/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 13:14:13,049 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 13:14:13,054 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 13:14:13,106 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 13:14:13,107 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 13:14:13,110 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 13:14:13,114 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 13:14:13,123 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 13:14:13,140 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 13:14:13,147 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 13:14:13,148 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 13:14:13,150 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 13:14:13,151 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 13:14:13,155 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 13:14:13,157 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 13:14:13,163 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 13:14:13,164 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 13:14:13,165 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 13:14:13,169 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 13:14:13,179 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 13:14:13,183 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 13:14:13,185 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 13:14:13,186 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 13:14:13,187 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 13:14:13,195 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 13:14:13,195 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 13:14:13,196 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 13:14:13,197 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 13:14:13,197 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 13:14:13,199 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 13:14:13,200 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 13:14:13,201 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 13:14:13,203 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 13:14:13,204 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 13:14:13,205 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 13:14:13,205 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 13:14:13,206 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 13:14:13,206 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 13:14:13,206 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 13:14:13,207 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 13:14:13,208 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 13:14:13,209 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 13:14:13,265 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 13:14:13,265 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 13:14:13,266 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 13:14:13,266 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 13:14:13,267 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 13:14:13,268 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 13:14:13,270 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 13:14:13,271 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 13:14:13,271 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 13:14:13,271 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 13:14:13,272 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 13:14:13,272 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 13:14:13,272 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 13:14:13,273 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 13:14:13,273 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 13:14:13,273 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 13:14:13,273 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 13:14:13,273 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 13:14:13,274 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 13:14:13,274 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 13:14:13,274 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 13:14:13,274 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 13:14:13,274 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 13:14:13,275 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 13:14:13,275 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 13:14:13,275 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 13:14:13,275 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:14:13,275 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 13:14:13,276 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 13:14:13,276 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 13:14:13,276 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 13:14:13,276 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 13:14:13,277 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 13:14:13,277 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 13:14:13,645 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 13:14:13,672 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 13:14:13,675 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 13:14:13,676 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 13:14:13,678 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 13:14:13,680 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2022-10-16 13:14:13,766 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e146104cb/75fee9aa10f044c4a3bf178a3c4dcfcc/FLAGef3177e23 [2022-10-16 13:14:14,889 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 13:14:14,890 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2022-10-16 13:14:14,948 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e146104cb/75fee9aa10f044c4a3bf178a3c4dcfcc/FLAGef3177e23 [2022-10-16 13:14:15,323 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e146104cb/75fee9aa10f044c4a3bf178a3c4dcfcc [2022-10-16 13:14:15,326 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 13:14:15,332 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 13:14:15,334 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 13:14:15,334 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 13:14:15,339 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 13:14:15,339 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:14:15" (1/1) ... [2022-10-16 13:14:15,341 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3f3ac931 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:15, skipping insertion in model container [2022-10-16 13:14:15,341 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:14:15" (1/1) ... [2022-10-16 13:14:15,350 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 13:14:15,551 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 13:14:16,579 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2022-10-16 13:14:17,779 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:14:17,873 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 13:14:18,080 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2022-10-16 13:14:18,370 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:14:18,570 INFO L208 MainTranslator]: Completed translation [2022-10-16 13:14:18,571 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18 WrapperNode [2022-10-16 13:14:18,571 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 13:14:18,573 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 13:14:18,573 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 13:14:18,573 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 13:14:18,583 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:18,689 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:18,923 INFO L138 Inliner]: procedures = 188, calls = 2240, calls flagged for inlining = 91, calls inlined = 86, statements flattened = 5077 [2022-10-16 13:14:18,924 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 13:14:18,925 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 13:14:18,926 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 13:14:18,926 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 13:14:18,937 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:18,937 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:18,992 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:18,994 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:19,165 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:19,191 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:19,217 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:19,240 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:19,289 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 13:14:19,291 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 13:14:19,291 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 13:14:19,292 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 13:14:19,293 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (1/1) ... [2022-10-16 13:14:19,302 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:14:19,318 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:19,335 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 13:14:19,362 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 13:14:19,416 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2022-10-16 13:14:19,416 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2022-10-16 13:14:19,416 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-10-16 13:14:19,417 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-10-16 13:14:19,417 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-16 13:14:19,417 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_host [2022-10-16 13:14:19,417 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_host [2022-10-16 13:14:19,417 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_to_card [2022-10-16 13:14:19,417 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_to_card [2022-10-16 13:14:19,418 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-16 13:14:19,418 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-16 13:14:19,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-16 13:14:19,418 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-16 13:14:19,418 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 13:14:19,418 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_get_host_pm_caps [2022-10-16 13:14:19,419 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_get_host_pm_caps [2022-10-16 13:14:19,419 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_sync [2022-10-16 13:14:19,419 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_sync [2022-10-16 13:14:19,419 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-10-16 13:14:19,419 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-10-16 13:14:19,419 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_card_to_host [2022-10-16 13:14:19,420 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_card_to_host [2022-10-16 13:14:19,420 INFO L130 BoogieDeclarations]: Found specification of procedure mp_tx_aggr_port_limit_reached [2022-10-16 13:14:19,420 INFO L138 BoogieDeclarations]: Found implementation of procedure mp_tx_aggr_port_limit_reached [2022-10-16 13:14:19,420 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 13:14:19,420 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 13:14:19,420 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2022-10-16 13:14:19,421 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2022-10-16 13:14:19,421 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-10-16 13:14:19,421 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-10-16 13:14:19,421 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-10-16 13:14:19,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-10-16 13:14:19,421 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-10-16 13:14:19,422 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-10-16 13:14:19,422 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2022-10-16 13:14:19,422 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2022-10-16 13:14:19,422 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2022-10-16 13:14:19,422 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2022-10-16 13:14:19,422 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 13:14:19,423 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2022-10-16 13:14:19,423 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2022-10-16 13:14:19,423 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 13:14:19,423 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 13:14:19,423 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_data_sync [2022-10-16 13:14:19,423 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_data_sync [2022-10-16 13:14:19,424 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-10-16 13:14:19,424 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-10-16 13:14:19,424 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2022-10-16 13:14:19,424 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-16 13:14:19,425 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-16 13:14:19,425 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 13:14:19,426 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-10-16 13:14:19,426 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-10-16 13:14:19,426 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-10-16 13:14:19,426 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-10-16 13:14:19,427 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 13:14:19,427 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_irq [2022-10-16 13:14:19,427 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_irq [2022-10-16 13:14:19,427 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_disable_func [2022-10-16 13:14:19,428 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_disable_func [2022-10-16 13:14:19,428 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 13:14:19,428 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 13:14:19,428 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_claim_host [2022-10-16 13:14:19,428 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_claim_host [2022-10-16 13:14:19,428 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg_locked [2022-10-16 13:14:19,428 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg_locked [2022-10-16 13:14:19,429 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_cmdrsp_complete [2022-10-16 13:14:19,429 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_cmdrsp_complete [2022-10-16 13:14:19,430 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 13:14:19,430 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-10-16 13:14:19,430 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-10-16 13:14:19,431 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-10-16 13:14:19,431 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 13:14:19,432 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2022-10-16 13:14:19,432 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_set_drvdata [2022-10-16 13:14:19,433 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 13:14:19,433 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-10-16 13:14:19,433 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-10-16 13:14:19,433 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-10-16 13:14:19,433 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-10-16 13:14:19,434 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memmove [2022-10-16 13:14:19,434 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memmove [2022-10-16 13:14:19,434 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-10-16 13:14:19,434 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-10-16 13:14:19,434 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2022-10-16 13:14:19,434 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2022-10-16 13:14:19,435 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 13:14:19,435 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_host_to_card_mp_aggr [2022-10-16 13:14:19,436 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_host_to_card_mp_aggr [2022-10-16 13:14:19,436 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_resume [2022-10-16 13:14:19,436 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_resume [2022-10-16 13:14:19,436 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-16 13:14:19,437 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-10-16 13:14:19,437 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-10-16 13:14:19,437 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-10-16 13:14:19,438 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_decode_rx_packet [2022-10-16 13:14:19,439 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_decode_rx_packet [2022-10-16 13:14:19,439 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 13:14:19,439 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 13:14:20,138 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 13:14:20,141 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 13:14:20,272 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-16 13:14:30,373 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 13:14:30,392 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 13:14:30,393 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-10-16 13:14:30,397 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:14:30 BoogieIcfgContainer [2022-10-16 13:14:30,398 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 13:14:30,401 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 13:14:30,401 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 13:14:30,405 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 13:14:30,405 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 01:14:15" (1/3) ... [2022-10-16 13:14:30,406 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a30b51c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:14:30, skipping insertion in model container [2022-10-16 13:14:30,406 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:18" (2/3) ... [2022-10-16 13:14:30,407 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a30b51c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:14:30, skipping insertion in model container [2022-10-16 13:14:30,407 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:14:30" (3/3) ... [2022-10-16 13:14:30,409 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2022-10-16 13:14:30,434 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 13:14:30,434 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 108 error locations. [2022-10-16 13:14:30,532 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 13:14:30,542 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@e2cd017, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 13:14:30,542 INFO L358 AbstractCegarLoop]: Starting to check reachability of 108 error locations. [2022-10-16 13:14:30,554 INFO L276 IsEmpty]: Start isEmpty. Operand has 1332 states, 992 states have (on average 1.5211693548387097) internal successors, (1509), 1112 states have internal predecessors, (1509), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) [2022-10-16 13:14:30,570 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-10-16 13:14:30,570 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:30,571 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:30,572 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW === [mp_tx_aggr_port_limit_reachedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mp_tx_aggr_port_limit_reachedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 106 more)] === [2022-10-16 13:14:30,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:30,578 INFO L85 PathProgramCache]: Analyzing trace with hash -1075086450, now seen corresponding path program 1 times [2022-10-16 13:14:30,592 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:30,592 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1735226109] [2022-10-16 13:14:30,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:30,593 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:31,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:31,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:14:31,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:14:31,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:14:31,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:31,434 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-10-16 13:14:31,435 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:31,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1735226109] [2022-10-16 13:14:31,437 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1735226109] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:31,437 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:31,437 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-10-16 13:14:31,440 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1170470327] [2022-10-16 13:14:31,441 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:31,447 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-16 13:14:31,448 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:31,485 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-16 13:14:31,485 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-16 13:14:31,491 INFO L87 Difference]: Start difference. First operand has 1332 states, 992 states have (on average 1.5211693548387097) internal successors, (1509), 1112 states have internal predecessors, (1509), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) Second operand has 3 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:14:33,663 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:38,730 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:39,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:39,579 INFO L93 Difference]: Finished difference Result 2652 states and 3888 transitions. [2022-10-16 13:14:39,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-16 13:14:39,583 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 38 [2022-10-16 13:14:39,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:39,614 INFO L225 Difference]: With dead ends: 2652 [2022-10-16 13:14:39,614 INFO L226 Difference]: Without dead ends: 1300 [2022-10-16 13:14:39,629 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-16 13:14:39,633 INFO L413 NwaCegarLoop]: 1780 mSDtfsCounter, 191 mSDsluCounter, 983 mSDsCounter, 0 mSdLazyCounter, 528 mSolverCounterSat, 193 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 2763 SdHoareTripleChecker+Invalid, 723 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 193 IncrementalHoareTripleChecker+Valid, 528 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:39,634 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [201 Valid, 2763 Invalid, 723 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [193 Valid, 528 Invalid, 2 Unknown, 0 Unchecked, 7.8s Time] [2022-10-16 13:14:39,658 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1300 states. [2022-10-16 13:14:39,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1300 to 1255. [2022-10-16 13:14:39,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1255 states, 976 states have (on average 1.4528688524590163) internal successors, (1418), 1036 states have internal predecessors, (1418), 185 states have call successors, (185), 38 states have call predecessors, (185), 38 states have return successors, (185), 184 states have call predecessors, (185), 185 states have call successors, (185) [2022-10-16 13:14:39,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1255 states to 1255 states and 1788 transitions. [2022-10-16 13:14:39,803 INFO L78 Accepts]: Start accepts. Automaton has 1255 states and 1788 transitions. Word has length 38 [2022-10-16 13:14:39,803 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:39,804 INFO L495 AbstractCegarLoop]: Abstraction has 1255 states and 1788 transitions. [2022-10-16 13:14:39,804 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:14:39,804 INFO L276 IsEmpty]: Start isEmpty. Operand 1255 states and 1788 transitions. [2022-10-16 13:14:39,808 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-10-16 13:14:39,808 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:39,809 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:39,809 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 13:14:39,809 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [mp_tx_aggr_port_limit_reachedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mp_tx_aggr_port_limit_reachedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 106 more)] === [2022-10-16 13:14:39,810 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:39,810 INFO L85 PathProgramCache]: Analyzing trace with hash 1060373421, now seen corresponding path program 1 times [2022-10-16 13:14:39,810 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:39,811 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [221331357] [2022-10-16 13:14:39,811 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:39,811 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:39,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:40,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:40,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:40,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:14:40,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:40,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:14:40,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:40,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:14:40,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:40,185 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-10-16 13:14:40,186 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:40,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [221331357] [2022-10-16 13:14:40,186 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [221331357] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:40,187 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:40,187 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-16 13:14:40,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1324384700] [2022-10-16 13:14:40,187 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:40,189 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:14:40,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:40,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:14:40,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-10-16 13:14:40,191 INFO L87 Difference]: Start difference. First operand 1255 states and 1788 transitions. Second operand has 4 states, 4 states have (on average 6.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:14:42,313 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:46,582 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.27s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:48,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:48,561 INFO L93 Difference]: Finished difference Result 3758 states and 5375 transitions. [2022-10-16 13:14:48,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:14:48,562 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 41 [2022-10-16 13:14:48,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:48,585 INFO L225 Difference]: With dead ends: 3758 [2022-10-16 13:14:48,585 INFO L226 Difference]: Without dead ends: 2515 [2022-10-16 13:14:48,591 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:14:48,592 INFO L413 NwaCegarLoop]: 1911 mSDtfsCounter, 1966 mSDsluCounter, 2455 mSDsCounter, 0 mSdLazyCounter, 993 mSolverCounterSat, 420 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2086 SdHoareTripleChecker+Valid, 4366 SdHoareTripleChecker+Invalid, 1414 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 420 IncrementalHoareTripleChecker+Valid, 993 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:48,593 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2086 Valid, 4366 Invalid, 1414 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [420 Valid, 993 Invalid, 1 Unknown, 0 Unchecked, 8.0s Time] [2022-10-16 13:14:48,599 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2515 states. [2022-10-16 13:14:48,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2515 to 2371. [2022-10-16 13:14:48,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2371 states, 1882 states have (on average 1.4505844845908609) internal successors, (2730), 1948 states have internal predecessors, (2730), 358 states have call successors, (358), 75 states have call predecessors, (358), 75 states have return successors, (358), 355 states have call predecessors, (358), 358 states have call successors, (358) [2022-10-16 13:14:48,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2371 states to 2371 states and 3446 transitions. [2022-10-16 13:14:48,741 INFO L78 Accepts]: Start accepts. Automaton has 2371 states and 3446 transitions. Word has length 41 [2022-10-16 13:14:48,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:48,741 INFO L495 AbstractCegarLoop]: Abstraction has 2371 states and 3446 transitions. [2022-10-16 13:14:48,742 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.0) internal successors, (24), 3 states have internal predecessors, (24), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:14:48,742 INFO L276 IsEmpty]: Start isEmpty. Operand 2371 states and 3446 transitions. [2022-10-16 13:14:48,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-10-16 13:14:48,744 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:48,745 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:48,745 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 13:14:48,745 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [mp_tx_aggr_port_limit_reachedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mp_tx_aggr_port_limit_reachedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 106 more)] === [2022-10-16 13:14:48,746 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:48,746 INFO L85 PathProgramCache]: Analyzing trace with hash -1581936941, now seen corresponding path program 1 times [2022-10-16 13:14:48,746 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:48,746 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1409372855] [2022-10-16 13:14:48,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:48,747 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:48,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:49,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:14:49,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:14:49,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:14:49,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:49,069 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-10-16 13:14:49,069 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:49,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1409372855] [2022-10-16 13:14:49,070 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1409372855] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:49,070 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:49,070 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-16 13:14:49,071 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [593012374] [2022-10-16 13:14:49,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:49,071 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:14:49,072 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:49,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:14:49,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-10-16 13:14:49,073 INFO L87 Difference]: Start difference. First operand 2371 states and 3446 transitions. Second operand has 4 states, 4 states have (on average 6.25) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:14:51,170 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:55,932 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:00,151 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.73s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:01,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:01,202 INFO L93 Difference]: Finished difference Result 5254 states and 7611 transitions. [2022-10-16 13:15:01,202 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:15:01,203 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.25) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 42 [2022-10-16 13:15:01,203 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:01,225 INFO L225 Difference]: With dead ends: 5254 [2022-10-16 13:15:01,225 INFO L226 Difference]: Without dead ends: 2895 [2022-10-16 13:15:01,235 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:15:01,237 INFO L413 NwaCegarLoop]: 1874 mSDtfsCounter, 570 mSDsluCounter, 2461 mSDsCounter, 0 mSdLazyCounter, 923 mSolverCounterSat, 221 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 606 SdHoareTripleChecker+Valid, 4335 SdHoareTripleChecker+Invalid, 1146 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 221 IncrementalHoareTripleChecker+Valid, 923 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:01,237 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [606 Valid, 4335 Invalid, 1146 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [221 Valid, 923 Invalid, 2 Unknown, 0 Unchecked, 11.8s Time] [2022-10-16 13:15:01,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2895 states. [2022-10-16 13:15:01,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2895 to 2771. [2022-10-16 13:15:01,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2771 states, 2208 states have (on average 1.443840579710145) internal successors, (3188), 2276 states have internal predecessors, (3188), 405 states have call successors, (405), 102 states have call predecessors, (405), 102 states have return successors, (405), 400 states have call predecessors, (405), 405 states have call successors, (405) [2022-10-16 13:15:01,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2771 states to 2771 states and 3998 transitions. [2022-10-16 13:15:01,390 INFO L78 Accepts]: Start accepts. Automaton has 2771 states and 3998 transitions. Word has length 42 [2022-10-16 13:15:01,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:01,391 INFO L495 AbstractCegarLoop]: Abstraction has 2771 states and 3998 transitions. [2022-10-16 13:15:01,391 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.25) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:15:01,391 INFO L276 IsEmpty]: Start isEmpty. Operand 2771 states and 3998 transitions. [2022-10-16 13:15:01,393 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-10-16 13:15:01,393 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:01,393 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:01,394 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 13:15:01,394 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr74ASSERT_VIOLATIONINTEGER_OVERFLOW === [mp_tx_aggr_port_limit_reachedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mp_tx_aggr_port_limit_reachedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 106 more)] === [2022-10-16 13:15:01,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:01,394 INFO L85 PathProgramCache]: Analyzing trace with hash -2056758156, now seen corresponding path program 1 times [2022-10-16 13:15:01,395 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:01,395 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1788052794] [2022-10-16 13:15:01,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:01,395 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:01,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:01,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:15:01,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:15:01,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:15:01,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-10-16 13:15:01,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:15:01,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,756 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-10-16 13:15:01,757 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:01,757 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1788052794] [2022-10-16 13:15:01,757 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1788052794] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:15:01,757 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:15:01,757 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-16 13:15:01,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1645218995] [2022-10-16 13:15:01,758 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:15:01,758 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:15:01,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:01,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:15:01,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-10-16 13:15:01,760 INFO L87 Difference]: Start difference. First operand 2771 states and 3998 transitions. Second operand has 4 states, 4 states have (on average 7.5) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-16 13:15:03,886 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:05,989 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:14,815 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:16,206 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.30s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:17,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:17,728 INFO L93 Difference]: Finished difference Result 8108 states and 11749 transitions. [2022-10-16 13:15:17,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:15:17,729 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.5) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 51 [2022-10-16 13:15:17,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:17,769 INFO L225 Difference]: With dead ends: 8108 [2022-10-16 13:15:17,770 INFO L226 Difference]: Without dead ends: 5349 [2022-10-16 13:15:17,781 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:15:17,782 INFO L413 NwaCegarLoop]: 3033 mSDtfsCounter, 1869 mSDsluCounter, 3122 mSDsCounter, 0 mSdLazyCounter, 1259 mSolverCounterSat, 280 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1981 SdHoareTripleChecker+Valid, 6155 SdHoareTripleChecker+Invalid, 1542 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 280 IncrementalHoareTripleChecker+Valid, 1259 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.6s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:17,783 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1981 Valid, 6155 Invalid, 1542 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [280 Valid, 1259 Invalid, 3 Unknown, 0 Unchecked, 15.6s Time] [2022-10-16 13:15:17,792 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5349 states. [2022-10-16 13:15:18,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5349 to 5097. [2022-10-16 13:15:18,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5097 states, 4126 states have (on average 1.4486185167232186) internal successors, (5977), 4204 states have internal predecessors, (5977), 734 states have call successors, (734), 181 states have call predecessors, (734), 181 states have return successors, (734), 727 states have call predecessors, (734), 734 states have call successors, (734) [2022-10-16 13:15:18,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5097 states to 5097 states and 7445 transitions. [2022-10-16 13:15:18,044 INFO L78 Accepts]: Start accepts. Automaton has 5097 states and 7445 transitions. Word has length 51 [2022-10-16 13:15:18,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:18,045 INFO L495 AbstractCegarLoop]: Abstraction has 5097 states and 7445 transitions. [2022-10-16 13:15:18,046 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.5) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-16 13:15:18,046 INFO L276 IsEmpty]: Start isEmpty. Operand 5097 states and 7445 transitions. [2022-10-16 13:15:18,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2022-10-16 13:15:18,048 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:18,049 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:18,049 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 13:15:18,049 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [mp_tx_aggr_port_limit_reachedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mp_tx_aggr_port_limit_reachedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 106 more)] === [2022-10-16 13:15:18,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:18,050 INFO L85 PathProgramCache]: Analyzing trace with hash 1318930611, now seen corresponding path program 1 times [2022-10-16 13:15:18,050 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:18,051 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650999232] [2022-10-16 13:15:18,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:18,051 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:18,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:18,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:18,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:18,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:15:18,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:18,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:15:18,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:18,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:15:18,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:18,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:15:18,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:18,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-10-16 13:15:18,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:18,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-10-16 13:15:18,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:18,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:15:18,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:18,859 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2022-10-16 13:15:18,860 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:18,860 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650999232] [2022-10-16 13:15:18,860 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650999232] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:15:18,861 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:15:18,861 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-16 13:15:18,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1850710803] [2022-10-16 13:15:18,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:15:18,867 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:15:18,873 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:18,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:15:18,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-10-16 13:15:18,876 INFO L87 Difference]: Start difference. First operand 5097 states and 7445 transitions. Second operand has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:15:20,981 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:23,655 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:29,103 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.45s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:30,213 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:30,214 INFO L93 Difference]: Finished difference Result 10565 states and 15494 transitions. [2022-10-16 13:15:30,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:15:30,214 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 82 [2022-10-16 13:15:30,215 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:30,294 INFO L225 Difference]: With dead ends: 10565 [2022-10-16 13:15:30,295 INFO L226 Difference]: Without dead ends: 10557 [2022-10-16 13:15:30,304 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:15:30,305 INFO L413 NwaCegarLoop]: 1928 mSDtfsCounter, 2032 mSDsluCounter, 2466 mSDsCounter, 0 mSdLazyCounter, 1015 mSolverCounterSat, 427 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2156 SdHoareTripleChecker+Valid, 4394 SdHoareTripleChecker+Invalid, 1444 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 427 IncrementalHoareTripleChecker+Valid, 1015 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.9s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:30,306 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2156 Valid, 4394 Invalid, 1444 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [427 Valid, 1015 Invalid, 2 Unknown, 0 Unchecked, 10.9s Time] [2022-10-16 13:15:30,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10557 states. [2022-10-16 13:15:30,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10557 to 10115. [2022-10-16 13:15:30,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10115 states, 8236 states have (on average 1.4454832442933463) internal successors, (11905), 8337 states have internal predecessors, (11905), 1463 states have call successors, (1463), 360 states have call predecessors, (1463), 360 states have return successors, (1463), 1449 states have call predecessors, (1463), 1463 states have call successors, (1463) [2022-10-16 13:15:30,895 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10115 states to 10115 states and 14831 transitions. [2022-10-16 13:15:30,896 INFO L78 Accepts]: Start accepts. Automaton has 10115 states and 14831 transitions. Word has length 82 [2022-10-16 13:15:30,899 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:30,899 INFO L495 AbstractCegarLoop]: Abstraction has 10115 states and 14831 transitions. [2022-10-16 13:15:30,900 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:15:30,900 INFO L276 IsEmpty]: Start isEmpty. Operand 10115 states and 14831 transitions. [2022-10-16 13:15:30,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-10-16 13:15:30,904 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:30,904 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:30,904 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-16 13:15:30,905 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [mp_tx_aggr_port_limit_reachedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mp_tx_aggr_port_limit_reachedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 106 more)] === [2022-10-16 13:15:30,905 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:30,905 INFO L85 PathProgramCache]: Analyzing trace with hash 2138368653, now seen corresponding path program 1 times [2022-10-16 13:15:30,905 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:30,906 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [15692882] [2022-10-16 13:15:30,906 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:30,906 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:31,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:31,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:15:31,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:15:31,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:15:31,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:15:31,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-10-16 13:15:31,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-10-16 13:15:31,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:15:31,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,506 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 115 trivial. 0 not checked. [2022-10-16 13:15:31,506 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:31,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [15692882] [2022-10-16 13:15:31,507 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [15692882] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:15:31,507 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:15:31,507 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-16 13:15:31,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [479842129] [2022-10-16 13:15:31,507 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:15:31,509 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:15:31,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:31,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:15:31,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-10-16 13:15:31,510 INFO L87 Difference]: Start difference. First operand 10115 states and 14831 transitions. Second operand has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 1 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-10-16 13:15:33,608 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:38,845 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:44,369 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:46,785 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.59s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:48,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:48,512 INFO L93 Difference]: Finished difference Result 17187 states and 26032 transitions. [2022-10-16 13:15:48,512 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-16 13:15:48,513 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 1 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) Word has length 83 [2022-10-16 13:15:48,513 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:48,621 INFO L225 Difference]: With dead ends: 17187 [2022-10-16 13:15:48,621 INFO L226 Difference]: Without dead ends: 17183 [2022-10-16 13:15:48,632 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-10-16 13:15:48,634 INFO L413 NwaCegarLoop]: 2992 mSDtfsCounter, 1171 mSDsluCounter, 3328 mSDsCounter, 0 mSdLazyCounter, 1207 mSolverCounterSat, 185 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1334 SdHoareTripleChecker+Valid, 6320 SdHoareTripleChecker+Invalid, 1395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 185 IncrementalHoareTripleChecker+Valid, 1207 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.5s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:48,634 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1334 Valid, 6320 Invalid, 1395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [185 Valid, 1207 Invalid, 3 Unknown, 0 Unchecked, 16.5s Time] [2022-10-16 13:15:48,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17183 states. [2022-10-16 13:15:49,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17183 to 10203. [2022-10-16 13:15:49,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10203 states, 8324 states have (on average 1.44365689572321) internal successors, (12017), 8425 states have internal predecessors, (12017), 1463 states have call successors, (1463), 360 states have call predecessors, (1463), 360 states have return successors, (1463), 1449 states have call predecessors, (1463), 1463 states have call successors, (1463) [2022-10-16 13:15:49,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10203 states to 10203 states and 14943 transitions. [2022-10-16 13:15:49,429 INFO L78 Accepts]: Start accepts. Automaton has 10203 states and 14943 transitions. Word has length 83 [2022-10-16 13:15:49,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:49,430 INFO L495 AbstractCegarLoop]: Abstraction has 10203 states and 14943 transitions. [2022-10-16 13:15:49,430 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 1 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-10-16 13:15:49,431 INFO L276 IsEmpty]: Start isEmpty. Operand 10203 states and 14943 transitions. [2022-10-16 13:15:49,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-10-16 13:15:49,435 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:49,435 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:49,435 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-16 13:15:49,436 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW === [mp_tx_aggr_port_limit_reachedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mp_tx_aggr_port_limit_reachedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 106 more)] === [2022-10-16 13:15:49,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:49,436 INFO L85 PathProgramCache]: Analyzing trace with hash 1977945647, now seen corresponding path program 1 times [2022-10-16 13:15:49,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:49,437 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [495873475] [2022-10-16 13:15:49,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:49,437 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:50,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:15:50,101 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 13:15:50,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:15:50,698 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 13:15:50,698 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 13:15:50,700 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (107 of 108 remaining) [2022-10-16 13:15:50,702 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mp_tx_aggr_port_limit_reachedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (106 of 108 remaining) [2022-10-16 13:15:50,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mp_tx_aggr_port_limit_reachedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (105 of 108 remaining) [2022-10-16 13:15:50,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mp_tx_aggr_port_limit_reachedErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (104 of 108 remaining) [2022-10-16 13:15:50,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mp_tx_aggr_port_limit_reachedErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (103 of 108 remaining) [2022-10-16 13:15:50,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mp_tx_aggr_port_limit_reachedErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (102 of 108 remaining) [2022-10-16 13:15:50,703 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mp_tx_aggr_port_limit_reachedErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (101 of 108 remaining) [2022-10-16 13:15:50,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_get_privErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (100 of 108 remaining) [2022-10-16 13:15:50,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_get_privErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (99 of 108 remaining) [2022-10-16 13:15:50,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (98 of 108 remaining) [2022-10-16 13:15:50,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (97 of 108 remaining) [2022-10-16 13:15:50,704 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (96 of 108 remaining) [2022-10-16 13:15:50,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (95 of 108 remaining) [2022-10-16 13:15:50,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (94 of 108 remaining) [2022-10-16 13:15:50,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (93 of 108 remaining) [2022-10-16 13:15:50,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (92 of 108 remaining) [2022-10-16 13:15:50,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (91 of 108 remaining) [2022-10-16 13:15:50,705 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (90 of 108 remaining) [2022-10-16 13:15:50,706 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (89 of 108 remaining) [2022-10-16 13:15:50,706 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (88 of 108 remaining) [2022-10-16 13:15:50,706 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (87 of 108 remaining) [2022-10-16 13:15:50,706 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (86 of 108 remaining) [2022-10-16 13:15:50,707 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (85 of 108 remaining) [2022-10-16 13:15:50,707 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (84 of 108 remaining) [2022-10-16 13:15:50,707 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (83 of 108 remaining) [2022-10-16 13:15:50,707 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (82 of 108 remaining) [2022-10-16 13:15:50,707 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (81 of 108 remaining) [2022-10-16 13:15:50,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (80 of 108 remaining) [2022-10-16 13:15:50,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (79 of 108 remaining) [2022-10-16 13:15:50,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (78 of 108 remaining) [2022-10-16 13:15:50,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (77 of 108 remaining) [2022-10-16 13:15:50,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr18ASSERT_VIOLATIONINTEGER_OVERFLOW (76 of 108 remaining) [2022-10-16 13:15:50,708 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_host_to_card_mp_aggrErr19ASSERT_VIOLATIONINTEGER_OVERFLOW (75 of 108 remaining) [2022-10-16 13:15:50,709 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (74 of 108 remaining) [2022-10-16 13:15:50,709 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (73 of 108 remaining) [2022-10-16 13:15:50,709 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (72 of 108 remaining) [2022-10-16 13:15:50,709 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (71 of 108 remaining) [2022-10-16 13:15:50,710 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (70 of 108 remaining) [2022-10-16 13:15:50,710 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (69 of 108 remaining) [2022-10-16 13:15:50,710 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (68 of 108 remaining) [2022-10-16 13:15:50,710 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (67 of 108 remaining) [2022-10-16 13:15:50,710 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (66 of 108 remaining) [2022-10-16 13:15:50,711 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (65 of 108 remaining) [2022-10-16 13:15:50,711 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (64 of 108 remaining) [2022-10-16 13:15:50,711 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (63 of 108 remaining) [2022-10-16 13:15:50,711 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (62 of 108 remaining) [2022-10-16 13:15:50,711 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (61 of 108 remaining) [2022-10-16 13:15:50,712 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (60 of 108 remaining) [2022-10-16 13:15:50,712 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (59 of 108 remaining) [2022-10-16 13:15:50,712 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (58 of 108 remaining) [2022-10-16 13:15:50,712 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW (57 of 108 remaining) [2022-10-16 13:15:50,712 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr19ASSERT_VIOLATIONINTEGER_OVERFLOW (56 of 108 remaining) [2022-10-16 13:15:50,713 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr20ASSERT_VIOLATIONINTEGER_OVERFLOW (55 of 108 remaining) [2022-10-16 13:15:50,713 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr21ASSERT_VIOLATIONINTEGER_OVERFLOW (54 of 108 remaining) [2022-10-16 13:15:50,713 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr22ASSERT_VIOLATIONINTEGER_OVERFLOW (53 of 108 remaining) [2022-10-16 13:15:50,713 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr23ASSERT_VIOLATIONINTEGER_OVERFLOW (52 of 108 remaining) [2022-10-16 13:15:50,713 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr24ASSERT_VIOLATIONINTEGER_OVERFLOW (51 of 108 remaining) [2022-10-16 13:15:50,713 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr25ASSERT_VIOLATIONINTEGER_OVERFLOW (50 of 108 remaining) [2022-10-16 13:15:50,714 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr26ASSERT_VIOLATIONINTEGER_OVERFLOW (49 of 108 remaining) [2022-10-16 13:15:50,714 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr27ASSERT_VIOLATIONINTEGER_OVERFLOW (48 of 108 remaining) [2022-10-16 13:15:50,714 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr28ASSERT_VIOLATIONINTEGER_OVERFLOW (47 of 108 remaining) [2022-10-16 13:15:50,714 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr29ASSERT_VIOLATIONINTEGER_OVERFLOW (46 of 108 remaining) [2022-10-16 13:15:50,714 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr30ASSERT_VIOLATIONINTEGER_OVERFLOW (45 of 108 remaining) [2022-10-16 13:15:50,715 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr31ASSERT_VIOLATIONINTEGER_OVERFLOW (44 of 108 remaining) [2022-10-16 13:15:50,715 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr32ASSERT_VIOLATIONINTEGER_OVERFLOW (43 of 108 remaining) [2022-10-16 13:15:50,715 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr33ASSERT_VIOLATIONINTEGER_OVERFLOW (42 of 108 remaining) [2022-10-16 13:15:50,715 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr34ASSERT_VIOLATIONINTEGER_OVERFLOW (41 of 108 remaining) [2022-10-16 13:15:50,715 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr35ASSERT_VIOLATIONINTEGER_OVERFLOW (40 of 108 remaining) [2022-10-16 13:15:50,715 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr36ASSERT_VIOLATIONINTEGER_OVERFLOW (39 of 108 remaining) [2022-10-16 13:15:50,716 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr37ASSERT_VIOLATIONINTEGER_OVERFLOW (38 of 108 remaining) [2022-10-16 13:15:50,716 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr38ASSERT_VIOLATIONINTEGER_OVERFLOW (37 of 108 remaining) [2022-10-16 13:15:50,716 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr39ASSERT_VIOLATIONINTEGER_OVERFLOW (36 of 108 remaining) [2022-10-16 13:15:50,716 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr40ASSERT_VIOLATIONINTEGER_OVERFLOW (35 of 108 remaining) [2022-10-16 13:15:50,716 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr41ASSERT_VIOLATIONINTEGER_OVERFLOW (34 of 108 remaining) [2022-10-16 13:15:50,716 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr42ASSERT_VIOLATIONINTEGER_OVERFLOW (33 of 108 remaining) [2022-10-16 13:15:50,717 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr43ASSERT_VIOLATIONINTEGER_OVERFLOW (32 of 108 remaining) [2022-10-16 13:15:50,717 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr44ASSERT_VIOLATIONINTEGER_OVERFLOW (31 of 108 remaining) [2022-10-16 13:15:50,717 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr45ASSERT_VIOLATIONINTEGER_OVERFLOW (30 of 108 remaining) [2022-10-16 13:15:50,717 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr46ASSERT_VIOLATIONINTEGER_OVERFLOW (29 of 108 remaining) [2022-10-16 13:15:50,717 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr47ASSERT_VIOLATIONINTEGER_OVERFLOW (28 of 108 remaining) [2022-10-16 13:15:50,717 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr48ASSERT_VIOLATIONINTEGER_OVERFLOW (27 of 108 remaining) [2022-10-16 13:15:50,718 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr49ASSERT_VIOLATIONINTEGER_OVERFLOW (26 of 108 remaining) [2022-10-16 13:15:50,718 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr50ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 108 remaining) [2022-10-16 13:15:50,718 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr51ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 108 remaining) [2022-10-16 13:15:50,718 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr52ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 108 remaining) [2022-10-16 13:15:50,718 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr53ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 108 remaining) [2022-10-16 13:15:50,719 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr54ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 108 remaining) [2022-10-16 13:15:50,719 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr55ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 108 remaining) [2022-10-16 13:15:50,719 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr56ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 108 remaining) [2022-10-16 13:15:50,719 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr57ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 108 remaining) [2022-10-16 13:15:50,719 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr58ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 108 remaining) [2022-10-16 13:15:50,719 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr59ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 108 remaining) [2022-10-16 13:15:50,720 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr60ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 108 remaining) [2022-10-16 13:15:50,720 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr61ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 108 remaining) [2022-10-16 13:15:50,720 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr62ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 108 remaining) [2022-10-16 13:15:50,720 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr63ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 108 remaining) [2022-10-16 13:15:50,720 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr64ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 108 remaining) [2022-10-16 13:15:50,721 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr65ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 108 remaining) [2022-10-16 13:15:50,721 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr66ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 108 remaining) [2022-10-16 13:15:50,721 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr67ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 108 remaining) [2022-10-16 13:15:50,721 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr68ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 108 remaining) [2022-10-16 13:15:50,721 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr69ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 108 remaining) [2022-10-16 13:15:50,722 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr70ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 108 remaining) [2022-10-16 13:15:50,722 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr71ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 108 remaining) [2022-10-16 13:15:50,722 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr72ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 108 remaining) [2022-10-16 13:15:50,722 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr73ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 108 remaining) [2022-10-16 13:15:50,722 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr74ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 108 remaining) [2022-10-16 13:15:50,722 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr75ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 108 remaining) [2022-10-16 13:15:50,723 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-16 13:15:50,728 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:50,734 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 13:15:51,001 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 01:15:51 BoogieIcfgContainer [2022-10-16 13:15:51,001 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 13:15:51,002 INFO L158 Benchmark]: Toolchain (without parser) took 95674.08ms. Allocated memory was 159.4MB in the beginning and 593.5MB in the end (delta: 434.1MB). Free memory was 119.8MB in the beginning and 325.1MB in the end (delta: -205.3MB). Peak memory consumption was 461.7MB. Max. memory is 8.0GB. [2022-10-16 13:15:51,002 INFO L158 Benchmark]: CDTParser took 0.35ms. Allocated memory is still 159.4MB. Free memory is still 129.2MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:15:51,003 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3237.43ms. Allocated memory was 159.4MB in the beginning and 198.2MB in the end (delta: 38.8MB). Free memory was 119.5MB in the beginning and 96.5MB in the end (delta: 23.1MB). Peak memory consumption was 116.2MB. Max. memory is 8.0GB. [2022-10-16 13:15:51,003 INFO L158 Benchmark]: Boogie Procedure Inliner took 351.56ms. Allocated memory was 198.2MB in the beginning and 316.7MB in the end (delta: 118.5MB). Free memory was 95.9MB in the beginning and 234.9MB in the end (delta: -138.9MB). Peak memory consumption was 24.6MB. Max. memory is 8.0GB. [2022-10-16 13:15:51,004 INFO L158 Benchmark]: Boogie Preprocessor took 363.73ms. Allocated memory is still 316.7MB. Free memory was 234.9MB in the beginning and 203.9MB in the end (delta: 30.9MB). Peak memory consumption was 30.4MB. Max. memory is 8.0GB. [2022-10-16 13:15:51,004 INFO L158 Benchmark]: RCFGBuilder took 11106.81ms. Allocated memory was 316.7MB in the beginning and 493.9MB in the end (delta: 177.2MB). Free memory was 203.9MB in the beginning and 284.7MB in the end (delta: -80.7MB). Peak memory consumption was 138.4MB. Max. memory is 8.0GB. [2022-10-16 13:15:51,005 INFO L158 Benchmark]: TraceAbstraction took 80600.68ms. Allocated memory was 493.9MB in the beginning and 593.5MB in the end (delta: 99.6MB). Free memory was 284.2MB in the beginning and 325.1MB in the end (delta: -40.9MB). Peak memory consumption was 290.5MB. Max. memory is 8.0GB. [2022-10-16 13:15:51,007 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.35ms. Allocated memory is still 159.4MB. Free memory is still 129.2MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 3237.43ms. Allocated memory was 159.4MB in the beginning and 198.2MB in the end (delta: 38.8MB). Free memory was 119.5MB in the beginning and 96.5MB in the end (delta: 23.1MB). Peak memory consumption was 116.2MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 351.56ms. Allocated memory was 198.2MB in the beginning and 316.7MB in the end (delta: 118.5MB). Free memory was 95.9MB in the beginning and 234.9MB in the end (delta: -138.9MB). Peak memory consumption was 24.6MB. Max. memory is 8.0GB. * Boogie Preprocessor took 363.73ms. Allocated memory is still 316.7MB. Free memory was 234.9MB in the beginning and 203.9MB in the end (delta: 30.9MB). Peak memory consumption was 30.4MB. Max. memory is 8.0GB. * RCFGBuilder took 11106.81ms. Allocated memory was 316.7MB in the beginning and 493.9MB in the end (delta: 177.2MB). Free memory was 203.9MB in the beginning and 284.7MB in the end (delta: -80.7MB). Peak memory consumption was 138.4MB. Max. memory is 8.0GB. * TraceAbstraction took 80600.68ms. Allocated memory was 493.9MB in the beginning and 593.5MB in the end (delta: 99.6MB). Free memory was 284.2MB in the beginning and 325.1MB in the end (delta: -40.9MB). Peak memory consumption was 290.5MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 9904]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 7550, overapproximation of shiftLeft at line 9904. Possible FailurePath: [L7440] int ldv_state_variable_3 ; [L7441] int LDV_IN_INTERRUPT = 1; [L7442] int ldv_state_variable_2 ; [L7443] struct sdio_func *mwifiex_sdio_group0 ; [L7444] int ref_cnt ; [L7445] struct mwifiex_adapter *sdio_ops_group0 ; [L7446] int ldv_state_variable_1 ; [L7447] struct device *mwifiex_sdio_pm_ops_group1 ; [L7448] int ldv_state_variable_4 ; [L7449] int ldv_state_variable_0 ; [L7450] struct sk_buff *sdio_ops_group1 ; [L7543-L7545] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd87xx = {1U, 1U, 64U, 65U, 48U, 3U, 96U, 97U, 63U, 65534U, 64U, 4U, 5U, (unsigned char)0, (unsigned char)0, 6U, 7U, (unsigned char)0, (unsigned char)0, 8U, 9U, 108U}; [L7546-L7548] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd8897 = {0U, 0U, 96U, 97U, 80U, 195U, 192U, 193U, 255U, 4294967295U, 184U, 4U, 5U, 6U, 7U, 8U, 9U, 10U, 11U, 12U, 13U, 204U}; [L7549-L7551] static struct mwifiex_sdio_device const mwifiex_sdio_sd8786 = {"mrvl/sd8786_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7552-L7554] static struct mwifiex_sdio_device const mwifiex_sdio_sd8787 = {"mrvl/sd8787_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7555-L7557] static struct mwifiex_sdio_device const mwifiex_sdio_sd8797 = {"mrvl/sd8797_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7558-L7560] static struct mwifiex_sdio_device const mwifiex_sdio_sd8897 = {"mrvl/sd8897_uapsta.bin", & mwifiex_reg_sd8897, 32U, 16U, 1, 0, 4096U, 32768U, 32768U}; [L7646] static u8 user_rmmod ; [L7648] static struct semaphore add_remove_card_sem ; [L7879-L7882] static struct sdio_device_id const mwifiex_ids[5U] = { {255U, 735U, 37142U, (unsigned long )(& mwifiex_sdio_sd8786)}, {255U, 735U, 37145U, (unsigned long )(& mwifiex_sdio_sd8787)}, {255U, 735U, 37161U, (unsigned long )(& mwifiex_sdio_sd8797)}, {255U, 735U, 37165U, (unsigned long )(& mwifiex_sdio_sd8897)}}; [L7883] struct sdio_device_id const __mod_sdio__mwifiex_ids_device_table ; [L7884-L7886] static struct dev_pm_ops const mwifiex_sdio_pm_ops = {0, 0, & mwifiex_sdio_suspend, & mwifiex_sdio_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7887-L7889] static struct sdio_driver mwifiex_sdio = {(char *)"mwifiex_sdio", (struct sdio_device_id const *)(& mwifiex_ids), & mwifiex_sdio_probe, & mwifiex_sdio_remove, {0, 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_sdio_pm_ops, 0}}; [L9929] static struct mmc_host *reset_host ; [L9954-L9955] static struct work_struct card_reset_work = {{137438953424L}, {& card_reset_work.entry, & card_reset_work.entry}, & sdio_card_reset_worker, {(struct lock_class_key *)(& card_reset_work), {0, 0}, "card_reset_work", 0, 0UL}}; [L9966-L9972] static struct mwifiex_if_ops sdio_ops = {& mwifiex_init_sdio, & mwifiex_cleanup_sdio, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_sdio_enable_host_int, & mwifiex_sdio_disable_host_int, & mwifiex_process_int_status, & mwifiex_sdio_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, & mwifiex_update_mp_end_port, & mwifiex_cleanup_mpa_buf, & mwifiex_sdio_cmdrsp_complete, & mwifiex_sdio_cmdrsp_complete, 0, 0, 0, & mwifiex_sdio_card_reset, 0, 0}; [L9999] int ldv_retval_2 ; [L10000] int ldv_retval_5 ; [L10001] int ldv_retval_0 ; [L10002] int ldv_retval_6 ; [L10003] int ldv_retval_1 ; [L10010] int ldv_retval_4 ; [L10012] int ldv_retval_8 ; [L10013] int ldv_retval_3 ; [L10014] int ldv_retval_7 ; [L10462] Element set_impl[15] ; [L10463] int last_index = 0; [L10597] Set LDV_SKBS ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10047] u32 ldvarg1 ; [L10048] u32 tmp ; [L10049] u16 ldvarg4 ; [L10050] u16 tmp___0 ; [L10051] u8 ldvarg3 ; [L10052] u8 tmp___1 ; [L10053] struct mwifiex_fw_image *ldvarg0 ; [L10054] void *tmp___2 ; [L10055] struct mwifiex_tx_param *ldvarg2 ; [L10056] void *tmp___3 ; [L10057] struct sdio_device_id *ldvarg5 ; [L10058] void *tmp___4 ; [L10059] struct work_struct *ldvarg6 ; [L10060] void *tmp___5 ; [L10061] int tmp___6 ; [L10062] int tmp___7 ; [L10063] int tmp___8 ; [L10064] int tmp___9 ; [L10065] int tmp___10 ; [L10066] int tmp___11 ; [L10068] tmp = __VERIFIER_nondet_u32() [L10069] ldvarg1 = tmp [L10070] tmp___0 = __VERIFIER_nondet_u16() [L10071] ldvarg4 = tmp___0 [L10072] tmp___1 = __VERIFIER_nondet_u8() [L10073] ldvarg3 = tmp___1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg1=34, ldvarg3=35, ldvarg4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, user_rmmod=0] [L10074] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=32, tmp___0=1, user_rmmod=0] [L10074] RET, EXPR ldv_zalloc(32UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg1=34, ldvarg3=35, ldvarg4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, user_rmmod=0] [L10074] tmp___2 = ldv_zalloc(32UL) [L10075] ldvarg0 = (struct mwifiex_fw_image *)tmp___2 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=34, ldvarg3=35, ldvarg4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, user_rmmod=0] [L10076] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=4, tmp___0=1, user_rmmod=0] [L10076] RET, EXPR ldv_zalloc(4UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, ldvarg1=34, ldvarg3=35, ldvarg4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, user_rmmod=0] [L10076] tmp___3 = ldv_zalloc(4UL) [L10077] ldvarg2 = (struct mwifiex_tx_param *)tmp___3 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=34, ldvarg2={0:0}, ldvarg3=35, ldvarg4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, tmp___3={0:0}, user_rmmod=0] [L10078] CALL, EXPR ldv_zalloc(16UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=16, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=16, tmp___0=1, user_rmmod=0] [L10078] RET, EXPR ldv_zalloc(16UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(16UL)={0:0}, ldvarg0={0:0}, ldvarg1=34, ldvarg2={0:0}, ldvarg3=35, ldvarg4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, tmp___3={0:0}, user_rmmod=0] [L10078] tmp___4 = ldv_zalloc(16UL) [L10079] ldvarg5 = (struct sdio_device_id *)tmp___4 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=34, ldvarg2={0:0}, ldvarg3=35, ldvarg4=0, ldvarg5={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, user_rmmod=0] [L10080] CALL, EXPR ldv_zalloc(80UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=80, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=80, tmp___0=1, user_rmmod=0] [L10080] RET, EXPR ldv_zalloc(80UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(80UL)={0:0}, ldvarg0={0:0}, ldvarg1=34, ldvarg2={0:0}, ldvarg3=35, ldvarg4=0, ldvarg5={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, user_rmmod=0] [L10080] tmp___5 = ldv_zalloc(80UL) [L10081] ldvarg6 = (struct work_struct *)tmp___5 [L10082] CALL ldv_initialize() [L10616] CALL ldv_set_init(LDV_SKBS) [L10468] set = set_impl [L10469] last_index = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={315:0}, set_impl={315:0}, user_rmmod=0] [L10616] RET ldv_set_init(LDV_SKBS) [L10082] RET ldv_initialize() [L10083] ldv_state_variable_4 = 0 [L10084] ldv_state_variable_1 = 0 [L10085] ref_cnt = 0 [L10086] ldv_state_variable_0 = 1 [L10087] ldv_state_variable_3 = 0 [L10088] ldv_state_variable_2 = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=34, ldvarg2={0:0}, ldvarg3=35, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=34, ldvarg2={0:0}, ldvarg3=35, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: [L10324] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=34, ldvarg2={0:0}, ldvarg3=35, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___9=1, user_rmmod=0] [L10325] COND TRUE ldv_state_variable_0 == 1 [L10326] CALL, EXPR mwifiex_sdio_init_module() [L9975] int tmp ; [L9977] CALL sema_init(& add_remove_card_sem, 1) [L7459] struct lock_class_key __key ; [L7460] struct semaphore __constr_expr_0 ; [L7462] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7463] __constr_expr_0.lock.magic = 3735899821U [L7464] __constr_expr_0.lock.owner_cpu = 4294967295U [L7465] __constr_expr_0.lock.owner = (void *)-1 [L7466] __constr_expr_0.lock.dep_map.key = 0 [L7467] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7468] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7469] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7470] __constr_expr_0.lock.dep_map.cpu = 0 [L7471] __constr_expr_0.lock.dep_map.ip = 0UL [L7472] __constr_expr_0.count = (unsigned int )val [L7473] __constr_expr_0.wait_list.next = & sem->wait_list [L7474] __constr_expr_0.wait_list.prev = & sem->wait_list [L7475] *sem = __constr_expr_0 [L7476] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7477] return; [L7477] return; VAL [\old(val)=1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, sem={309:0}, sem={309:0}, set_impl={315:0}, user_rmmod=0, val=1] [L9977] RET sema_init(& add_remove_card_sem, 1) [L9978] user_rmmod = 0U [L9979] CALL, EXPR sdio_register_driver(& mwifiex_sdio) [L10826] return __VERIFIER_nondet_int(); [L9979] RET, EXPR sdio_register_driver(& mwifiex_sdio) [L9979] tmp = sdio_register_driver(& mwifiex_sdio) [L9980] return (tmp); VAL [\result=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=0, user_rmmod=0] [L10326] RET, EXPR mwifiex_sdio_init_module() [L10326] ldv_retval_7 = mwifiex_sdio_init_module() [L10327] COND FALSE !(ldv_retval_7 != 0) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=34, ldvarg2={0:0}, ldvarg3=35, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___9=1, user_rmmod=0] [L10332] COND TRUE ldv_retval_7 == 0 [L10333] ldv_state_variable_0 = 2 [L10334] ldv_state_variable_2 = 1 [L10335] ldv_state_variable_3 = 1 [L10336] CALL ldv_initialize_sdio_driver_3() [L10029] void *tmp ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10031] CALL, EXPR ldv_zalloc(1488UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=1488, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=1488, tmp___0=1, user_rmmod=0] [L10031] RET, EXPR ldv_zalloc(1488UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(1488UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10031] tmp = ldv_zalloc(1488UL) [L10032] mwifiex_sdio_group0 = (struct sdio_func *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10336] RET ldv_initialize_sdio_driver_3() [L10337] ldv_state_variable_1 = 1 [L10338] CALL ldv_initialize_mwifiex_if_ops_1() [L10017] void *tmp ; [L10018] void *tmp___0 ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10020] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=6864, tmp___0=1, user_rmmod=0] [L10020] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(6864UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10020] tmp = ldv_zalloc(6864UL) [L10021] sdio_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10022] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=232, tmp___0=1, user_rmmod=0] [L10022] RET, EXPR ldv_zalloc(232UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(232UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10022] tmp___0 = ldv_zalloc(232UL) [L10023] sdio_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, tmp___0={0:0}, user_rmmod=0] [L10338] RET ldv_initialize_mwifiex_if_ops_1() [L10339] ldv_state_variable_4 = 1 [L10340] CALL ldv_dev_pm_ops_4() [L10038] void *tmp ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10040] CALL, EXPR ldv_zalloc(1416UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=1416, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=1416, tmp___0=1, user_rmmod=0] [L10040] RET, EXPR ldv_zalloc(1416UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1416UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10040] tmp = ldv_zalloc(1416UL) [L10041] mwifiex_sdio_pm_ops_group1 = (struct device *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10340] RET ldv_dev_pm_ops_4() [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=34, ldvarg2={0:0}, ldvarg3=35, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___9=1, user_rmmod=0] [L10183] COND TRUE ldv_state_variable_1 != 0 [L10184] tmp___8 = __VERIFIER_nondet_int() [L10186] case 0: [L10193] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=34, ldvarg2={0:0}, ldvarg3=35, ldvarg4=0, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=34, tmp___0=0, tmp___1=35, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___8=1, tmp___9=1, user_rmmod=0] [L10194] COND TRUE ldv_state_variable_1 == 1 [L10195] CALL mwifiex_update_mp_end_port(sdio_ops_group0, (int )ldvarg4) [L9890] struct sdio_mmc_card *card ; [L9891] struct mwifiex_sdio_card_reg const *reg ; [L9892] int i ; [L9893] struct _ddebug descriptor ; [L9894] long tmp ; [L9896] EXPR adapter->card [L9896] card = (struct sdio_mmc_card *)adapter->card [L9897] EXPR card->reg [L9897] reg = card->reg [L9898] card->mp_end_port = port [L9899] EXPR reg->data_port_mask [L9899] card->mp_data_port_mask = reg->data_port_mask [L9900] EXPR reg->start_wr_port VAL [\old(port)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={4294967310:-42}, card_reset_work={313:0}, descriptor={317:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, port=0, ref_cnt=0, reg={4294967310:-12}, reg->start_wr_port=-255, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9900] COND TRUE (unsigned int )((unsigned char )reg->start_wr_port) != 0U [L9901] i = 1 VAL [\old(port)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={4294967310:-42}, card_reset_work={313:0}, descriptor={317:0}, i=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, port=0, ref_cnt=0, reg={4294967310:-12}, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9907] EXPR card->max_ports [L9907] EXPR card->mp_end_port VAL [\old(port)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={4294967310:-42}, card->max_ports=1, card->mp_end_port=0, card_reset_work={313:0}, descriptor={317:0}, i=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, port=0, ref_cnt=0, reg={4294967310:-12}, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9907] EXPR (int )card->max_ports - (int )card->mp_end_port VAL [\old(port)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={4294967310:-42}, card->max_ports=1, card->mp_end_port=0, card_reset_work={313:0}, descriptor={317:0}, i=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, port=0, ref_cnt=0, reg={4294967310:-12}, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9907] COND TRUE (int )card->max_ports - (int )card->mp_end_port >= i [L9904] card->mp_data_port_mask [L9904] EXPR card->max_ports VAL [\old(port)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={4294967310:-42}, card->max_ports=1, card->mp_data_port_mask=4294967316, card_reset_work={313:0}, descriptor={317:0}, i=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, port=0, ref_cnt=0, reg={4294967310:-12}, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9904] EXPR (int )card->max_ports - i VAL [\old(port)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={4294967310:-42}, card->max_ports=1, card->mp_data_port_mask=4294967316, card_reset_work={313:0}, descriptor={317:0}, i=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, port=0, ref_cnt=0, reg={4294967310:-12}, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9904] 1 << ((int )card->max_ports - i) VAL [\old(port)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={4294967336:4294967299}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={4294967310:-42}, card->max_ports=1, card->mp_data_port_mask=4294967316, card_reset_work={313:0}, descriptor={317:0}, i=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, port=0, ref_cnt=0, reg={4294967310:-12}, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] - UnprovableResult [Line: 7606]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7606]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7606]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7606]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7616]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7616]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7508]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7508]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10488]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10488]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10492]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10492]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9497]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9497]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9504]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9504]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9511]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9511]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9561]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9561]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9563]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9563]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9563]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9563]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9600]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9600]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9657]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9657]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9659]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9659]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9659]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9659]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10151]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10151]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10171]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10171]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9904]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9904]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9904]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9905]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9905]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9907]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9907]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8283]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8283]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8284]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8284]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8287]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8287]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8296]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8296]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9720]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9720]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9725]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9725]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9184]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9184]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9186]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9186]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9186]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9186]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8224]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8224]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8228]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8228]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8230]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8230]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9313]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9313]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9313]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9313]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9314]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9314]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9314]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9314]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9315]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9315]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9329]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9329]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9329]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9329]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7633]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7633]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7636]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7636]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7638]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7638]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7579]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7579]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7579]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7579]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7589]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7589]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9025]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9025]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8381]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8381]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8098]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8098]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8104]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8104]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8614]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8614]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10362]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10362]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10372]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10372]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 41 procedures, 1333 locations, 108 error locations. Started 1 CEGAR loops. OverallTime: 80.2s, OverallIterations: 7, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 73.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 13 mSolverCounterUnknown, 8364 SdHoareTripleChecker+Valid, 70.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7799 mSDsluCounter, 28333 SdHoareTripleChecker+Invalid, 66.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 14815 mSDsCounter, 1726 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5925 IncrementalHoareTripleChecker+Invalid, 7664 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1726 mSolverCounterUnsat, 13518 mSDtfsCounter, 5925 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 90 GetRequests, 75 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=10203occurred in iteration=6, InterpolantAutomatonStates: 27, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.1s AutomataMinimizationTime, 6 MinimizatonAttempts, 7987 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.2s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 422 NumberOfCodeBlocks, 422 NumberOfCodeBlocksAsserted, 7 NumberOfCheckSat, 331 ConstructedInterpolants, 0 QuantifiedInterpolants, 733 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 325/325 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-16 13:15:51,147 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...