareTripleChecker+Invalid, 982 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 285 IncrementalHoareTripleChecker+Valid, 697 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:08,355 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [586 Valid, 1868 Invalid, 982 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [285 Valid, 697 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-10-16 13:14:08,379 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 690 states. [2022-10-16 13:14:08,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 690 to 613. [2022-10-16 13:14:08,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 613 states, 447 states have (on average 1.3870246085011186) internal successors, (620), 482 states have internal predecessors, (620), 103 states have call successors, (103), 39 states have call predecessors, (103), 39 states have return successors, (103), 97 states have call predecessors, (103), 103 states have call successors, (103) [2022-10-16 13:14:08,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 613 states to 613 states and 826 transitions. [2022-10-16 13:14:08,484 INFO L78 Accepts]: Start accepts. Automaton has 613 states and 826 transitions. Word has length 50 [2022-10-16 13:14:08,485 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:08,485 INFO L495 AbstractCegarLoop]: Abstraction has 613 states and 826 transitions. [2022-10-16 13:14:08,486 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-16 13:14:08,486 INFO L276 IsEmpty]: Start isEmpty. Operand 613 states and 826 transitions. [2022-10-16 13:14:08,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-10-16 13:14:08,494 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:08,495 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:08,495 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 13:14:08,495 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:08,498 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:08,498 INFO L85 PathProgramCache]: Analyzing trace with hash -931546903, now seen corresponding path program 1 times [2022-10-16 13:14:08,499 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:08,500 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [716861151] [2022-10-16 13:14:08,500 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:08,500 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:08,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:09,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:09,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:09,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:09,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:09,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:09,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:09,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:09,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:09,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:09,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:09,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:09,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:09,181 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-10-16 13:14:09,181 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:09,181 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [716861151] [2022-10-16 13:14:09,182 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [716861151] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:09,183 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:09,183 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:14:09,185 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1493508374] [2022-10-16 13:14:09,186 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:09,188 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:14:09,188 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:09,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:14:09,193 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:14:09,193 INFO L87 Difference]: Start difference. First operand 613 states and 826 transitions. Second operand has 6 states, 5 states have (on average 9.8) internal successors, (49), 3 states have internal predecessors, (49), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-16 13:14:11,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:11,916 INFO L93 Difference]: Finished difference Result 1435 states and 1938 transitions. [2022-10-16 13:14:11,916 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:14:11,917 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 9.8) internal successors, (49), 3 states have internal predecessors, (49), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2022-10-16 13:14:11,917 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:11,929 INFO L225 Difference]: With dead ends: 1435 [2022-10-16 13:14:11,930 INFO L226 Difference]: Without dead ends: 1429 [2022-10-16 13:14:11,931 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:14:11,933 INFO L413 NwaCegarLoop]: 734 mSDtfsCounter, 1622 mSDsluCounter, 1284 mSDsCounter, 0 mSdLazyCounter, 1265 mSolverCounterSat, 676 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1706 SdHoareTripleChecker+Valid, 2018 SdHoareTripleChecker+Invalid, 1941 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 676 IncrementalHoareTripleChecker+Valid, 1265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:11,934 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1706 Valid, 2018 Invalid, 1941 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [676 Valid, 1265 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-10-16 13:14:11,937 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1429 states. [2022-10-16 13:14:12,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1429 to 1178. [2022-10-16 13:14:12,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1178 states, 876 states have (on average 1.3858447488584476) internal successors, (1214), 923 states have internal predecessors, (1214), 203 states have call successors, (203), 75 states have call predecessors, (203), 75 states have return successors, (203), 191 states have call predecessors, (203), 203 states have call successors, (203) [2022-10-16 13:14:12,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1178 states to 1178 states and 1620 transitions. [2022-10-16 13:14:12,087 INFO L78 Accepts]: Start accepts. Automaton has 1178 states and 1620 transitions. Word has length 66 [2022-10-16 13:14:12,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:12,088 INFO L495 AbstractCegarLoop]: Abstraction has 1178 states and 1620 transitions. [2022-10-16 13:14:12,088 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 9.8) internal successors, (49), 3 states have internal predecessors, (49), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-16 13:14:12,088 INFO L276 IsEmpty]: Start isEmpty. Operand 1178 states and 1620 transitions. [2022-10-16 13:14:12,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-10-16 13:14:12,092 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:12,093 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:12,093 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 13:14:12,093 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:12,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:12,094 INFO L85 PathProgramCache]: Analyzing trace with hash -1572837635, now seen corresponding path program 1 times [2022-10-16 13:14:12,094 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:12,094 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [680175712] [2022-10-16 13:14:12,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:12,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:12,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:12,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:12,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:12,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:12,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:12,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:12,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:12,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-16 13:14:12,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:12,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-10-16 13:14:12,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:12,529 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-10-16 13:14:12,529 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:12,529 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [680175712] [2022-10-16 13:14:12,530 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [680175712] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:12,530 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:12,530 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:14:12,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [548582570] [2022-10-16 13:14:12,531 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:12,531 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:14:12,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:12,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:14:12,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:14:12,532 INFO L87 Difference]: Start difference. First operand 1178 states and 1620 transitions. Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-10-16 13:14:14,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:14,473 INFO L93 Difference]: Finished difference Result 2425 states and 3322 transitions. [2022-10-16 13:14:14,473 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:14:14,474 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.0) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 70 [2022-10-16 13:14:14,474 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:14,483 INFO L225 Difference]: With dead ends: 2425 [2022-10-16 13:14:14,484 INFO L226 Difference]: Without dead ends: 1271 [2022-10-16 13:14:14,488 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:14,490 INFO L413 NwaCegarLoop]: 784 mSDtfsCounter, 844 mSDsluCounter, 971 mSDsCounter, 0 mSdLazyCounter, 640 mSolverCounterSat, 314 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 891 SdHoareTripleChecker+Valid, 1755 SdHoareTripleChecker+Invalid, 954 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 314 IncrementalHoareTripleChecker+Valid, 640 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:14,491 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [891 Valid, 1755 Invalid, 954 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [314 Valid, 640 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-10-16 13:14:14,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1271 states. [2022-10-16 13:14:14,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1271 to 1161. [2022-10-16 13:14:14,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1161 states, 867 states have (on average 1.3737024221453287) internal successors, (1191), 917 states have internal predecessors, (1191), 187 states have call successors, (187), 83 states have call predecessors, (187), 83 states have return successors, (187), 172 states have call predecessors, (187), 187 states have call successors, (187) [2022-10-16 13:14:14,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1161 states to 1161 states and 1565 transitions. [2022-10-16 13:14:14,578 INFO L78 Accepts]: Start accepts. Automaton has 1161 states and 1565 transitions. Word has length 70 [2022-10-16 13:14:14,578 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:14,578 INFO L495 AbstractCegarLoop]: Abstraction has 1161 states and 1565 transitions. [2022-10-16 13:14:14,579 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.0) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-10-16 13:14:14,579 INFO L276 IsEmpty]: Start isEmpty. Operand 1161 states and 1565 transitions. [2022-10-16 13:14:14,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-10-16 13:14:14,582 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:14,582 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:14,583 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 13:14:14,583 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:14,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:14,584 INFO L85 PathProgramCache]: Analyzing trace with hash 2129527433, now seen corresponding path program 1 times [2022-10-16 13:14:14,584 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:14,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2015998781] [2022-10-16 13:14:14,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:14,585 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:14,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:15,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:15,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:15,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:15,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:15,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:15,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:15,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:15,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:15,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:15,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:15,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:15,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:15,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-10-16 13:14:15,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:15,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:14:15,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:15,177 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-10-16 13:14:15,177 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:15,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2015998781] [2022-10-16 13:14:15,178 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2015998781] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:15,178 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:15,178 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-16 13:14:15,179 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [352278356] [2022-10-16 13:14:15,179 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:15,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:14:15,180 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:15,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:14:15,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:15,181 INFO L87 Difference]: Start difference. First operand 1161 states and 1565 transitions. Second operand has 8 states, 8 states have (on average 8.375) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:14:18,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:18,583 INFO L93 Difference]: Finished difference Result 3541 states and 5108 transitions. [2022-10-16 13:14:18,584 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-10-16 13:14:18,584 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 88 [2022-10-16 13:14:18,585 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:18,604 INFO L225 Difference]: With dead ends: 3541 [2022-10-16 13:14:18,605 INFO L226 Difference]: Without dead ends: 2458 [2022-10-16 13:14:18,610 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:14:18,611 INFO L413 NwaCegarLoop]: 1261 mSDtfsCounter, 1550 mSDsluCounter, 4047 mSDsCounter, 0 mSdLazyCounter, 2180 mSolverCounterSat, 489 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1613 SdHoareTripleChecker+Valid, 5308 SdHoareTripleChecker+Invalid, 2669 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 489 IncrementalHoareTripleChecker+Valid, 2180 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:18,612 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1613 Valid, 5308 Invalid, 2669 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [489 Valid, 2180 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-10-16 13:14:18,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2458 states. [2022-10-16 13:14:18,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2458 to 1167. [2022-10-16 13:14:18,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1167 states, 873 states have (on average 1.3711340206185567) internal successors, (1197), 923 states have internal predecessors, (1197), 187 states have call successors, (187), 83 states have call predecessors, (187), 83 states have return successors, (187), 172 states have call predecessors, (187), 187 states have call successors, (187) [2022-10-16 13:14:18,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1167 states to 1167 states and 1571 transitions. [2022-10-16 13:14:18,728 INFO L78 Accepts]: Start accepts. Automaton has 1167 states and 1571 transitions. Word has length 88 [2022-10-16 13:14:18,728 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:18,729 INFO L495 AbstractCegarLoop]: Abstraction has 1167 states and 1571 transitions. [2022-10-16 13:14:18,729 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:14:18,729 INFO L276 IsEmpty]: Start isEmpty. Operand 1167 states and 1571 transitions. [2022-10-16 13:14:18,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-10-16 13:14:18,732 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:18,733 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:18,733 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 13:14:18,733 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:18,734 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:18,734 INFO L85 PathProgramCache]: Analyzing trace with hash -995258384, now seen corresponding path program 1 times [2022-10-16 13:14:18,734 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:18,734 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1260293264] [2022-10-16 13:14:18,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:18,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:18,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:19,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:19,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:19,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:19,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:19,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:19,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-10-16 13:14:19,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-10-16 13:14:19,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:19,156 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-10-16 13:14:19,157 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:19,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1260293264] [2022-10-16 13:14:19,157 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1260293264] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:19,157 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:19,157 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:14:19,158 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [907027857] [2022-10-16 13:14:19,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:19,159 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:14:19,159 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:19,159 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:14:19,159 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:14:19,160 INFO L87 Difference]: Start difference. First operand 1167 states and 1571 transitions. Second operand has 6 states, 5 states have (on average 13.8) internal successors, (69), 3 states have internal predecessors, (69), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:14:21,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:21,159 INFO L93 Difference]: Finished difference Result 1766 states and 2504 transitions. [2022-10-16 13:14:21,159 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:14:21,159 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 13.8) internal successors, (69), 3 states have internal predecessors, (69), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 90 [2022-10-16 13:14:21,160 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:21,176 INFO L225 Difference]: With dead ends: 1766 [2022-10-16 13:14:21,176 INFO L226 Difference]: Without dead ends: 1764 [2022-10-16 13:14:21,179 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:14:21,184 INFO L413 NwaCegarLoop]: 885 mSDtfsCounter, 896 mSDsluCounter, 1346 mSDsCounter, 0 mSdLazyCounter, 940 mSolverCounterSat, 459 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 960 SdHoareTripleChecker+Valid, 2231 SdHoareTripleChecker+Invalid, 1399 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 459 IncrementalHoareTripleChecker+Valid, 940 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:21,184 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [960 Valid, 2231 Invalid, 1399 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [459 Valid, 940 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-10-16 13:14:21,192 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1764 states. [2022-10-16 13:14:21,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1764 to 1279. [2022-10-16 13:14:21,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1279 states, 961 states have (on average 1.368366285119667) internal successors, (1315), 1011 states have internal predecessors, (1315), 211 states have call successors, (211), 83 states have call predecessors, (211), 83 states have return successors, (211), 196 states have call predecessors, (211), 211 states have call successors, (211) [2022-10-16 13:14:21,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1279 states to 1279 states and 1737 transitions. [2022-10-16 13:14:21,295 INFO L78 Accepts]: Start accepts. Automaton has 1279 states and 1737 transitions. Word has length 90 [2022-10-16 13:14:21,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:21,298 INFO L495 AbstractCegarLoop]: Abstraction has 1279 states and 1737 transitions. [2022-10-16 13:14:21,299 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 13.8) internal successors, (69), 3 states have internal predecessors, (69), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:14:21,299 INFO L276 IsEmpty]: Start isEmpty. Operand 1279 states and 1737 transitions. [2022-10-16 13:14:21,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-10-16 13:14:21,309 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:21,309 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:21,310 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-16 13:14:21,312 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:21,312 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:21,313 INFO L85 PathProgramCache]: Analyzing trace with hash -1167538950, now seen corresponding path program 1 times [2022-10-16 13:14:21,315 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:21,316 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1289193914] [2022-10-16 13:14:21,316 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:21,316 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:21,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:21,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:21,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:21,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:21,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:21,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:21,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:21,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:21,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:21,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:22,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:22,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:22,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:22,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-10-16 13:14:22,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:22,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-10-16 13:14:22,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:22,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:22,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:22,076 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-10-16 13:14:22,076 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:22,076 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1289193914] [2022-10-16 13:14:22,076 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1289193914] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:14:22,076 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [76180015] [2022-10-16 13:14:22,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:22,077 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:22,077 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:22,080 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:14:22,093 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-16 13:14:22,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:22,587 INFO L263 TraceCheckSpWp]: Trace formula consists of 2434 conjuncts, 2 conjunts are in the unsatisfiable core [2022-10-16 13:14:22,600 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:14:22,643 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-10-16 13:14:22,643 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:14:22,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [76180015] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:22,644 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:14:22,644 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 8 [2022-10-16 13:14:22,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [700491796] [2022-10-16 13:14:22,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:22,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-16 13:14:22,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:22,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-16 13:14:22,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:22,646 INFO L87 Difference]: Start difference. First operand 1279 states and 1737 transitions. Second operand has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:14:22,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:22,818 INFO L93 Difference]: Finished difference Result 2013 states and 2715 transitions. [2022-10-16 13:14:22,819 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-16 13:14:22,819 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 97 [2022-10-16 13:14:22,819 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:22,830 INFO L225 Difference]: With dead ends: 2013 [2022-10-16 13:14:22,830 INFO L226 Difference]: Without dead ends: 1228 [2022-10-16 13:14:22,833 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:22,835 INFO L413 NwaCegarLoop]: 879 mSDtfsCounter, 384 mSDsluCounter, 496 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 384 SdHoareTripleChecker+Valid, 1375 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:22,836 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [384 Valid, 1375 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-16 13:14:22,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1228 states. [2022-10-16 13:14:22,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1228 to 1225. [2022-10-16 13:14:22,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1225 states, 916 states have (on average 1.3580786026200873) internal successors, (1244), 962 states have internal predecessors, (1244), 205 states have call successors, (205), 80 states have call predecessors, (205), 80 states have return successors, (205), 193 states have call predecessors, (205), 205 states have call successors, (205) [2022-10-16 13:14:22,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1225 states to 1225 states and 1654 transitions. [2022-10-16 13:14:22,962 INFO L78 Accepts]: Start accepts. Automaton has 1225 states and 1654 transitions. Word has length 97 [2022-10-16 13:14:22,962 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:22,962 INFO L495 AbstractCegarLoop]: Abstraction has 1225 states and 1654 transitions. [2022-10-16 13:14:22,963 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:14:22,963 INFO L276 IsEmpty]: Start isEmpty. Operand 1225 states and 1654 transitions. [2022-10-16 13:14:22,966 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-10-16 13:14:22,967 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:22,967 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:23,017 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-16 13:14:23,182 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-10-16 13:14:23,182 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:23,183 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:23,183 INFO L85 PathProgramCache]: Analyzing trace with hash -1363606898, now seen corresponding path program 1 times [2022-10-16 13:14:23,183 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:23,183 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860317493] [2022-10-16 13:14:23,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:23,184 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:23,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:23,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:23,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:23,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:23,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:23,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:23,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-10-16 13:14:23,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-10-16 13:14:23,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:23,544 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-10-16 13:14:23,544 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:23,544 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860317493] [2022-10-16 13:14:23,544 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860317493] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:23,545 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:23,545 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:14:23,545 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [984208522] [2022-10-16 13:14:23,545 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:23,546 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:14:23,546 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:23,546 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:14:23,547 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:14:23,547 INFO L87 Difference]: Start difference. First operand 1225 states and 1654 transitions. Second operand has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:14:25,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:25,813 INFO L93 Difference]: Finished difference Result 2244 states and 3024 transitions. [2022-10-16 13:14:25,814 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:14:25,814 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 101 [2022-10-16 13:14:25,815 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:25,826 INFO L225 Difference]: With dead ends: 2244 [2022-10-16 13:14:25,826 INFO L226 Difference]: Without dead ends: 1513 [2022-10-16 13:14:25,830 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:14:25,832 INFO L413 NwaCegarLoop]: 827 mSDtfsCounter, 690 mSDsluCounter, 1449 mSDsCounter, 0 mSdLazyCounter, 1110 mSolverCounterSat, 337 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 723 SdHoareTripleChecker+Valid, 2276 SdHoareTripleChecker+Invalid, 1447 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 337 IncrementalHoareTripleChecker+Valid, 1110 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:25,833 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [723 Valid, 2276 Invalid, 1447 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [337 Valid, 1110 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-10-16 13:14:25,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1513 states. [2022-10-16 13:14:25,933 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1513 to 1363. [2022-10-16 13:14:25,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1363 states, 1022 states have (on average 1.3590998043052838) internal successors, (1389), 1073 states have internal predecessors, (1389), 225 states have call successors, (225), 92 states have call predecessors, (225), 92 states have return successors, (225), 210 states have call predecessors, (225), 225 states have call successors, (225) [2022-10-16 13:14:25,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1363 states to 1363 states and 1839 transitions. [2022-10-16 13:14:25,948 INFO L78 Accepts]: Start accepts. Automaton has 1363 states and 1839 transitions. Word has length 101 [2022-10-16 13:14:25,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:25,949 INFO L495 AbstractCegarLoop]: Abstraction has 1363 states and 1839 transitions. [2022-10-16 13:14:25,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:14:25,949 INFO L276 IsEmpty]: Start isEmpty. Operand 1363 states and 1839 transitions. [2022-10-16 13:14:25,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2022-10-16 13:14:25,955 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:25,955 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:25,955 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-16 13:14:25,955 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:25,956 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:25,956 INFO L85 PathProgramCache]: Analyzing trace with hash -1408933623, now seen corresponding path program 1 times [2022-10-16 13:14:25,956 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:25,956 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1819893950] [2022-10-16 13:14:25,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:25,957 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:26,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:26,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:26,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:26,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:26,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:26,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:26,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-10-16 13:14:26,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-10-16 13:14:26,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2022-10-16 13:14:26,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 105 [2022-10-16 13:14:26,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:26,542 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-10-16 13:14:26,543 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:26,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1819893950] [2022-10-16 13:14:26,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1819893950] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:14:26,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1972569443] [2022-10-16 13:14:26,544 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:26,544 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:26,544 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:26,545 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:14:26,564 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-16 13:14:27,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:27,119 INFO L263 TraceCheckSpWp]: Trace formula consists of 2537 conjuncts, 3 conjunts are in the unsatisfiable core [2022-10-16 13:14:27,126 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:14:27,213 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-10-16 13:14:27,214 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:14:27,313 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-10-16 13:14:27,313 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1972569443] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:14:27,313 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:14:27,314 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 3, 3] total 9 [2022-10-16 13:14:27,314 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2134553932] [2022-10-16 13:14:27,314 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:14:27,315 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-10-16 13:14:27,315 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:27,316 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-10-16 13:14:27,316 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:14:27,316 INFO L87 Difference]: Start difference. First operand 1363 states and 1839 transitions. Second operand has 10 states, 9 states have (on average 14.88888888888889) internal successors, (134), 7 states have internal predecessors, (134), 6 states have call successors, (21), 4 states have call predecessors, (21), 1 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2022-10-16 13:14:30,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:30,260 INFO L93 Difference]: Finished difference Result 2916 states and 4338 transitions. [2022-10-16 13:14:30,261 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-10-16 13:14:30,261 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 14.88888888888889) internal successors, (134), 7 states have internal predecessors, (134), 6 states have call successors, (21), 4 states have call predecessors, (21), 1 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) Word has length 113 [2022-10-16 13:14:30,261 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:30,283 INFO L225 Difference]: With dead ends: 2916 [2022-10-16 13:14:30,284 INFO L226 Difference]: Without dead ends: 2915 [2022-10-16 13:14:30,286 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 249 GetRequests, 240 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=77, Unknown=0, NotChecked=0, Total=110 [2022-10-16 13:14:30,287 INFO L413 NwaCegarLoop]: 997 mSDtfsCounter, 1906 mSDsluCounter, 2541 mSDsCounter, 0 mSdLazyCounter, 1921 mSolverCounterSat, 703 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2105 SdHoareTripleChecker+Valid, 3538 SdHoareTripleChecker+Invalid, 2624 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 703 IncrementalHoareTripleChecker+Valid, 1921 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:30,288 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2105 Valid, 3538 Invalid, 2624 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [703 Valid, 1921 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2022-10-16 13:14:30,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2915 states. [2022-10-16 13:14:30,449 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2915 to 1362. [2022-10-16 13:14:30,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1362 states, 1022 states have (on average 1.3571428571428572) internal successors, (1387), 1072 states have internal predecessors, (1387), 225 states have call successors, (225), 92 states have call predecessors, (225), 92 states have return successors, (225), 210 states have call predecessors, (225), 225 states have call successors, (225) [2022-10-16 13:14:30,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1362 states to 1362 states and 1837 transitions. [2022-10-16 13:14:30,458 INFO L78 Accepts]: Start accepts. Automaton has 1362 states and 1837 transitions. Word has length 113 [2022-10-16 13:14:30,459 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:30,459 INFO L495 AbstractCegarLoop]: Abstraction has 1362 states and 1837 transitions. [2022-10-16 13:14:30,459 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 14.88888888888889) internal successors, (134), 7 states have internal predecessors, (134), 6 states have call successors, (21), 4 states have call predecessors, (21), 1 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2022-10-16 13:14:30,460 INFO L276 IsEmpty]: Start isEmpty. Operand 1362 states and 1837 transitions. [2022-10-16 13:14:30,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2022-10-16 13:14:30,464 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:30,464 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:30,505 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-16 13:14:30,678 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-10-16 13:14:30,679 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:30,680 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:30,680 INFO L85 PathProgramCache]: Analyzing trace with hash -727268531, now seen corresponding path program 1 times [2022-10-16 13:14:30,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:30,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1493852810] [2022-10-16 13:14:30,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:30,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:30,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:31,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:31,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:31,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:31,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:31,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:31,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-10-16 13:14:31,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-10-16 13:14:31,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2022-10-16 13:14:31,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 105 [2022-10-16 13:14:31,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,176 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-10-16 13:14:31,176 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:31,176 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1493852810] [2022-10-16 13:14:31,176 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1493852810] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:14:31,177 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [627261850] [2022-10-16 13:14:31,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:31,177 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:31,177 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:31,178 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:14:31,194 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-10-16 13:14:31,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,658 INFO L263 TraceCheckSpWp]: Trace formula consists of 2538 conjuncts, 3 conjunts are in the unsatisfiable core [2022-10-16 13:14:31,667 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:14:31,730 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-10-16 13:14:31,730 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:14:31,730 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [627261850] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:31,730 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:14:31,731 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2022-10-16 13:14:31,731 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1332023360] [2022-10-16 13:14:31,731 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:31,732 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:14:31,732 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:31,732 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:14:31,732 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:31,733 INFO L87 Difference]: Start difference. First operand 1362 states and 1837 transitions. Second operand has 4 states, 3 states have (on average 28.333333333333332) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:14:31,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:31,929 INFO L93 Difference]: Finished difference Result 1952 states and 2751 transitions. [2022-10-16 13:14:31,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-16 13:14:31,930 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 28.333333333333332) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 114 [2022-10-16 13:14:31,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:31,984 INFO L225 Difference]: With dead ends: 1952 [2022-10-16 13:14:31,985 INFO L226 Difference]: Without dead ends: 1951 [2022-10-16 13:14:31,986 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 136 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:31,987 INFO L413 NwaCegarLoop]: 1152 mSDtfsCounter, 430 mSDsluCounter, 1504 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 512 SdHoareTripleChecker+Valid, 2656 SdHoareTripleChecker+Invalid, 65 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:31,987 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [512 Valid, 2656 Invalid, 65 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-16 13:14:31,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1951 states. [2022-10-16 13:14:32,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1951 to 1249. [2022-10-16 13:14:32,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1249 states, 934 states have (on average 1.3565310492505354) internal successors, (1267), 983 states have internal predecessors, (1267), 201 states have call successors, (201), 92 states have call predecessors, (201), 92 states have return successors, (201), 186 states have call predecessors, (201), 201 states have call successors, (201) [2022-10-16 13:14:32,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1249 states to 1249 states and 1669 transitions. [2022-10-16 13:14:32,088 INFO L78 Accepts]: Start accepts. Automaton has 1249 states and 1669 transitions. Word has length 114 [2022-10-16 13:14:32,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:32,089 INFO L495 AbstractCegarLoop]: Abstraction has 1249 states and 1669 transitions. [2022-10-16 13:14:32,089 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 28.333333333333332) internal successors, (85), 4 states have internal predecessors, (85), 3 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:14:32,089 INFO L276 IsEmpty]: Start isEmpty. Operand 1249 states and 1669 transitions. [2022-10-16 13:14:32,093 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2022-10-16 13:14:32,094 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:32,094 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:32,134 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-10-16 13:14:32,309 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:32,310 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:32,311 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:32,311 INFO L85 PathProgramCache]: Analyzing trace with hash -2010372392, now seen corresponding path program 1 times [2022-10-16 13:14:32,311 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:32,312 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [13167713] [2022-10-16 13:14:32,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:32,312 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:32,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:32,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:32,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:32,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:32,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:32,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:32,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-10-16 13:14:32,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:32,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-10-16 13:14:32,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:32,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2022-10-16 13:14:32,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:32,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2022-10-16 13:14:32,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:32,659 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2022-10-16 13:14:32,659 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:32,659 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [13167713] [2022-10-16 13:14:32,660 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [13167713] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:32,660 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:32,660 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:14:32,660 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [77191006] [2022-10-16 13:14:32,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:32,661 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:14:32,661 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:32,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:14:32,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:14:32,662 INFO L87 Difference]: Start difference. First operand 1249 states and 1669 transitions. Second operand has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (14), 5 states have call predecessors, (14), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-10-16 13:14:34,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:34,323 INFO L93 Difference]: Finished difference Result 2571 states and 3440 transitions. [2022-10-16 13:14:34,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:14:34,324 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (14), 5 states have call predecessors, (14), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 127 [2022-10-16 13:14:34,324 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:34,333 INFO L225 Difference]: With dead ends: 2571 [2022-10-16 13:14:34,333 INFO L226 Difference]: Without dead ends: 1400 [2022-10-16 13:14:34,338 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:14:34,339 INFO L413 NwaCegarLoop]: 677 mSDtfsCounter, 486 mSDsluCounter, 1319 mSDsCounter, 0 mSdLazyCounter, 940 mSolverCounterSat, 273 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 506 SdHoareTripleChecker+Valid, 1996 SdHoareTripleChecker+Invalid, 1213 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 273 IncrementalHoareTripleChecker+Valid, 940 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:34,339 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [506 Valid, 1996 Invalid, 1213 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [273 Valid, 940 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-10-16 13:14:34,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1400 states. [2022-10-16 13:14:34,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1400 to 1251. [2022-10-16 13:14:34,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1251 states, 936 states have (on average 1.3557692307692308) internal successors, (1269), 985 states have internal predecessors, (1269), 201 states have call successors, (201), 92 states have call predecessors, (201), 92 states have return successors, (201), 186 states have call predecessors, (201), 201 states have call successors, (201) [2022-10-16 13:14:34,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1251 states to 1251 states and 1671 transitions. [2022-10-16 13:14:34,475 INFO L78 Accepts]: Start accepts. Automaton has 1251 states and 1671 transitions. Word has length 127 [2022-10-16 13:14:34,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:34,475 INFO L495 AbstractCegarLoop]: Abstraction has 1251 states and 1671 transitions. [2022-10-16 13:14:34,476 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 3 states have internal predecessors, (74), 2 states have call successors, (14), 5 states have call predecessors, (14), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-10-16 13:14:34,476 INFO L276 IsEmpty]: Start isEmpty. Operand 1251 states and 1671 transitions. [2022-10-16 13:14:34,480 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2022-10-16 13:14:34,480 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:34,480 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:34,481 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-10-16 13:14:34,481 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:34,482 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:34,482 INFO L85 PathProgramCache]: Analyzing trace with hash -749455142, now seen corresponding path program 1 times [2022-10-16 13:14:34,482 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:34,482 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [890733761] [2022-10-16 13:14:34,483 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:34,483 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:34,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:36,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:36,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:36,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:36,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:36,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:36,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-10-16 13:14:36,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:36,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-10-16 13:14:36,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:36,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2022-10-16 13:14:36,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:36,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2022-10-16 13:14:36,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:36,456 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-10-16 13:14:36,456 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:36,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [890733761] [2022-10-16 13:14:36,460 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [890733761] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:14:36,460 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [900131996] [2022-10-16 13:14:36,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:36,460 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:36,460 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:36,470 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:14:36,513 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-10-16 13:14:37,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,104 INFO L263 TraceCheckSpWp]: Trace formula consists of 2707 conjuncts, 11 conjunts are in the unsatisfiable core [2022-10-16 13:14:37,112 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:14:37,143 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-10-16 13:14:37,143 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:14:37,143 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [900131996] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:37,144 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:14:37,144 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [12] total 13 [2022-10-16 13:14:37,144 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [493102876] [2022-10-16 13:14:37,144 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:37,145 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-16 13:14:37,145 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:37,145 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-16 13:14:37,145 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2022-10-16 13:14:37,146 INFO L87 Difference]: Start difference. First operand 1251 states and 1671 transitions. Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-10-16 13:14:37,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:37,251 INFO L93 Difference]: Finished difference Result 2677 states and 3624 transitions. [2022-10-16 13:14:37,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-16 13:14:37,252 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 127 [2022-10-16 13:14:37,252 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:37,261 INFO L225 Difference]: With dead ends: 2677 [2022-10-16 13:14:37,261 INFO L226 Difference]: Without dead ends: 1504 [2022-10-16 13:14:37,266 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 151 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2022-10-16 13:14:37,266 INFO L413 NwaCegarLoop]: 890 mSDtfsCounter, 247 mSDsluCounter, 594 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 295 SdHoareTripleChecker+Valid, 1484 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:37,267 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [295 Valid, 1484 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 13:14:37,269 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1504 states. [2022-10-16 13:14:37,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1504 to 1251. [2022-10-16 13:14:37,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1251 states, 936 states have (on average 1.3536324786324787) internal successors, (1267), 983 states have internal predecessors, (1267), 201 states have call successors, (201), 92 states have call predecessors, (201), 92 states have return successors, (201), 186 states have call predecessors, (201), 201 states have call successors, (201) [2022-10-16 13:14:37,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1251 states to 1251 states and 1669 transitions. [2022-10-16 13:14:37,372 INFO L78 Accepts]: Start accepts. Automaton has 1251 states and 1669 transitions. Word has length 127 [2022-10-16 13:14:37,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:37,373 INFO L495 AbstractCegarLoop]: Abstraction has 1251 states and 1669 transitions. [2022-10-16 13:14:37,373 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-10-16 13:14:37,373 INFO L276 IsEmpty]: Start isEmpty. Operand 1251 states and 1669 transitions. [2022-10-16 13:14:37,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-10-16 13:14:37,377 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:37,377 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:37,423 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-10-16 13:14:37,590 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:37,591 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:37,591 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:37,592 INFO L85 PathProgramCache]: Analyzing trace with hash -404947901, now seen corresponding path program 2 times [2022-10-16 13:14:37,592 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:37,592 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2011291248] [2022-10-16 13:14:37,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:37,593 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:37,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:37,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:37,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:37,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:37,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:37,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:37,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-10-16 13:14:37,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2022-10-16 13:14:37,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:14:37,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:37,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:37,962 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-10-16 13:14:37,962 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:37,963 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2011291248] [2022-10-16 13:14:37,963 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2011291248] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:37,963 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:37,963 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:14:37,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1090939966] [2022-10-16 13:14:37,965 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:37,966 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:14:37,966 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:37,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:14:37,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:14:37,967 INFO L87 Difference]: Start difference. First operand 1251 states and 1669 transitions. Second operand has 6 states, 6 states have (on average 13.166666666666666) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-10-16 13:14:40,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:40,633 INFO L93 Difference]: Finished difference Result 3854 states and 5151 transitions. [2022-10-16 13:14:40,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:14:40,634 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.166666666666666) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 116 [2022-10-16 13:14:40,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:40,654 INFO L225 Difference]: With dead ends: 3854 [2022-10-16 13:14:40,654 INFO L226 Difference]: Without dead ends: 2681 [2022-10-16 13:14:40,661 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:14:40,662 INFO L413 NwaCegarLoop]: 831 mSDtfsCounter, 1538 mSDsluCounter, 1453 mSDsCounter, 0 mSdLazyCounter, 1264 mSolverCounterSat, 649 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1618 SdHoareTripleChecker+Valid, 2284 SdHoareTripleChecker+Invalid, 1913 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 649 IncrementalHoareTripleChecker+Valid, 1264 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:40,662 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1618 Valid, 2284 Invalid, 1913 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [649 Valid, 1264 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-10-16 13:14:40,667 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2681 states. [2022-10-16 13:14:40,869 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2681 to 2374. [2022-10-16 13:14:40,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2374 states, 1787 states have (on average 1.349188584219362) internal successors, (2411), 1856 states have internal predecessors, (2411), 389 states have call successors, (389), 176 states have call predecessors, (389), 176 states have return successors, (389), 362 states have call predecessors, (389), 389 states have call successors, (389) [2022-10-16 13:14:40,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2374 states to 2374 states and 3189 transitions. [2022-10-16 13:14:40,886 INFO L78 Accepts]: Start accepts. Automaton has 2374 states and 3189 transitions. Word has length 116 [2022-10-16 13:14:40,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:40,887 INFO L495 AbstractCegarLoop]: Abstraction has 2374 states and 3189 transitions. [2022-10-16 13:14:40,887 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.166666666666666) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-10-16 13:14:40,887 INFO L276 IsEmpty]: Start isEmpty. Operand 2374 states and 3189 transitions. [2022-10-16 13:14:40,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-10-16 13:14:40,894 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:40,894 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:40,895 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-10-16 13:14:40,896 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:40,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:40,896 INFO L85 PathProgramCache]: Analyzing trace with hash 1161810049, now seen corresponding path program 1 times [2022-10-16 13:14:40,897 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:40,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [809445893] [2022-10-16 13:14:40,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:40,897 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:40,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:41,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:41,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:41,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:41,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:41,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:41,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-10-16 13:14:41,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2022-10-16 13:14:41,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:14:41,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:41,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:41,199 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-10-16 13:14:41,199 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:41,200 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [809445893] [2022-10-16 13:14:41,200 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [809445893] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:41,200 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:41,200 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:14:41,200 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [698649606] [2022-10-16 13:14:41,200 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:41,201 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:14:41,201 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:41,201 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:14:41,202 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:14:41,202 INFO L87 Difference]: Start difference. First operand 2374 states and 3189 transitions. Second operand has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 3 states have internal predecessors, (65), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-16 13:14:43,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:43,197 INFO L93 Difference]: Finished difference Result 3684 states and 4932 transitions. [2022-10-16 13:14:43,197 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:14:43,197 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 3 states have internal predecessors, (65), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 116 [2022-10-16 13:14:43,198 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:43,208 INFO L225 Difference]: With dead ends: 3684 [2022-10-16 13:14:43,208 INFO L226 Difference]: Without dead ends: 1387 [2022-10-16 13:14:43,223 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:14:43,226 INFO L413 NwaCegarLoop]: 673 mSDtfsCounter, 677 mSDsluCounter, 1051 mSDsCounter, 0 mSdLazyCounter, 808 mSolverCounterSat, 397 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 697 SdHoareTripleChecker+Valid, 1724 SdHoareTripleChecker+Invalid, 1205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 397 IncrementalHoareTripleChecker+Valid, 808 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:43,226 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [697 Valid, 1724 Invalid, 1205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [397 Valid, 808 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-10-16 13:14:43,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1387 states. [2022-10-16 13:14:43,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1387 to 1240. [2022-10-16 13:14:43,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1240 states, 927 states have (on average 1.3451995685005393) internal successors, (1247), 974 states have internal predecessors, (1247), 199 states have call successors, (199), 92 states have call predecessors, (199), 92 states have return successors, (199), 184 states have call predecessors, (199), 199 states have call successors, (199) [2022-10-16 13:14:43,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1240 states to 1240 states and 1645 transitions. [2022-10-16 13:14:43,350 INFO L78 Accepts]: Start accepts. Automaton has 1240 states and 1645 transitions. Word has length 116 [2022-10-16 13:14:43,350 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:43,351 INFO L495 AbstractCegarLoop]: Abstraction has 1240 states and 1645 transitions. [2022-10-16 13:14:43,351 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 3 states have internal predecessors, (65), 2 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-16 13:14:43,351 INFO L276 IsEmpty]: Start isEmpty. Operand 1240 states and 1645 transitions. [2022-10-16 13:14:43,356 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2022-10-16 13:14:43,356 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:43,356 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:43,357 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-10-16 13:14:43,357 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:43,357 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:43,357 INFO L85 PathProgramCache]: Analyzing trace with hash 1930754949, now seen corresponding path program 1 times [2022-10-16 13:14:43,358 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:43,358 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1401378707] [2022-10-16 13:14:43,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:43,358 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:43,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:44,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:44,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:44,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:44,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:44,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:44,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:44,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:44,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:44,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:44,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:44,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:44,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:45,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:14:45,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:45,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-10-16 13:14:45,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:45,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:45,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:45,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-10-16 13:14:45,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:45,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:45,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:45,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-10-16 13:14:45,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:45,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:45,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:45,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-10-16 13:14:45,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:45,086 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-10-16 13:14:45,086 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:45,086 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1401378707] [2022-10-16 13:14:45,086 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1401378707] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:14:45,087 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2050327710] [2022-10-16 13:14:45,087 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:45,087 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:45,087 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:45,088 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:14:45,098 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-10-16 13:14:45,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:45,637 INFO L263 TraceCheckSpWp]: Trace formula consists of 2795 conjuncts, 52 conjunts are in the unsatisfiable core [2022-10-16 13:14:45,646 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:14:45,775 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-10-16 13:14:45,775 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:14:45,775 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2050327710] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:45,775 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:14:45,775 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [13] total 13 [2022-10-16 13:14:45,776 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1379803213] [2022-10-16 13:14:45,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:45,777 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-10-16 13:14:45,777 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:45,777 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-10-16 13:14:45,777 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=131, Unknown=0, NotChecked=0, Total=156 [2022-10-16 13:14:45,778 INFO L87 Difference]: Start difference. First operand 1240 states and 1645 transitions. Second operand has 9 states, 9 states have (on average 9.333333333333334) internal successors, (84), 7 states have internal predecessors, (84), 2 states have call successors, (16), 2 states have call predecessors, (16), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:14:46,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:46,066 INFO L93 Difference]: Finished difference Result 2630 states and 3540 transitions. [2022-10-16 13:14:46,066 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:14:46,067 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.333333333333334) internal successors, (84), 7 states have internal predecessors, (84), 2 states have call successors, (16), 2 states have call predecessors, (16), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) Word has length 132 [2022-10-16 13:14:46,067 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:46,077 INFO L225 Difference]: With dead ends: 2630 [2022-10-16 13:14:46,077 INFO L226 Difference]: Without dead ends: 1487 [2022-10-16 13:14:46,081 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 157 SyntacticMatches, 2 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2022-10-16 13:14:46,083 INFO L413 NwaCegarLoop]: 804 mSDtfsCounter, 230 mSDsluCounter, 5453 mSDsCounter, 0 mSdLazyCounter, 72 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 231 SdHoareTripleChecker+Valid, 6257 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 72 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:46,083 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [231 Valid, 6257 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 72 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-16 13:14:46,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1487 states. [2022-10-16 13:14:46,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1487 to 1258. [2022-10-16 13:14:46,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1258 states, 941 states have (on average 1.3400637619553666) internal successors, (1261), 988 states have internal predecessors, (1261), 199 states have call successors, (199), 92 states have call predecessors, (199), 96 states have return successors, (211), 188 states have call predecessors, (211), 199 states have call successors, (211) [2022-10-16 13:14:46,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1258 states to 1258 states and 1671 transitions. [2022-10-16 13:14:46,199 INFO L78 Accepts]: Start accepts. Automaton has 1258 states and 1671 transitions. Word has length 132 [2022-10-16 13:14:46,199 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:46,199 INFO L495 AbstractCegarLoop]: Abstraction has 1258 states and 1671 transitions. [2022-10-16 13:14:46,199 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.333333333333334) internal successors, (84), 7 states have internal predecessors, (84), 2 states have call successors, (16), 2 states have call predecessors, (16), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:14:46,200 INFO L276 IsEmpty]: Start isEmpty. Operand 1258 states and 1671 transitions. [2022-10-16 13:14:46,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2022-10-16 13:14:46,204 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:46,204 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:46,256 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-10-16 13:14:46,419 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-10-16 13:14:46,419 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:46,420 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:46,420 INFO L85 PathProgramCache]: Analyzing trace with hash -101222926, now seen corresponding path program 1 times [2022-10-16 13:14:46,420 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:46,421 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2042077787] [2022-10-16 13:14:46,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:46,421 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:46,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:47,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:47,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:47,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:47,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:47,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:47,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:47,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:47,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:47,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:47,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:47,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:47,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:47,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-10-16 13:14:47,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:47,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2022-10-16 13:14:47,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:47,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-10-16 13:14:47,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:47,142 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2022-10-16 13:14:47,142 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:47,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2042077787] [2022-10-16 13:14:47,142 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2042077787] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:47,142 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:47,143 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-16 13:14:47,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [285255643] [2022-10-16 13:14:47,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:47,143 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:14:47,144 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:47,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:14:47,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:47,145 INFO L87 Difference]: Start difference. First operand 1258 states and 1671 transitions. Second operand has 8 states, 8 states have (on average 10.375) internal successors, (83), 4 states have internal predecessors, (83), 1 states have call successors, (13), 4 states have call predecessors, (13), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-10-16 13:14:49,446 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:49,446 INFO L93 Difference]: Finished difference Result 2181 states and 2901 transitions. [2022-10-16 13:14:49,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:14:49,447 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.375) internal successors, (83), 4 states have internal predecessors, (83), 1 states have call successors, (13), 4 states have call predecessors, (13), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) Word has length 127 [2022-10-16 13:14:49,448 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:49,456 INFO L225 Difference]: With dead ends: 2181 [2022-10-16 13:14:49,457 INFO L226 Difference]: Without dead ends: 1375 [2022-10-16 13:14:49,460 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:14:49,461 INFO L413 NwaCegarLoop]: 671 mSDtfsCounter, 453 mSDsluCounter, 2140 mSDsCounter, 0 mSdLazyCounter, 1615 mSolverCounterSat, 273 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 473 SdHoareTripleChecker+Valid, 2811 SdHoareTripleChecker+Invalid, 1888 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 273 IncrementalHoareTripleChecker+Valid, 1615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:49,461 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [473 Valid, 2811 Invalid, 1888 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [273 Valid, 1615 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2022-10-16 13:14:49,464 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1375 states. [2022-10-16 13:14:49,561 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1375 to 1262. [2022-10-16 13:14:49,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1262 states, 944 states have (on average 1.3389830508474576) internal successors, (1264), 991 states have internal predecessors, (1264), 199 states have call successors, (199), 92 states have call predecessors, (199), 97 states have return successors, (212), 189 states have call predecessors, (212), 199 states have call successors, (212) [2022-10-16 13:14:49,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1262 states to 1262 states and 1675 transitions. [2022-10-16 13:14:49,571 INFO L78 Accepts]: Start accepts. Automaton has 1262 states and 1675 transitions. Word has length 127 [2022-10-16 13:14:49,571 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:49,571 INFO L495 AbstractCegarLoop]: Abstraction has 1262 states and 1675 transitions. [2022-10-16 13:14:49,571 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.375) internal successors, (83), 4 states have internal predecessors, (83), 1 states have call successors, (13), 4 states have call predecessors, (13), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-10-16 13:14:49,572 INFO L276 IsEmpty]: Start isEmpty. Operand 1262 states and 1675 transitions. [2022-10-16 13:14:49,575 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2022-10-16 13:14:49,576 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:49,576 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:49,576 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-10-16 13:14:49,576 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:49,577 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:49,577 INFO L85 PathProgramCache]: Analyzing trace with hash 1568598993, now seen corresponding path program 1 times [2022-10-16 13:14:49,577 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:49,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2056427592] [2022-10-16 13:14:49,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:49,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:49,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:49,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:49,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:49,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:49,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:49,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:49,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-10-16 13:14:49,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:50,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-10-16 13:14:50,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:50,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-10-16 13:14:50,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:50,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:50,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:50,037 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-10-16 13:14:50,037 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:50,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2056427592] [2022-10-16 13:14:50,038 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2056427592] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:50,038 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:50,038 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-10-16 13:14:50,038 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [453040392] [2022-10-16 13:14:50,038 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:50,039 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-10-16 13:14:50,039 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:50,040 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-10-16 13:14:50,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-10-16 13:14:50,040 INFO L87 Difference]: Start difference. First operand 1262 states and 1675 transitions. Second operand has 9 states, 9 states have (on average 9.666666666666666) internal successors, (87), 5 states have internal predecessors, (87), 3 states have call successors, (14), 6 states have call predecessors, (14), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:14:53,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:53,987 INFO L93 Difference]: Finished difference Result 2941 states and 3922 transitions. [2022-10-16 13:14:53,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-10-16 13:14:53,987 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.666666666666666) internal successors, (87), 5 states have internal predecessors, (87), 3 states have call successors, (14), 6 states have call predecessors, (14), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 128 [2022-10-16 13:14:53,988 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:54,002 INFO L225 Difference]: With dead ends: 2941 [2022-10-16 13:14:54,002 INFO L226 Difference]: Without dead ends: 2129 [2022-10-16 13:14:54,006 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=58, Invalid=182, Unknown=0, NotChecked=0, Total=240 [2022-10-16 13:14:54,007 INFO L413 NwaCegarLoop]: 1036 mSDtfsCounter, 1211 mSDsluCounter, 2751 mSDsCounter, 0 mSdLazyCounter, 2459 mSolverCounterSat, 622 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1285 SdHoareTripleChecker+Valid, 3787 SdHoareTripleChecker+Invalid, 3081 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 622 IncrementalHoareTripleChecker+Valid, 2459 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:54,007 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1285 Valid, 3787 Invalid, 3081 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [622 Valid, 2459 Invalid, 0 Unknown, 0 Unchecked, 3.6s Time] [2022-10-16 13:14:54,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2129 states. [2022-10-16 13:14:54,149 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2129 to 1274. [2022-10-16 13:14:54,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1274 states, 952 states have (on average 1.3361344537815125) internal successors, (1272), 997 states have internal predecessors, (1272), 203 states have call successors, (203), 92 states have call predecessors, (203), 97 states have return successors, (216), 193 states have call predecessors, (216), 203 states have call successors, (216) [2022-10-16 13:14:54,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1274 states to 1274 states and 1691 transitions. [2022-10-16 13:14:54,157 INFO L78 Accepts]: Start accepts. Automaton has 1274 states and 1691 transitions. Word has length 128 [2022-10-16 13:14:54,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:54,158 INFO L495 AbstractCegarLoop]: Abstraction has 1274 states and 1691 transitions. [2022-10-16 13:14:54,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.666666666666666) internal successors, (87), 5 states have internal predecessors, (87), 3 states have call successors, (14), 6 states have call predecessors, (14), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:14:54,158 INFO L276 IsEmpty]: Start isEmpty. Operand 1274 states and 1691 transitions. [2022-10-16 13:14:54,161 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2022-10-16 13:14:54,162 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:54,162 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:54,162 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-10-16 13:14:54,162 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:54,163 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:54,163 INFO L85 PathProgramCache]: Analyzing trace with hash 2056549276, now seen corresponding path program 1 times [2022-10-16 13:14:54,163 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:54,163 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [979235639] [2022-10-16 13:14:54,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:54,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:54,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:55,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:55,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:55,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:55,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:55,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:55,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:55,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-10-16 13:14:55,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-10-16 13:14:55,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:55,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-10-16 13:14:55,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:55,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2022-10-16 13:14:55,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:55,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2022-10-16 13:14:55,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:55,433 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 2 proven. 9 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2022-10-16 13:14:55,434 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:55,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [979235639] [2022-10-16 13:14:55,434 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [979235639] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:14:55,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1587839663] [2022-10-16 13:14:55,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:55,435 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:55,435 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:55,439 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:14:55,444 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-10-16 13:14:56,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:56,046 INFO L263 TraceCheckSpWp]: Trace formula consists of 2821 conjuncts, 32 conjunts are in the unsatisfiable core [2022-10-16 13:14:56,054 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:14:56,150 INFO L134 CoverageAnalysis]: Checked inductivity of 58 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-10-16 13:14:56,150 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:14:56,151 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1587839663] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:56,151 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:14:56,151 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [11] total 12 [2022-10-16 13:14:56,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1659512382] [2022-10-16 13:14:56,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:56,152 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:14:56,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:56,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:14:56,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:14:56,153 INFO L87 Difference]: Start difference. First operand 1274 states and 1691 transitions. Second operand has 8 states, 8 states have (on average 11.625) internal successors, (93), 6 states have internal predecessors, (93), 2 states have call successors, (18), 2 states have call predecessors, (18), 4 states have return successors, (15), 4 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:14:56,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:56,389 INFO L93 Difference]: Finished difference Result 2624 states and 3515 transitions. [2022-10-16 13:14:56,389 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-16 13:14:56,389 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.625) internal successors, (93), 6 states have internal predecessors, (93), 2 states have call successors, (18), 2 states have call predecessors, (18), 4 states have return successors, (15), 4 states have call predecessors, (15), 2 states have call successors, (15) Word has length 138 [2022-10-16 13:14:56,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:56,398 INFO L225 Difference]: With dead ends: 2624 [2022-10-16 13:14:56,398 INFO L226 Difference]: Without dead ends: 1447 [2022-10-16 13:14:56,402 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 163 SyntacticMatches, 2 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-10-16 13:14:56,403 INFO L413 NwaCegarLoop]: 877 mSDtfsCounter, 313 mSDsluCounter, 4829 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 364 SdHoareTripleChecker+Valid, 5706 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:56,403 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [364 Valid, 5706 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-16 13:14:56,406 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1447 states. [2022-10-16 13:14:56,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1447 to 1284. [2022-10-16 13:14:56,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1284 states, 960 states have (on average 1.3333333333333333) internal successors, (1280), 1003 states have internal predecessors, (1280), 203 states have call successors, (203), 92 states have call predecessors, (203), 99 states have return successors, (220), 197 states have call predecessors, (220), 203 states have call successors, (220) [2022-10-16 13:14:56,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1284 states to 1284 states and 1703 transitions. [2022-10-16 13:14:56,534 INFO L78 Accepts]: Start accepts. Automaton has 1284 states and 1703 transitions. Word has length 138 [2022-10-16 13:14:56,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:56,534 INFO L495 AbstractCegarLoop]: Abstraction has 1284 states and 1703 transitions. [2022-10-16 13:14:56,535 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.625) internal successors, (93), 6 states have internal predecessors, (93), 2 states have call successors, (18), 2 states have call predecessors, (18), 4 states have return successors, (15), 4 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:14:56,535 INFO L276 IsEmpty]: Start isEmpty. Operand 1284 states and 1703 transitions. [2022-10-16 13:14:56,538 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2022-10-16 13:14:56,538 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:56,538 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:56,585 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-10-16 13:14:56,751 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-10-16 13:14:56,751 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:14:56,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:56,752 INFO L85 PathProgramCache]: Analyzing trace with hash -1963384219, now seen corresponding path program 2 times [2022-10-16 13:14:56,752 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:56,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1281633864] [2022-10-16 13:14:56,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:56,753 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:56,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:57,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:14:57,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:14:57,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:57,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:14:57,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:57,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:57,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-10-16 13:14:57,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-10-16 13:14:57,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:57,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:57,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-10-16 13:14:57,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:57,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2022-10-16 13:14:57,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:57,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 126 [2022-10-16 13:14:57,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:57,904 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 7 proven. 4 refuted. 0 times theorem prover too weak. 53 trivial. 0 not checked. [2022-10-16 13:14:57,904 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:57,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1281633864] [2022-10-16 13:14:57,904 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1281633864] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:14:57,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [62438636] [2022-10-16 13:14:57,905 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-10-16 13:14:57,906 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:14:57,906 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:57,910 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:14:57,934 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-10-16 13:14:58,931 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-10-16 13:14:58,932 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-10-16 13:14:58,945 INFO L263 TraceCheckSpWp]: Trace formula consists of 2847 conjuncts, 48 conjunts are in the unsatisfiable core [2022-10-16 13:14:58,952 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:14:59,202 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-10-16 13:14:59,202 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:14:59,203 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [62438636] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:59,203 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:14:59,203 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [11] total 17 [2022-10-16 13:14:59,203 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1283399238] [2022-10-16 13:14:59,203 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:59,204 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-10-16 13:14:59,204 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:59,204 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-10-16 13:14:59,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=239, Unknown=0, NotChecked=0, Total=272 [2022-10-16 13:14:59,205 INFO L87 Difference]: Start difference. First operand 1284 states and 1703 transitions. Second operand has 9 states, 9 states have (on average 10.0) internal successors, (90), 7 states have internal predecessors, (90), 2 states have call successors, (16), 2 states have call predecessors, (16), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2022-10-16 13:14:59,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:59,593 INFO L93 Difference]: Finished difference Result 2530 states and 3367 transitions. [2022-10-16 13:14:59,594 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:14:59,594 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.0) internal successors, (90), 7 states have internal predecessors, (90), 2 states have call successors, (16), 2 states have call predecessors, (16), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) Word has length 144 [2022-10-16 13:14:59,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:59,601 INFO L225 Difference]: With dead ends: 2530 [2022-10-16 13:14:59,601 INFO L226 Difference]: Without dead ends: 1343 [2022-10-16 13:14:59,606 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 185 GetRequests, 166 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=45, Invalid=335, Unknown=0, NotChecked=0, Total=380 [2022-10-16 13:14:59,607 INFO L413 NwaCegarLoop]: 804 mSDtfsCounter, 239 mSDsluCounter, 5328 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 289 SdHoareTripleChecker+Valid, 6132 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:59,607 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [289 Valid, 6132 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-16 13:14:59,610 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1343 states. [2022-10-16 13:14:59,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1343 to 1288. [2022-10-16 13:14:59,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1288 states, 964 states have (on average 1.3319502074688796) internal successors, (1284), 1005 states have internal predecessors, (1284), 203 states have call successors, (203), 92 states have call predecessors, (203), 99 states have return successors, (220), 199 states have call predecessors, (220), 203 states have call successors, (220) [2022-10-16 13:14:59,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1288 states to 1288 states and 1707 transitions. [2022-10-16 13:14:59,799 INFO L78 Accepts]: Start accepts. Automaton has 1288 states and 1707 transitions. Word has length 144 [2022-10-16 13:14:59,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:59,799 INFO L495 AbstractCegarLoop]: Abstraction has 1288 states and 1707 transitions. [2022-10-16 13:14:59,800 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 10.0) internal successors, (90), 7 states have internal predecessors, (90), 2 states have call successors, (16), 2 states have call predecessors, (16), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2022-10-16 13:14:59,800 INFO L276 IsEmpty]: Start isEmpty. Operand 1288 states and 1707 transitions. [2022-10-16 13:14:59,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2022-10-16 13:14:59,803 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:59,803 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:59,846 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-10-16 13:15:00,019 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17,8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:15:00,019 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:15:00,021 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:00,021 INFO L85 PathProgramCache]: Analyzing trace with hash -1542144073, now seen corresponding path program 3 times [2022-10-16 13:15:00,021 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:00,021 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [610903353] [2022-10-16 13:15:00,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:00,022 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:00,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:00,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:15:00,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:15:00,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:15:00,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:15:00,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:00,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:00,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-10-16 13:15:00,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-10-16 13:15:00,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:00,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:00,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-10-16 13:15:00,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:00,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:00,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-10-16 13:15:00,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:00,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:00,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2022-10-16 13:15:00,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:00,810 INFO L134 CoverageAnalysis]: Checked inductivity of 94 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 94 trivial. 0 not checked. [2022-10-16 13:15:00,810 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:00,810 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [610903353] [2022-10-16 13:15:00,810 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [610903353] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:15:00,810 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:15:00,811 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-16 13:15:00,811 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [293805593] [2022-10-16 13:15:00,811 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:15:00,811 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:15:00,812 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:00,812 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:15:00,812 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:15:00,812 INFO L87 Difference]: Start difference. First operand 1288 states and 1707 transitions. Second operand has 8 states, 8 states have (on average 10.25) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:15:03,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:03,520 INFO L93 Difference]: Finished difference Result 2659 states and 3536 transitions. [2022-10-16 13:15:03,520 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:15:03,521 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 156 [2022-10-16 13:15:03,521 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:03,527 INFO L225 Difference]: With dead ends: 2659 [2022-10-16 13:15:03,527 INFO L226 Difference]: Without dead ends: 1391 [2022-10-16 13:15:03,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2022-10-16 13:15:03,532 INFO L413 NwaCegarLoop]: 665 mSDtfsCounter, 823 mSDsluCounter, 1389 mSDsCounter, 0 mSdLazyCounter, 1218 mSolverCounterSat, 522 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 843 SdHoareTripleChecker+Valid, 2054 SdHoareTripleChecker+Invalid, 1740 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 522 IncrementalHoareTripleChecker+Valid, 1218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:03,533 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [843 Valid, 2054 Invalid, 1740 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [522 Valid, 1218 Invalid, 0 Unknown, 0 Unchecked, 2.3s Time] [2022-10-16 13:15:03,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1391 states. [2022-10-16 13:15:03,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1391 to 1289. [2022-10-16 13:15:03,700 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1289 states, 965 states have (on average 1.3316062176165804) internal successors, (1285), 1006 states have internal predecessors, (1285), 203 states have call successors, (203), 92 states have call predecessors, (203), 99 states have return successors, (220), 199 states have call predecessors, (220), 203 states have call successors, (220) [2022-10-16 13:15:03,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1289 states to 1289 states and 1708 transitions. [2022-10-16 13:15:03,706 INFO L78 Accepts]: Start accepts. Automaton has 1289 states and 1708 transitions. Word has length 156 [2022-10-16 13:15:03,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:03,706 INFO L495 AbstractCegarLoop]: Abstraction has 1289 states and 1708 transitions. [2022-10-16 13:15:03,706 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (16), 6 states have call predecessors, (16), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:15:03,707 INFO L276 IsEmpty]: Start isEmpty. Operand 1289 states and 1708 transitions. [2022-10-16 13:15:03,710 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2022-10-16 13:15:03,710 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:03,710 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:03,710 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-10-16 13:15:03,711 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:15:03,711 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:03,711 INFO L85 PathProgramCache]: Analyzing trace with hash -1973484816, now seen corresponding path program 1 times [2022-10-16 13:15:03,711 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:03,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [329052586] [2022-10-16 13:15:03,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:03,712 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:03,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:04,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:15:04,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:15:04,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:15:04,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-10-16 13:15:04,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:04,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:04,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:15:04,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-10-16 13:15:04,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:04,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:04,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-10-16 13:15:04,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:04,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:04,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2022-10-16 13:15:04,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:04,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:04,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 139 [2022-10-16 13:15:04,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:04,750 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 94 trivial. 0 not checked. [2022-10-16 13:15:04,750 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:04,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [329052586] [2022-10-16 13:15:04,751 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [329052586] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:15:04,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [562791659] [2022-10-16 13:15:04,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:04,751 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:15:04,751 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:15:04,755 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:15:04,764 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-10-16 13:15:05,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:05,909 INFO L263 TraceCheckSpWp]: Trace formula consists of 2914 conjuncts, 16 conjunts are in the unsatisfiable core [2022-10-16 13:15:05,916 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:15:06,073 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2022-10-16 13:15:06,073 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:15:06,242 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 94 trivial. 0 not checked. [2022-10-16 13:15:06,245 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [562791659] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:15:06,245 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:15:06,245 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2022-10-16 13:15:06,245 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [125253846] [2022-10-16 13:15:06,246 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:15:06,247 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-10-16 13:15:06,247 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:06,249 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-10-16 13:15:06,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=139, Unknown=0, NotChecked=0, Total=182 [2022-10-16 13:15:06,251 INFO L87 Difference]: Start difference. First operand 1289 states and 1708 transitions. Second operand has 14 states, 14 states have (on average 8.5) internal successors, (119), 10 states have internal predecessors, (119), 2 states have call successors, (38), 6 states have call predecessors, (38), 5 states have return successors, (26), 2 states have call predecessors, (26), 2 states have call successors, (26) [2022-10-16 13:15:10,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:10,220 INFO L93 Difference]: Finished difference Result 2664 states and 3543 transitions. [2022-10-16 13:15:10,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-10-16 13:15:10,221 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.5) internal successors, (119), 10 states have internal predecessors, (119), 2 states have call successors, (38), 6 states have call predecessors, (38), 5 states have return successors, (26), 2 states have call predecessors, (26), 2 states have call successors, (26) Word has length 157 [2022-10-16 13:15:10,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:10,227 INFO L225 Difference]: With dead ends: 2664 [2022-10-16 13:15:10,227 INFO L226 Difference]: Without dead ends: 1394 [2022-10-16 13:15:10,232 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 361 GetRequests, 340 SyntacticMatches, 1 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 72 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=111, Invalid=351, Unknown=0, NotChecked=0, Total=462 [2022-10-16 13:15:10,233 INFO L413 NwaCegarLoop]: 671 mSDtfsCounter, 461 mSDsluCounter, 2642 mSDsCounter, 0 mSdLazyCounter, 2396 mSolverCounterSat, 279 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 481 SdHoareTripleChecker+Valid, 3313 SdHoareTripleChecker+Invalid, 2675 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 279 IncrementalHoareTripleChecker+Valid, 2396 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:10,233 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [481 Valid, 3313 Invalid, 2675 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [279 Valid, 2396 Invalid, 0 Unknown, 0 Unchecked, 3.4s Time] [2022-10-16 13:15:10,236 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1394 states. [2022-10-16 13:15:10,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1394 to 1292. [2022-10-16 13:15:10,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1292 states, 968 states have (on average 1.3305785123966942) internal successors, (1288), 1009 states have internal predecessors, (1288), 203 states have call successors, (203), 92 states have call predecessors, (203), 99 states have return successors, (220), 199 states have call predecessors, (220), 203 states have call successors, (220) [2022-10-16 13:15:10,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1292 states to 1292 states and 1711 transitions. [2022-10-16 13:15:10,455 INFO L78 Accepts]: Start accepts. Automaton has 1292 states and 1711 transitions. Word has length 157 [2022-10-16 13:15:10,455 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:10,455 INFO L495 AbstractCegarLoop]: Abstraction has 1292 states and 1711 transitions. [2022-10-16 13:15:10,456 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 8.5) internal successors, (119), 10 states have internal predecessors, (119), 2 states have call successors, (38), 6 states have call predecessors, (38), 5 states have return successors, (26), 2 states have call predecessors, (26), 2 states have call successors, (26) [2022-10-16 13:15:10,456 INFO L276 IsEmpty]: Start isEmpty. Operand 1292 states and 1711 transitions. [2022-10-16 13:15:10,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 155 [2022-10-16 13:15:10,459 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:10,460 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:10,510 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-10-16 13:15:10,674 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:15:10,675 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:15:10,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:10,676 INFO L85 PathProgramCache]: Analyzing trace with hash 1104593262, now seen corresponding path program 2 times [2022-10-16 13:15:10,676 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:10,677 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1488142690] [2022-10-16 13:15:10,677 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:10,677 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:10,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:11,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:15:11,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-10-16 13:15:11,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-10-16 13:15:11,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-10-16 13:15:11,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:11,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:11,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-10-16 13:15:11,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-10-16 13:15:11,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:11,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:11,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 105 [2022-10-16 13:15:11,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:11,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2022-10-16 13:15:11,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:11,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:11,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2022-10-16 13:15:11,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:11,928 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 7 proven. 4 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-10-16 13:15:11,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:11,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1488142690] [2022-10-16 13:15:11,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1488142690] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:15:11,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [986559475] [2022-10-16 13:15:11,929 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-10-16 13:15:11,930 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:15:11,930 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:15:11,933 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:15:11,947 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-10-16 13:15:12,726 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-10-16 13:15:12,726 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-10-16 13:15:12,737 INFO L263 TraceCheckSpWp]: Trace formula consists of 2933 conjuncts, 32 conjunts are in the unsatisfiable core [2022-10-16 13:15:12,743 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:15:12,821 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 37 trivial. 0 not checked. [2022-10-16 13:15:12,821 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:15:12,822 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [986559475] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:15:12,822 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:15:12,822 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [11] total 12 [2022-10-16 13:15:12,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [691660470] [2022-10-16 13:15:12,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:15:12,823 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:15:12,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:12,824 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:15:12,824 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:15:12,824 INFO L87 Difference]: Start difference. First operand 1292 states and 1711 transitions. Second operand has 8 states, 8 states have (on average 12.25) internal successors, (98), 6 states have internal predecessors, (98), 2 states have call successors, (18), 2 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) [2022-10-16 13:15:13,062 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:13,062 INFO L93 Difference]: Finished difference Result 2650 states and 3543 transitions. [2022-10-16 13:15:13,063 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-16 13:15:13,063 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 6 states have internal predecessors, (98), 2 states have call successors, (18), 2 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) Word has length 154 [2022-10-16 13:15:13,064 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:13,069 INFO L225 Difference]: With dead ends: 2650 [2022-10-16 13:15:13,070 INFO L226 Difference]: Without dead ends: 1459 [2022-10-16 13:15:13,075 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 197 GetRequests, 183 SyntacticMatches, 2 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-10-16 13:15:13,075 INFO L413 NwaCegarLoop]: 885 mSDtfsCounter, 309 mSDsluCounter, 4864 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 359 SdHoareTripleChecker+Valid, 5749 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:13,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [359 Valid, 5749 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-16 13:15:13,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1459 states. [2022-10-16 13:15:13,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1459 to 1296. [2022-10-16 13:15:13,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1296 states, 972 states have (on average 1.3292181069958848) internal successors, (1292), 1011 states have internal predecessors, (1292), 203 states have call successors, (203), 92 states have call predecessors, (203), 99 states have return successors, (220), 201 states have call predecessors, (220), 203 states have call successors, (220) [2022-10-16 13:15:13,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1296 states to 1296 states and 1715 transitions. [2022-10-16 13:15:13,233 INFO L78 Accepts]: Start accepts. Automaton has 1296 states and 1715 transitions. Word has length 154 [2022-10-16 13:15:13,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:13,234 INFO L495 AbstractCegarLoop]: Abstraction has 1296 states and 1715 transitions. [2022-10-16 13:15:13,234 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.25) internal successors, (98), 6 states have internal predecessors, (98), 2 states have call successors, (18), 2 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) [2022-10-16 13:15:13,235 INFO L276 IsEmpty]: Start isEmpty. Operand 1296 states and 1715 transitions. [2022-10-16 13:15:13,238 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 161 [2022-10-16 13:15:13,238 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:13,239 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:13,283 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-10-16 13:15:13,453 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:15:13,454 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 21 more)] === [2022-10-16 13:15:13,454 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:13,455 INFO L85 PathProgramCache]: Analyzing trace with hash 103302647, now seen corresponding path program 3 times [2022-10-16 13:15:13,455 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:13,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1595776280] [2022-10-16 13:15:13,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:13,456 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:14,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:15:14,080 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 13:15:14,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:15:14,921 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 13:15:14,921 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 13:15:14,922 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 24 remaining) [2022-10-16 13:15:14,925 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 24 remaining) [2022-10-16 13:15:14,925 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 24 remaining) [2022-10-16 13:15:14,925 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 24 remaining) [2022-10-16 13:15:14,926 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 24 remaining) [2022-10-16 13:15:14,926 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 24 remaining) [2022-10-16 13:15:14,926 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 24 remaining) [2022-10-16 13:15:14,926 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 24 remaining) [2022-10-16 13:15:14,927 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 24 remaining) [2022-10-16 13:15:14,927 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 24 remaining) [2022-10-16 13:15:14,927 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 24 remaining) [2022-10-16 13:15:14,927 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 24 remaining) [2022-10-16 13:15:14,927 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 24 remaining) [2022-10-16 13:15:14,928 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 24 remaining) [2022-10-16 13:15:14,928 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_set_removeErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 24 remaining) [2022-10-16 13:15:14,928 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 24 remaining) [2022-10-16 13:15:14,928 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 24 remaining) [2022-10-16 13:15:14,928 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 24 remaining) [2022-10-16 13:15:14,929 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 24 remaining) [2022-10-16 13:15:14,929 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 24 remaining) [2022-10-16 13:15:14,929 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 24 remaining) [2022-10-16 13:15:14,929 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 24 remaining) [2022-10-16 13:15:14,930 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 24 remaining) [2022-10-16 13:15:14,930 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 24 remaining) [2022-10-16 13:15:14,930 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-10-16 13:15:14,935 INFO L444 BasicCegarLoop]: Path program histogram: [3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:14,940 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 13:15:14,979 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:15:15,289 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 01:15:15 BoogieIcfgContainer [2022-10-16 13:15:15,291 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 13:15:15,291 INFO L158 Benchmark]: Toolchain (without parser) took 76371.84ms. Allocated memory was 158.3MB in the beginning and 879.8MB in the end (delta: 721.4MB). Free memory was 121.2MB in the beginning and 664.7MB in the end (delta: -543.4MB). Peak memory consumption was 557.6MB. Max. memory is 8.0GB. [2022-10-16 13:15:15,292 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 158.3MB. Free memory is still 128.0MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:15:15,296 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2734.63ms. Allocated memory was 158.3MB in the beginning and 204.5MB in the end (delta: 46.1MB). Free memory was 121.0MB in the beginning and 145.8MB in the end (delta: -24.7MB). Peak memory consumption was 103.9MB. Max. memory is 8.0GB. [2022-10-16 13:15:15,297 INFO L158 Benchmark]: Boogie Procedure Inliner took 289.29ms. Allocated memory is still 204.5MB. Free memory was 145.8MB in the beginning and 134.2MB in the end (delta: 11.5MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. [2022-10-16 13:15:15,297 INFO L158 Benchmark]: Boogie Preprocessor took 206.72ms. Allocated memory is still 204.5MB. Free memory was 134.2MB in the beginning and 122.7MB in the end (delta: 11.5MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. [2022-10-16 13:15:15,297 INFO L158 Benchmark]: RCFGBuilder took 2939.76ms. Allocated memory was 204.5MB in the beginning and 352.3MB in the end (delta: 147.8MB). Free memory was 122.7MB in the beginning and 257.0MB in the end (delta: -134.3MB). Peak memory consumption was 53.5MB. Max. memory is 8.0GB. [2022-10-16 13:15:15,298 INFO L158 Benchmark]: TraceAbstraction took 70185.08ms. Allocated memory was 352.3MB in the beginning and 879.8MB in the end (delta: 527.4MB). Free memory was 256.5MB in the beginning and 664.7MB in the end (delta: -408.2MB). Peak memory consumption was 497.8MB. Max. memory is 8.0GB. [2022-10-16 13:15:15,302 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 158.3MB. Free memory is still 128.0MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 2734.63ms. Allocated memory was 158.3MB in the beginning and 204.5MB in the end (delta: 46.1MB). Free memory was 121.0MB in the beginning and 145.8MB in the end (delta: -24.7MB). Peak memory consumption was 103.9MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 289.29ms. Allocated memory is still 204.5MB. Free memory was 145.8MB in the beginning and 134.2MB in the end (delta: 11.5MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. * Boogie Preprocessor took 206.72ms. Allocated memory is still 204.5MB. Free memory was 134.2MB in the beginning and 122.7MB in the end (delta: 11.5MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. * RCFGBuilder took 2939.76ms. Allocated memory was 204.5MB in the beginning and 352.3MB in the end (delta: 147.8MB). Free memory was 122.7MB in the beginning and 257.0MB in the end (delta: -134.3MB). Peak memory consumption was 53.5MB. Max. memory is 8.0GB. * TraceAbstraction took 70185.08ms. Allocated memory was 352.3MB in the beginning and 879.8MB in the end (delta: 527.4MB). Free memory was 256.5MB in the beginning and 664.7MB in the end (delta: -408.2MB). Peak memory consumption was 497.8MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 6544]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 7822, overapproximation of bitwiseOr at line 6254, overapproximation of bitwiseAnd at line 6989. Possible FailurePath: [L6401] int LDV_IN_INTERRUPT = 1; [L6402] int ldv_timer_1_0 ; [L6403] struct timer_list *ldv_timer_list_1_3 ; [L6404] int ldv_timer_1_3 ; [L6405] struct timer_list *ldv_timer_list_1_1 ; [L6406] struct timer_list *ldv_timer_list_1_0 ; [L6407] int ldv_state_variable_0 ; [L6408] int ldv_timer_1_2 ; [L6409] int ldv_timer_1_1 ; [L6410] int ldv_state_variable_2 ; [L6411] struct timer_list *ldv_timer_list_1_2 ; [L6412] int ref_cnt ; [L6413] int ldv_state_variable_1 ; [L6414] int usb_counter ; [L6415] struct usb_interface *if_usb_driver_group1 ; [L6569-L6574] static struct lbs_fw_table const fw_table[6U] = { {1, "libertas/usb8388_olpc.bin", (char const *)0}, {1, "libertas/usb8388_v9.bin", (char const *)0}, {1, "libertas/usb8388_v5.bin", (char const *)0}, {1, "libertas/usb8388.bin", (char const *)0}, {1, "usb8388.bin", (char const *)0}, {2, "libertas/usb8682.bin", (char const *)0}}; [L6575-L6580] static struct usb_device_id if_usb_table[3U] = { {3U, 4742U, 8193U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1UL}, {3U, 1443U, 33672U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1UL}}; [L6581] struct usb_device_id const __mod_usb__if_usb_table_device_table ; [L7802-L7817] static struct usb_driver if_usb_driver = {"usb8xxx", & if_usb_probe, & if_usb_disconnect, 0, & if_usb_suspend, & if_usb_resume, & if_usb_resume, 0, 0, (struct usb_device_id const *)(& if_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, 1U, (unsigned char)0}; [L7833] int ldv_retval_0 ; [L7834] int ldv_retval_4 ; [L7835] int ldv_retval_1 ; [L7838] int ldv_retval_3 ; [L7839] int ldv_retval_2 ; [L8349] Element set_impl[15] ; [L8350] int last_index = 0; [L8484] Set LDV_SKBS ; VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L8028] struct usb_device_id *ldvarg1 ; [L8029] void *tmp ; [L8030] pm_message_t ldvarg0 ; [L8031] int tmp___0 ; [L8032] int tmp___1 ; [L8033] int tmp___2 ; VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={183:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L8035] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6343] void *p ; [L6344] void *tmp ; [L6345] int tmp___0 ; [L6347] tmp___0 = __VERIFIER_nondet_int() [L6348] COND TRUE tmp___0 != 0 [L6349] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, size=32, tmp___0=1, usb_counter=0] [L8035] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldv_zalloc(32UL)={0:0}, ldvarg0={183:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L8035] tmp = ldv_zalloc(32UL) [L8036] ldvarg1 = (struct usb_device_id *)tmp [L8037] CALL ldv_initialize() [L8503] CALL ldv_set_init(LDV_SKBS) [L8355] set = set_impl [L8356] last_index = 0 VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set={0:0}, set={181:0}, set_impl={181:0}, usb_counter=0] [L8503] RET ldv_set_init(LDV_SKBS) [L8037] RET ldv_initialize() [L8038] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={183:0}, ldvarg1={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={183:0}, ref_cnt=0, set_impl={181:0}, tmp={0:0}, usb_counter=0] [L8039] CALL timer_init_1() [L7877] ldv_timer_1_0 = 0 [L7878] ldv_timer_1_1 = 0 [L7879] ldv_timer_1_2 = 0 [L7880] ldv_timer_1_3 = 0 VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L8039] RET timer_init_1() [L8040] ldv_state_variable_1 = 1 [L8041] ref_cnt = 0 [L8042] ldv_state_variable_0 = 1 [L8043] ldv_state_variable_2 = 0 VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={183:0}, ldvarg1={0:0}, ref_cnt=0, set_impl={181:0}, tmp={0:0}, usb_counter=0] [L8045] tmp___0 = __VERIFIER_nondet_int() [L8047] case 0: [L8053] case 1: VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={183:0}, ldvarg1={0:0}, ref_cnt=0, set_impl={181:0}, tmp={0:0}, tmp___0=1, usb_counter=0] [L8054] COND TRUE ldv_state_variable_0 != 0 [L8055] tmp___1 = __VERIFIER_nondet_int() [L8057] case 0: [L8065] case 1: VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={183:0}, ldvarg1={0:0}, ref_cnt=0, set_impl={181:0}, tmp={0:0}, tmp___0=1, tmp___1=1, usb_counter=0] [L8066] COND TRUE ldv_state_variable_0 == 1 [L8067] CALL, EXPR if_usb_driver_init() [L7820] int tmp ; [L7822] CALL, EXPR ldv_usb_register_driver_29(& if_usb_driver, & __this_module, "usb8xxx") [L8329] ldv_func_ret_type___1 ldv_func_res ; [L8330] int tmp ; [L8332] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8689] return __VERIFIER_nondet_int(); [L8332] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8332] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8333] ldv_func_res = tmp [L8334] ldv_state_variable_2 = 1 [L8335] usb_counter = 0 [L8336] CALL ldv_usb_driver_2() [L7886] void *tmp ; VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L7888] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6343] void *p ; [L6344] void *tmp ; [L6345] int tmp___0 ; [L6347] tmp___0 = __VERIFIER_nondet_int() [L6348] COND TRUE tmp___0 != 0 [L6349] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, size=1560, tmp___0=1, usb_counter=0] [L7888] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldv_zalloc(1560UL)={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L7888] tmp = ldv_zalloc(1560UL) [L7889] if_usb_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, tmp={0:0}, usb_counter=0] [L8336] RET ldv_usb_driver_2() [L8337] return (ldv_func_res); VAL [\result=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, ldv_func_arg1={180:0}, ldv_func_arg1={180:0}, ldv_func_arg2={4027448018:4027448027}, ldv_func_arg2={4027448018:4027448027}, ldv_func_arg3={177:0}, ldv_func_arg3={177:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, tmp=0, usb_counter=0] [L7822] RET, EXPR ldv_usb_register_driver_29(& if_usb_driver, & __this_module, "usb8xxx") [L7822] tmp = ldv_usb_register_driver_29(& if_usb_driver, & __this_module, "usb8xxx") [L7823] return (tmp); VAL [\result=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, tmp=0, usb_counter=0] [L8067] RET, EXPR if_usb_driver_init() [L8067] ldv_retval_0 = if_usb_driver_init() [L8068] COND TRUE ldv_retval_0 == 0 [L8069] ldv_state_variable_0 = 3 VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={183:0}, ldvarg1={0:0}, ref_cnt=0, set_impl={181:0}, tmp={0:0}, tmp___0=1, tmp___1=1, usb_counter=0] [L8072] COND FALSE !(ldv_retval_0 != 0) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={183:0}, ldvarg1={0:0}, ref_cnt=0, set_impl={181:0}, tmp={0:0}, tmp___0=1, tmp___1=1, usb_counter=0] [L8045] tmp___0 = __VERIFIER_nondet_int() [L8047] case 0: [L8053] case 1: [L8087] case 2: VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={183:0}, ldvarg1={0:0}, ref_cnt=0, set_impl={181:0}, tmp={0:0}, tmp___0=2, tmp___1=1, usb_counter=0] [L8088] COND TRUE ldv_state_variable_2 != 0 [L8089] tmp___2 = __VERIFIER_nondet_int() [L8091] case 0: VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={183:0}, ldvarg1={0:0}, ref_cnt=0, set_impl={181:0}, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2=0, usb_counter=0] [L8092] COND TRUE ldv_state_variable_2 == 1 [L8093] CALL if_usb_probe(if_usb_driver_group1, (struct usb_device_id const *)ldvarg1) [L6715] struct usb_device *udev ; [L6716] struct usb_host_interface *iface_desc ; [L6717] struct usb_endpoint_descriptor *endpoint ; [L6718] struct lbs_private *priv ; [L6719] struct if_usb_card *cardp ; [L6720] int r ; [L6721] int i ; [L6722] void *tmp ; [L6723] struct lock_class_key __key ; [L6724] char const *tmp___0 ; [L6725] int tmp___1 ; [L6726] int tmp___2 ; [L6727] char const *tmp___3 ; [L6728] int tmp___4 ; [L6729] char const *tmp___5 ; [L6730] int tmp___6 ; [L6731] int tmp___7 ; [L6732] char const *tmp___8 ; [L6733] int tmp___9 ; [L6734] char const *tmp___10 ; [L6735] int tmp___11 ; [L6736] int tmp___12 ; [L6737] int tmp___13 ; [L6738] char const *tmp___14 ; [L6739] int tmp___15 ; [L6740] char const *tmp___16 ; [L6741] int tmp___17 ; [L6742] struct urb *tmp___18 ; [L6743] char const *tmp___19 ; [L6744] int tmp___20 ; [L6745] struct urb *tmp___21 ; [L6746] char const *tmp___22 ; [L6747] int tmp___23 ; [L6749] r = -12 VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, intf={0:0}, intf={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6750] CALL, EXPR interface_to_usbdev(intf) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, intf={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6508] struct device const *__mptr ; [L6510] EXPR intf->dev.parent [L6510] __mptr = (struct device const *)intf->dev.parent [L6511] return ((struct usb_device *)__mptr + 0xffffffffffffff70UL); VAL [\result={-4294967295:184}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mptr={-4294967295:174280}, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, intf={0:0}, intf={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6750] RET, EXPR interface_to_usbdev(intf) VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, interface_to_usbdev(intf)={-4294967295:184}, intf={0:0}, intf={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6750] udev = interface_to_usbdev(intf) [L6751] CALL, EXPR kzalloc(320UL, 208U) [L6252] void *tmp ; VAL [\old(flags)=208, \old(size)=320, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, flags=208, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, size=320, usb_counter=0] [L6254] CALL, EXPR kmalloc(size, flags | 32768U) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6243] void *tmp___2 ; [L6245] CALL, EXPR __kmalloc(size, flags) [L6232] CALL, EXPR ldv_malloc(size) VAL [\old(size)=320, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6326] void *p ; [L6327] void *tmp ; [L6328] int tmp___0 ; [L6330] tmp___0 = __VERIFIER_nondet_int() [L6331] COND FALSE !(tmp___0 != 0) [L6334] tmp = malloc(size) [L6335] p = tmp VAL [\old(size)=320, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-4294967297:0}, ref_cnt=0, set_impl={181:0}, size=320, tmp={-4294967297:0}, tmp___0=0, usb_counter=0] [L6336] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6322] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cond=1, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6336] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=320, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-4294967297:0}, ref_cnt=0, set_impl={181:0}, size=320, tmp={-4294967297:0}, tmp___0=0, usb_counter=0] [L6337] return (p); VAL [\old(size)=320, \result={-4294967297:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-4294967297:0}, ref_cnt=0, set_impl={181:0}, size=320, tmp={-4294967297:0}, tmp___0=0, usb_counter=0] [L6232] RET, EXPR ldv_malloc(size) VAL [\old(size)=320, \old(t)=4027448026, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(size)={-4294967297:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, size=320, t=4027448026, usb_counter=0] [L6232] return ldv_malloc(size); [L6245] RET, EXPR __kmalloc(size, flags) [L6245] tmp___2 = __kmalloc(size, flags) [L6246] return (tmp___2); VAL [\old(flags)=4027448026, \old(size)=320, \result={-4294967297:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, flags=4027448026, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, size=320, tmp___2={-4294967297:0}, usb_counter=0] [L6254] RET, EXPR kmalloc(size, flags | 32768U) VAL [\old(flags)=208, \old(size)=320, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, flags=208, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, kmalloc(size, flags | 32768U)={-4294967297:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, size=320, usb_counter=0] [L6254] tmp = kmalloc(size, flags | 32768U) [L6255] return (tmp); VAL [\old(flags)=208, \old(size)=320, \result={-4294967297:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, flags=208, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, size=320, tmp={-4294967297:0}, usb_counter=0] [L6751] RET, EXPR kzalloc(320UL, 208U) [L6751] tmp = kzalloc(320UL, 208U) [L6752] cardp = (struct if_usb_card *)tmp VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, intf={0:0}, intf={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, udev={-4294967295:184}, usb_counter=0] [L6753] COND FALSE !((unsigned long )cardp == (unsigned long )((struct if_usb_card *)0)) [L6757] CALL reg_timer_1(& cardp->fw_timeout, & if_usb_fw_timeo, (unsigned long )cardp) [L7984] COND TRUE (unsigned long )function == (unsigned long )(& if_usb_fw_timeo) VAL [\old(data)=4294967295, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, data=4294967295, function={-1:1}, function={-1:1}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, timer={-4294967297:43}, timer={-4294967297:43}, usb_counter=0] [L7985] CALL activate_suitable_timer_1(timer, data) VAL [\old(data)=4294967295, \old(ldv_timer_1_0)=0, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=0, \old(ldv_timer_list_1_0)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, timer={-4294967297:43}, usb_counter=0] [L7843] COND TRUE ldv_timer_1_0 == 0 || ldv_timer_1_0 == 2 [L7844] ldv_timer_list_1_0 = timer [L7845] ldv_timer_list_1_0->data = data [L7846] ldv_timer_1_0 = 1 VAL [\old(data)=4294967295, \old(ldv_timer_1_0)=0, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=0, \old(ldv_timer_list_1_0)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, data=4294967295, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, timer={-4294967297:43}, timer={-4294967297:43}, usb_counter=0] [L7985] RET activate_suitable_timer_1(timer, data) VAL [\old(data)=4294967295, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, data=4294967295, function={-1:1}, function={-1:1}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, timer={-4294967297:43}, timer={-4294967297:43}, usb_counter=0] [L7988] return (0); VAL [\old(data)=4294967295, \result=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, data=4294967295, function={-1:1}, function={-1:1}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, timer={-4294967297:43}, timer={-4294967297:43}, usb_counter=0] [L6757] RET reg_timer_1(& cardp->fw_timeout, & if_usb_fw_timeo, (unsigned long )cardp) [L6758] FCALL __init_waitqueue_head(& cardp->fw_wq, "&cardp->fw_wq", & __key) [L6759] cardp->udev = udev [L6760] EXPR id->driver_info [L6760] cardp->model = (unsigned int )id->driver_info [L6761] EXPR intf->cur_altsetting [L6761] iface_desc = intf->cur_altsetting [L6762] COND FALSE !((lbs_debug & 131072U) != 0U) VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, udev={-4294967295:184}, usb_counter=0] [L6771] i = 0 VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, udev={-4294967295:184}, usb_counter=0] [L6819] EXPR iface_desc->desc.bNumEndpoints VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, iface_desc->desc.bNumEndpoints=512, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, udev={-4294967295:184}, usb_counter=0] [L6819] COND FALSE !((int )iface_desc->desc.bNumEndpoints > i) [L6823] EXPR cardp->ep_out_size [L6823] cardp->ep_out_size == 0 || cardp->ep_in_size == 0 [L6823] EXPR cardp->ep_in_size [L6823] cardp->ep_out_size == 0 || cardp->ep_in_size == 0 VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, cardp->ep_in_size=4027448033, cardp->ep_out_size=4027448031, cardp->ep_out_size == 0 || cardp->ep_in_size == 0=0, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, udev={-4294967295:184}, usb_counter=0] [L6823] COND FALSE !(cardp->ep_out_size == 0 || cardp->ep_in_size == 0) [L6834] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L8670] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(size)=132, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6326] void *p ; [L6327] void *tmp ; [L6328] int tmp___0 ; [L6330] tmp___0 = __VERIFIER_nondet_int() [L6331] COND FALSE !(tmp___0 != 0) [L6334] tmp = malloc(size) [L6335] p = tmp VAL [\old(size)=132, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-8589934591:0}, ref_cnt=0, set_impl={181:0}, size=132, tmp={-8589934591:0}, tmp___0=0, usb_counter=0] [L6336] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6322] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cond=1, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6336] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=132, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-8589934591:0}, ref_cnt=0, set_impl={181:0}, size=132, tmp={-8589934591:0}, tmp___0=0, usb_counter=0] [L6337] return (p); VAL [\old(size)=132, \result={-8589934591:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-8589934591:0}, ref_cnt=0, set_impl={181:0}, size=132, tmp={-8589934591:0}, tmp___0=0, usb_counter=0] [L8670] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, arg0=0, arg1=208, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-8589934591:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L8670] return ldv_malloc(sizeof(struct urb)); [L6834] RET, EXPR usb_alloc_urb(0, 208U) VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, udev={-4294967295:184}, usb_alloc_urb(0, 208U)={-8589934591:0}, usb_counter=0] [L6834] tmp___18 = usb_alloc_urb(0, 208U) [L6835] cardp->rx_urb = tmp___18 VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, tmp___18={-8589934591:0}, udev={-4294967295:184}, usb_counter=0] [L6836] COND FALSE !((unsigned long )tmp___18 == (unsigned long )((struct urb *)0)) VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, tmp___18={-8589934591:0}, udev={-4294967295:184}, usb_counter=0] [L6847] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L8670] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(size)=132, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6326] void *p ; [L6327] void *tmp ; [L6328] int tmp___0 ; [L6330] tmp___0 = __VERIFIER_nondet_int() [L6331] COND FALSE !(tmp___0 != 0) [L6334] tmp = malloc(size) [L6335] p = tmp VAL [\old(size)=132, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-12884901887:0}, ref_cnt=0, set_impl={181:0}, size=132, tmp={-12884901887:0}, tmp___0=0, usb_counter=0] [L6336] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6322] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cond=1, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6336] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=132, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-12884901887:0}, ref_cnt=0, set_impl={181:0}, size=132, tmp={-12884901887:0}, tmp___0=0, usb_counter=0] [L6337] return (p); VAL [\old(size)=132, \result={-12884901887:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-12884901887:0}, ref_cnt=0, set_impl={181:0}, size=132, tmp={-12884901887:0}, tmp___0=0, usb_counter=0] [L8670] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, arg0=0, arg1=208, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-12884901887:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L8670] return ldv_malloc(sizeof(struct urb)); [L6847] RET, EXPR usb_alloc_urb(0, 208U) VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, tmp___18={-8589934591:0}, udev={-4294967295:184}, usb_alloc_urb(0, 208U)={-12884901887:0}, usb_counter=0] [L6847] tmp___21 = usb_alloc_urb(0, 208U) [L6848] cardp->tx_urb = tmp___21 VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, tmp___18={-8589934591:0}, tmp___21={-12884901887:0}, udev={-4294967295:184}, usb_counter=0] [L6849] COND FALSE !((unsigned long )tmp___21 == (unsigned long )((struct urb *)0)) VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, tmp___18={-8589934591:0}, tmp___21={-12884901887:0}, udev={-4294967295:184}, usb_counter=0] [L6860] CALL, EXPR kmalloc(1574UL, 208U) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6243] void *tmp___2 ; [L6245] CALL, EXPR __kmalloc(size, flags) [L6232] CALL, EXPR ldv_malloc(size) VAL [\old(size)=1574, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6326] void *p ; [L6327] void *tmp ; [L6328] int tmp___0 ; [L6330] tmp___0 = __VERIFIER_nondet_int() [L6331] COND FALSE !(tmp___0 != 0) [L6334] tmp = malloc(size) [L6335] p = tmp VAL [\old(size)=1574, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-4294967295:0}, ref_cnt=0, set_impl={181:0}, size=1574, tmp={-4294967295:0}, tmp___0=0, usb_counter=0] [L6336] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6322] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cond=1, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6336] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=1574, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-4294967295:0}, ref_cnt=0, set_impl={181:0}, size=1574, tmp={-4294967295:0}, tmp___0=0, usb_counter=0] [L6337] return (p); VAL [\old(size)=1574, \result={-4294967295:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-4294967295:0}, ref_cnt=0, set_impl={181:0}, size=1574, tmp={-4294967295:0}, tmp___0=0, usb_counter=0] [L6232] RET, EXPR ldv_malloc(size) VAL [\old(size)=1574, \old(t)=208, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_malloc(size)={-4294967295:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, size=1574, t=208, usb_counter=0] [L6232] return ldv_malloc(size); [L6245] RET, EXPR __kmalloc(size, flags) [L6245] tmp___2 = __kmalloc(size, flags) [L6246] return (tmp___2); VAL [\old(flags)=208, \old(size)=1574, \result={-4294967295:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, flags=208, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, size=1574, tmp___2={-4294967295:0}, usb_counter=0] [L6860] RET, EXPR kmalloc(1574UL, 208U) VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, kmalloc(1574UL, 208U)={-4294967295:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, tmp___18={-8589934591:0}, tmp___21={-12884901887:0}, udev={-4294967295:184}, usb_counter=0] [L6860] cardp->ep_out_buf = kmalloc(1574UL, 208U) [L6861] EXPR cardp->ep_out_buf VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, cardp->ep_out_buf={-4294967295:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, tmp___18={-8589934591:0}, tmp___21={-12884901887:0}, udev={-4294967295:184}, usb_counter=0] [L6861] COND FALSE !((unsigned long )cardp->ep_out_buf == (unsigned long )((void *)0)) [L6872] CALL, EXPR lbs_add_card((void *)cardp, & intf->dev) [L8591] CALL, EXPR ldv_malloc(sizeof(struct lbs_private)) VAL [\old(size)=8422, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6326] void *p ; [L6327] void *tmp ; [L6328] int tmp___0 ; [L6330] tmp___0 = __VERIFIER_nondet_int() [L6331] COND TRUE tmp___0 != 0 [L6332] return ((void *)0); VAL [\old(size)=8422, \result={0:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, size=8422, tmp___0=1, usb_counter=0] [L8591] RET, EXPR ldv_malloc(sizeof(struct lbs_private)) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, arg0={-4294967297:0}, arg0={-4294967297:0}, arg1={0:32}, arg1={0:32}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct lbs_private))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L8591] return ldv_malloc(sizeof(struct lbs_private)); [L6872] RET, EXPR lbs_add_card((void *)cardp, & intf->dev) [L6872] priv = lbs_add_card((void *)cardp, & intf->dev) [L6873] COND TRUE (unsigned long )priv == (unsigned long )((struct lbs_private *)0) VAL [__key={182:0}, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448023:-7}, intf={0:0}, intf={0:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, priv={0:0}, r=-12, ref_cnt=0, set_impl={181:0}, tmp={-4294967297:0}, tmp___18={-8589934591:0}, tmp___21={-12884901887:0}, udev={-4294967295:184}, usb_counter=0] [L6895] CALL if_usb_reset_device(cardp) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6983] struct cmd_header *cmd ; [L6984] int ret ; [L6985] int tmp ; [L6986] int tmp___0 ; [L6988] EXPR cardp->ep_out_buf [L6988] cmd = (struct cmd_header *)cardp->ep_out_buf + 4U [L6989] COND FALSE !((lbs_debug & 131073U) == 131073U) VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, cardp={-4294967297:0}, cmd={-4294967295:32}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6995] EXPR cardp->ep_out_buf [L6995] *((__le32 *)cardp->ep_out_buf) = 4027448014U [L6996] cmd->command = 5U [L6997] cmd->size = 8U [L6998] cmd->result = 0U [L6999] cmd->seqnum = 23130U [L7000] EXPR cardp->ep_out_buf VAL [__mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, cardp={-4294967297:0}, cardp->ep_out_buf={-4294967295:0}, cmd={-4294967295:32}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L7000] CALL usb_tx_block(cardp, (uint8_t *)cardp->ep_out_buf, 12) VAL [\old(nb)=12, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, payload={-4294967295:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L7015] int ret ; [L7016] char const *tmp ; [L7017] int tmp___0 ; [L7018] unsigned int tmp___1 ; [L7019] char const *tmp___2 ; [L7020] int tmp___3 ; [L7022] EXPR cardp->surprise_removed VAL [\old(nb)=12, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, cardp={-4294967297:0}, cardp->surprise_removed=256, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, nb=12, payload={-4294967295:0}, payload={-4294967295:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L7022] COND FALSE !((unsigned int )cardp->surprise_removed != 0U) [L7034] EXPR cardp->udev [L7034] EXPR cardp->ep_out VAL [\old(nb)=12, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, cardp={-4294967297:0}, cardp={-4294967297:0}, cardp->ep_out=185, cardp->udev={-4294967295:184}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, nb=12, payload={-4294967295:0}, payload={-4294967295:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L7034] CALL __create_pipe(cardp->udev, (unsigned int )cardp->ep_out) VAL [\old(endpoint)=185, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, dev={-4294967295:184}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6544] EXPR dev->devnum VAL [\old(endpoint)=185, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, dev={-4294967295:184}, dev={-4294967295:184}, dev->devnum=8388608, endpoint=185, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] [L6544] dev->devnum << 8 VAL [\old(endpoint)=185, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __mod_usb__if_usb_table_device_table=0, __this_module={4027448018:4027448027}, dev={-4294967295:184}, dev={-4294967295:184}, dev->devnum=8388608, endpoint=185, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, last_index=0, lbs_debug=4027448029, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-4294967297:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, set_impl={181:0}, usb_counter=0] - UnprovableResult [Line: 8375]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8375]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8379]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8379]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8403]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8403]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8406]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8406]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8412]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8412]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8413]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8413]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8415]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8415]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6544]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6817]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6817]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8096]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8096]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8116]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8116]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8122]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8122]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 37 procedures, 568 locations, 24 error locations. Started 1 CEGAR loops. OverallTime: 69.7s, OverallIterations: 22, TraceHistogramMax: 5, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.1s, AutomataDifference: 38.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 16921 SdHoareTripleChecker+Valid, 33.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 15889 mSDsluCounter, 66322 SdHoareTripleChecker+Invalid, 29.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 48603 mSDsCounter, 6340 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 19747 IncrementalHoareTripleChecker+Invalid, 26087 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 6340 mSolverCounterUnsat, 17719 mSDtfsCounter, 19747 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2079 GetRequests, 1871 SyntacticMatches, 8 SemanticMatches, 200 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 213 ImplicationChecksByTransitivity, 2.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2374occurred in iteration=12, InterpolantAutomatonStates: 164, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.9s AutomataMinimizationTime, 21 MinimizatonAttempts, 7260 StatesRemovedByMinimization, 21 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.8s SsaConstructionTime, 6.1s SatisfiabilityAnalysisTime, 15.4s InterpolantComputationTime, 3747 NumberOfCodeBlocks, 3747 NumberOfCodeBlocksAsserted, 33 NumberOfCheckSat, 3825 ConstructedInterpolants, 0 QuantifiedInterpolants, 6925 SizeOfPredicates, 48 NumberOfNonLiveVariables, 24526 ConjunctsInSsa, 199 ConjunctsInUnsatCore, 32 InterpolantComputations, 19 PerfectInterpolantSequences, 1494/1604 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-16 13:15:15,344 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...