/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 13:14:22,973 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 13:14:22,976 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 13:14:23,021 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 13:14:23,021 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 13:14:23,023 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 13:14:23,036 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 13:14:23,039 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 13:14:23,041 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 13:14:23,042 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 13:14:23,044 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 13:14:23,045 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 13:14:23,046 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 13:14:23,047 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 13:14:23,051 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 13:14:23,053 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 13:14:23,057 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 13:14:23,058 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 13:14:23,060 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 13:14:23,063 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 13:14:23,065 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 13:14:23,069 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 13:14:23,070 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 13:14:23,072 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 13:14:23,082 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 13:14:23,083 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 13:14:23,083 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 13:14:23,085 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 13:14:23,085 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 13:14:23,091 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 13:14:23,092 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 13:14:23,093 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 13:14:23,094 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 13:14:23,095 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 13:14:23,097 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 13:14:23,098 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 13:14:23,099 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 13:14:23,099 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 13:14:23,099 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 13:14:23,101 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 13:14:23,102 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 13:14:23,103 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 13:14:23,164 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 13:14:23,164 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 13:14:23,165 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 13:14:23,165 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 13:14:23,167 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 13:14:23,168 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 13:14:23,171 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 13:14:23,171 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 13:14:23,171 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 13:14:23,172 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 13:14:23,173 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 13:14:23,173 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 13:14:23,173 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 13:14:23,174 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 13:14:23,174 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 13:14:23,174 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 13:14:23,174 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 13:14:23,174 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 13:14:23,175 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 13:14:23,175 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 13:14:23,175 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 13:14:23,176 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 13:14:23,176 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 13:14:23,176 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 13:14:23,176 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 13:14:23,177 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 13:14:23,177 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:14:23,177 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 13:14:23,177 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 13:14:23,178 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 13:14:23,178 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 13:14:23,178 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 13:14:23,178 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 13:14:23,179 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 13:14:23,584 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 13:14:23,611 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 13:14:23,614 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 13:14:23,616 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 13:14:23,621 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 13:14:23,623 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-10-16 13:14:23,722 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fd68aba14/98fd3f572c394dc68bf57f389e584f00/FLAGb3d288577 [2022-10-16 13:14:24,877 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 13:14:24,878 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-10-16 13:14:24,945 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fd68aba14/98fd3f572c394dc68bf57f389e584f00/FLAGb3d288577 [2022-10-16 13:14:25,347 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fd68aba14/98fd3f572c394dc68bf57f389e584f00 [2022-10-16 13:14:25,350 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 13:14:25,355 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 13:14:25,359 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 13:14:25,359 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 13:14:25,364 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 13:14:25,365 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:14:25" (1/1) ... [2022-10-16 13:14:25,366 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@13d3442 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:25, skipping insertion in model container [2022-10-16 13:14:25,366 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:14:25" (1/1) ... [2022-10-16 13:14:25,375 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 13:14:25,587 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 13:14:26,574 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-10-16 13:14:27,379 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:14:27,423 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 13:14:27,666 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-10-16 13:14:27,937 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:14:28,093 INFO L208 MainTranslator]: Completed translation [2022-10-16 13:14:28,093 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28 WrapperNode [2022-10-16 13:14:28,094 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 13:14:28,095 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 13:14:28,095 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 13:14:28,095 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 13:14:28,105 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,213 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,373 INFO L138 Inliner]: procedures = 157, calls = 1181, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2369 [2022-10-16 13:14:28,373 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 13:14:28,376 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 13:14:28,376 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 13:14:28,377 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 13:14:28,389 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,389 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,427 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,428 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,513 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,528 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,545 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,558 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,589 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 13:14:28,590 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 13:14:28,590 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 13:14:28,590 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 13:14:28,591 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (1/1) ... [2022-10-16 13:14:28,599 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:14:28,612 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:14:28,630 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 13:14:28,644 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 13:14:28,714 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-10-16 13:14:28,714 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-10-16 13:14:28,715 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-10-16 13:14:28,715 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-10-16 13:14:28,715 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-16 13:14:28,715 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2022-10-16 13:14:28,715 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2022-10-16 13:14:28,717 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2022-10-16 13:14:28,718 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2022-10-16 13:14:28,718 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2022-10-16 13:14:28,718 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2022-10-16 13:14:28,718 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-16 13:14:28,719 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-16 13:14:28,719 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2022-10-16 13:14:28,719 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2022-10-16 13:14:28,719 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-16 13:14:28,719 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-16 13:14:28,719 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 13:14:28,720 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-10-16 13:14:28,720 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-10-16 13:14:28,720 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-10-16 13:14:28,720 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-10-16 13:14:28,720 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2022-10-16 13:14:28,720 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2022-10-16 13:14:28,721 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-10-16 13:14:28,721 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-10-16 13:14:28,721 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-10-16 13:14:28,721 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-10-16 13:14:28,721 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 13:14:28,721 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 13:14:28,722 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-10-16 13:14:28,722 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-10-16 13:14:28,722 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-10-16 13:14:28,722 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-10-16 13:14:28,722 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2022-10-16 13:14:28,723 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2022-10-16 13:14:28,723 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-10-16 13:14:28,723 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-10-16 13:14:28,723 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-10-16 13:14:28,723 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-10-16 13:14:28,723 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 13:14:28,724 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2022-10-16 13:14:28,724 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2022-10-16 13:14:28,724 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 13:14:28,724 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 13:14:28,724 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-10-16 13:14:28,724 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-10-16 13:14:28,725 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-10-16 13:14:28,725 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-10-16 13:14:28,725 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-10-16 13:14:28,725 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-10-16 13:14:28,726 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-10-16 13:14:28,726 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-10-16 13:14:28,727 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-16 13:14:28,727 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-16 13:14:28,728 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 13:14:28,728 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-10-16 13:14:28,728 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-10-16 13:14:28,729 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 13:14:28,729 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2022-10-16 13:14:28,729 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2022-10-16 13:14:28,730 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 13:14:28,730 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 13:14:28,730 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2022-10-16 13:14:28,730 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2022-10-16 13:14:28,730 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 13:14:28,730 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2022-10-16 13:14:28,731 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2022-10-16 13:14:28,731 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-10-16 13:14:28,732 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-10-16 13:14:28,732 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2022-10-16 13:14:28,733 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2022-10-16 13:14:28,733 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 13:14:28,734 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 13:14:28,734 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-10-16 13:14:28,734 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-10-16 13:14:28,735 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2022-10-16 13:14:28,735 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2022-10-16 13:14:28,735 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 13:14:28,735 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2022-10-16 13:14:28,736 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2022-10-16 13:14:28,736 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-10-16 13:14:28,736 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-10-16 13:14:28,736 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2022-10-16 13:14:28,736 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2022-10-16 13:14:28,736 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-16 13:14:28,737 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-10-16 13:14:28,737 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-10-16 13:14:28,738 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-10-16 13:14:28,738 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 13:14:28,738 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 13:14:28,738 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2022-10-16 13:14:28,739 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2022-10-16 13:14:29,369 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 13:14:29,372 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 13:14:29,506 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-16 13:14:34,327 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 13:14:34,343 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 13:14:34,343 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-10-16 13:14:34,347 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:14:34 BoogieIcfgContainer [2022-10-16 13:14:34,347 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 13:14:34,350 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 13:14:34,350 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 13:14:34,354 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 13:14:34,355 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 01:14:25" (1/3) ... [2022-10-16 13:14:34,355 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c725e34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:14:34, skipping insertion in model container [2022-10-16 13:14:34,356 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:14:28" (2/3) ... [2022-10-16 13:14:34,356 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c725e34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:14:34, skipping insertion in model container [2022-10-16 13:14:34,356 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:14:34" (3/3) ... [2022-10-16 13:14:34,358 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-10-16 13:14:34,381 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 13:14:34,381 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 36 error locations. [2022-10-16 13:14:34,465 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 13:14:34,474 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@576f4eb4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 13:14:34,475 INFO L358 AbstractCegarLoop]: Starting to check reachability of 36 error locations. [2022-10-16 13:14:34,489 INFO L276 IsEmpty]: Start isEmpty. Operand has 744 states, 533 states have (on average 1.4202626641651033) internal successors, (757), 581 states have internal predecessors, (757), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) [2022-10-16 13:14:34,509 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-10-16 13:14:34,509 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:34,510 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:34,511 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW === [mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 33 more)] === [2022-10-16 13:14:34,517 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:34,518 INFO L85 PathProgramCache]: Analyzing trace with hash -2043496751, now seen corresponding path program 1 times [2022-10-16 13:14:34,529 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:34,529 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1272717210] [2022-10-16 13:14:34,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:34,530 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:34,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:35,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:35,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:35,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:14:35,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:35,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:14:35,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:35,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:14:35,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:35,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-10-16 13:14:35,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:35,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:14:35,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:35,556 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-10-16 13:14:35,557 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:35,557 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1272717210] [2022-10-16 13:14:35,558 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1272717210] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:35,558 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:35,559 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:14:35,562 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [153855676] [2022-10-16 13:14:35,563 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:35,570 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:14:35,571 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:35,610 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:14:35,611 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:14:35,615 INFO L87 Difference]: Start difference. First operand has 744 states, 533 states have (on average 1.4202626641651033) internal successors, (757), 581 states have internal predecessors, (757), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-16 13:14:38,028 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:40,052 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:43,137 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:45,155 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:47,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:14:47,671 INFO L93 Difference]: Finished difference Result 1996 states and 2842 transitions. [2022-10-16 13:14:47,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:14:47,680 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 51 [2022-10-16 13:14:47,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:14:47,712 INFO L225 Difference]: With dead ends: 1996 [2022-10-16 13:14:47,712 INFO L226 Difference]: Without dead ends: 1216 [2022-10-16 13:14:47,728 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:14:47,733 INFO L413 NwaCegarLoop]: 1069 mSDtfsCounter, 1219 mSDsluCounter, 1879 mSDsCounter, 0 mSdLazyCounter, 984 mSolverCounterSat, 730 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1281 SdHoareTripleChecker+Valid, 2948 SdHoareTripleChecker+Invalid, 1718 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 730 IncrementalHoareTripleChecker+Valid, 984 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.7s IncrementalHoareTripleChecker+Time [2022-10-16 13:14:47,734 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1281 Valid, 2948 Invalid, 1718 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [730 Valid, 984 Invalid, 4 Unknown, 0 Unchecked, 11.7s Time] [2022-10-16 13:14:47,759 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1216 states. [2022-10-16 13:14:47,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1216 to 1062. [2022-10-16 13:14:47,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1062 states, 776 states have (on average 1.4110824742268042) internal successors, (1095), 823 states have internal predecessors, (1095), 191 states have call successors, (191), 59 states have call predecessors, (191), 59 states have return successors, (191), 184 states have call predecessors, (191), 191 states have call successors, (191) [2022-10-16 13:14:47,986 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1062 states to 1062 states and 1477 transitions. [2022-10-16 13:14:47,988 INFO L78 Accepts]: Start accepts. Automaton has 1062 states and 1477 transitions. Word has length 51 [2022-10-16 13:14:47,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:14:47,989 INFO L495 AbstractCegarLoop]: Abstraction has 1062 states and 1477 transitions. [2022-10-16 13:14:47,990 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-16 13:14:47,990 INFO L276 IsEmpty]: Start isEmpty. Operand 1062 states and 1477 transitions. [2022-10-16 13:14:47,994 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-10-16 13:14:47,995 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:14:47,995 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:14:47,995 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 13:14:47,996 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 33 more)] === [2022-10-16 13:14:47,996 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:14:47,996 INFO L85 PathProgramCache]: Analyzing trace with hash -1748952409, now seen corresponding path program 1 times [2022-10-16 13:14:47,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:14:47,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1964566389] [2022-10-16 13:14:47,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:14:47,998 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:14:48,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:48,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:14:48,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:48,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:14:48,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:48,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:14:48,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:48,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:14:48,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:48,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:14:48,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:14:48,320 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-10-16 13:14:48,320 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:14:48,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1964566389] [2022-10-16 13:14:48,321 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1964566389] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:14:48,321 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:14:48,321 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:14:48,322 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1182845637] [2022-10-16 13:14:48,322 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:14:48,324 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:14:48,325 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:14:48,325 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:14:48,326 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:14:48,326 INFO L87 Difference]: Start difference. First operand 1062 states and 1477 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-10-16 13:14:50,480 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:52,498 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:55,164 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:14:57,191 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:00,351 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:00,351 INFO L93 Difference]: Finished difference Result 2805 states and 3882 transitions. [2022-10-16 13:15:00,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:15:00,352 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 55 [2022-10-16 13:15:00,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:00,369 INFO L225 Difference]: With dead ends: 2805 [2022-10-16 13:15:00,369 INFO L226 Difference]: Without dead ends: 1755 [2022-10-16 13:15:00,374 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:15:00,376 INFO L413 NwaCegarLoop]: 1084 mSDtfsCounter, 1066 mSDsluCounter, 1831 mSDsCounter, 0 mSdLazyCounter, 1021 mSolverCounterSat, 527 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1143 SdHoareTripleChecker+Valid, 2915 SdHoareTripleChecker+Invalid, 1552 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 527 IncrementalHoareTripleChecker+Valid, 1021 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.7s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:00,377 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1143 Valid, 2915 Invalid, 1552 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [527 Valid, 1021 Invalid, 4 Unknown, 0 Unchecked, 11.7s Time] [2022-10-16 13:15:00,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1755 states. [2022-10-16 13:15:00,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1755 to 1539. [2022-10-16 13:15:00,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1539 states, 1136 states have (on average 1.4022887323943662) internal successors, (1593), 1189 states have internal predecessors, (1593), 275 states have call successors, (275), 92 states have call predecessors, (275), 92 states have return successors, (275), 265 states have call predecessors, (275), 275 states have call successors, (275) [2022-10-16 13:15:00,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1539 states to 1539 states and 2143 transitions. [2022-10-16 13:15:00,505 INFO L78 Accepts]: Start accepts. Automaton has 1539 states and 2143 transitions. Word has length 55 [2022-10-16 13:15:00,505 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:00,506 INFO L495 AbstractCegarLoop]: Abstraction has 1539 states and 2143 transitions. [2022-10-16 13:15:00,506 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-10-16 13:15:00,506 INFO L276 IsEmpty]: Start isEmpty. Operand 1539 states and 2143 transitions. [2022-10-16 13:15:00,509 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2022-10-16 13:15:00,510 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:00,510 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:00,510 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 13:15:00,511 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW === [mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 33 more)] === [2022-10-16 13:15:00,511 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:00,512 INFO L85 PathProgramCache]: Analyzing trace with hash -545378851, now seen corresponding path program 1 times [2022-10-16 13:15:00,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:00,512 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1619107290] [2022-10-16 13:15:00,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:00,513 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:00,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:01,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:15:01,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:15:01,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:15:01,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-16 13:15:01,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-16 13:15:01,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-10-16 13:15:01,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:01,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:01,350 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-10-16 13:15:01,351 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:01,351 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1619107290] [2022-10-16 13:15:01,351 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1619107290] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:15:01,352 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:15:01,352 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-16 13:15:01,352 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1659080004] [2022-10-16 13:15:01,352 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:15:01,353 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:15:01,353 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:01,354 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:15:01,354 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:15:01,354 INFO L87 Difference]: Start difference. First operand 1539 states and 2143 transitions. Second operand has 8 states, 8 states have (on average 7.0) internal successors, (56), 5 states have internal predecessors, (56), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:15:03,555 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:06,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:06,767 INFO L93 Difference]: Finished difference Result 3246 states and 4542 transitions. [2022-10-16 13:15:06,768 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-16 13:15:06,769 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 7.0) internal successors, (56), 5 states have internal predecessors, (56), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 81 [2022-10-16 13:15:06,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:06,784 INFO L225 Difference]: With dead ends: 3246 [2022-10-16 13:15:06,785 INFO L226 Difference]: Without dead ends: 1724 [2022-10-16 13:15:06,792 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:15:06,798 INFO L413 NwaCegarLoop]: 935 mSDtfsCounter, 309 mSDsluCounter, 3308 mSDsCounter, 0 mSdLazyCounter, 1342 mSolverCounterSat, 308 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 4243 SdHoareTripleChecker+Invalid, 1651 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 308 IncrementalHoareTripleChecker+Valid, 1342 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.2s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:06,803 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 4243 Invalid, 1651 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [308 Valid, 1342 Invalid, 1 Unknown, 0 Unchecked, 5.2s Time] [2022-10-16 13:15:06,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1724 states. [2022-10-16 13:15:06,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1724 to 1533. [2022-10-16 13:15:06,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1533 states, 1130 states have (on average 1.4) internal successors, (1582), 1184 states have internal predecessors, (1582), 275 states have call successors, (275), 92 states have call predecessors, (275), 92 states have return successors, (275), 264 states have call predecessors, (275), 275 states have call successors, (275) [2022-10-16 13:15:06,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1533 states to 1533 states and 2132 transitions. [2022-10-16 13:15:06,919 INFO L78 Accepts]: Start accepts. Automaton has 1533 states and 2132 transitions. Word has length 81 [2022-10-16 13:15:06,922 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:06,923 INFO L495 AbstractCegarLoop]: Abstraction has 1533 states and 2132 transitions. [2022-10-16 13:15:06,923 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 7.0) internal successors, (56), 5 states have internal predecessors, (56), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:15:06,923 INFO L276 IsEmpty]: Start isEmpty. Operand 1533 states and 2132 transitions. [2022-10-16 13:15:06,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-10-16 13:15:06,928 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:06,928 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:06,928 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 13:15:06,929 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW === [mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 33 more)] === [2022-10-16 13:15:06,929 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:06,930 INFO L85 PathProgramCache]: Analyzing trace with hash 1599006032, now seen corresponding path program 1 times [2022-10-16 13:15:06,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:06,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1732215613] [2022-10-16 13:15:06,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:06,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:07,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:07,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:15:07,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:15:07,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:15:07,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-16 13:15:07,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-16 13:15:07,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-10-16 13:15:07,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:15:07,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-10-16 13:15:07,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-10-16 13:15:07,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:15:07,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:07,620 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2022-10-16 13:15:07,620 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:07,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1732215613] [2022-10-16 13:15:07,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1732215613] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:15:07,621 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:15:07,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:15:07,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [70961720] [2022-10-16 13:15:07,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:15:07,622 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:15:07,622 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:07,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:15:07,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:15:07,623 INFO L87 Difference]: Start difference. First operand 1533 states and 2132 transitions. Second operand has 6 states, 6 states have (on average 10.166666666666666) internal successors, (61), 3 states have internal predecessors, (61), 3 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-10-16 13:15:09,776 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:11,799 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:14,115 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:16,140 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:19,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:19,669 INFO L93 Difference]: Finished difference Result 3724 states and 5190 transitions. [2022-10-16 13:15:19,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:15:19,670 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.166666666666666) internal successors, (61), 3 states have internal predecessors, (61), 3 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 100 [2022-10-16 13:15:19,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:19,688 INFO L225 Difference]: With dead ends: 3724 [2022-10-16 13:15:19,688 INFO L226 Difference]: Without dead ends: 2218 [2022-10-16 13:15:19,695 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:15:19,696 INFO L413 NwaCegarLoop]: 1108 mSDtfsCounter, 1204 mSDsluCounter, 1753 mSDsCounter, 0 mSdLazyCounter, 981 mSolverCounterSat, 678 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1290 SdHoareTripleChecker+Valid, 2861 SdHoareTripleChecker+Invalid, 1663 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 678 IncrementalHoareTripleChecker+Valid, 981 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:19,697 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1290 Valid, 2861 Invalid, 1663 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [678 Valid, 981 Invalid, 4 Unknown, 0 Unchecked, 11.8s Time] [2022-10-16 13:15:19,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2218 states. [2022-10-16 13:15:19,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2218 to 1947. [2022-10-16 13:15:19,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1947 states, 1452 states have (on average 1.3973829201101928) internal successors, (2029), 1512 states have internal predecessors, (2029), 336 states have call successors, (336), 123 states have call predecessors, (336), 123 states have return successors, (336), 320 states have call predecessors, (336), 336 states have call successors, (336) [2022-10-16 13:15:19,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1947 states to 1947 states and 2701 transitions. [2022-10-16 13:15:19,845 INFO L78 Accepts]: Start accepts. Automaton has 1947 states and 2701 transitions. Word has length 100 [2022-10-16 13:15:19,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:19,848 INFO L495 AbstractCegarLoop]: Abstraction has 1947 states and 2701 transitions. [2022-10-16 13:15:19,848 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.166666666666666) internal successors, (61), 3 states have internal predecessors, (61), 3 states have call successors, (11), 4 states have call predecessors, (11), 1 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-10-16 13:15:19,849 INFO L276 IsEmpty]: Start isEmpty. Operand 1947 states and 2701 transitions. [2022-10-16 13:15:19,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2022-10-16 13:15:19,853 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:19,853 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:19,853 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 13:15:19,854 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 33 more)] === [2022-10-16 13:15:19,854 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:19,854 INFO L85 PathProgramCache]: Analyzing trace with hash 303296934, now seen corresponding path program 1 times [2022-10-16 13:15:19,854 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:19,854 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1079419982] [2022-10-16 13:15:19,855 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:19,855 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:20,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:20,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:20,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:20,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:15:20,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:20,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:15:20,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:20,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:15:20,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:20,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-16 13:15:20,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:20,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-16 13:15:20,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:20,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-10-16 13:15:20,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:21,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:15:21,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:21,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-10-16 13:15:21,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:21,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:15:21,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:21,034 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-10-16 13:15:21,035 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:21,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1079419982] [2022-10-16 13:15:21,035 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1079419982] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:15:21,035 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:15:21,035 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:15:21,036 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1183202621] [2022-10-16 13:15:21,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:15:21,036 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:15:21,037 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:21,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:15:21,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:15:21,038 INFO L87 Difference]: Start difference. First operand 1947 states and 2701 transitions. Second operand has 6 states, 6 states have (on average 10.5) internal successors, (63), 4 states have internal predecessors, (63), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-10-16 13:15:23,258 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:25,274 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:28,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:28,248 INFO L93 Difference]: Finished difference Result 4111 states and 5732 transitions. [2022-10-16 13:15:28,248 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:15:28,249 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.5) internal successors, (63), 4 states have internal predecessors, (63), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 104 [2022-10-16 13:15:28,249 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:28,263 INFO L225 Difference]: With dead ends: 4111 [2022-10-16 13:15:28,264 INFO L226 Difference]: Without dead ends: 2182 [2022-10-16 13:15:28,271 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-10-16 13:15:28,272 INFO L413 NwaCegarLoop]: 938 mSDtfsCounter, 306 mSDsluCounter, 2548 mSDsCounter, 0 mSdLazyCounter, 1028 mSolverCounterSat, 309 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 313 SdHoareTripleChecker+Valid, 3486 SdHoareTripleChecker+Invalid, 1339 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 309 IncrementalHoareTripleChecker+Valid, 1028 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:28,272 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [313 Valid, 3486 Invalid, 1339 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [309 Valid, 1028 Invalid, 2 Unknown, 0 Unchecked, 7.0s Time] [2022-10-16 13:15:28,276 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2182 states. [2022-10-16 13:15:28,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2182 to 1951. [2022-10-16 13:15:28,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1951 states, 1456 states have (on average 1.3962912087912087) internal successors, (2033), 1516 states have internal predecessors, (2033), 336 states have call successors, (336), 123 states have call predecessors, (336), 123 states have return successors, (336), 320 states have call predecessors, (336), 336 states have call successors, (336) [2022-10-16 13:15:28,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1951 states to 1951 states and 2705 transitions. [2022-10-16 13:15:28,381 INFO L78 Accepts]: Start accepts. Automaton has 1951 states and 2705 transitions. Word has length 104 [2022-10-16 13:15:28,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:28,381 INFO L495 AbstractCegarLoop]: Abstraction has 1951 states and 2705 transitions. [2022-10-16 13:15:28,382 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.5) internal successors, (63), 4 states have internal predecessors, (63), 2 states have call successors, (11), 4 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-10-16 13:15:28,382 INFO L276 IsEmpty]: Start isEmpty. Operand 1951 states and 2705 transitions. [2022-10-16 13:15:28,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2022-10-16 13:15:28,384 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:28,384 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:28,384 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-16 13:15:28,384 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 33 more)] === [2022-10-16 13:15:28,385 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:28,385 INFO L85 PathProgramCache]: Analyzing trace with hash -1152084991, now seen corresponding path program 1 times [2022-10-16 13:15:28,385 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:28,385 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1174633001] [2022-10-16 13:15:28,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:28,386 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:28,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:29,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:15:29,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:15:29,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:15:29,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-16 13:15:29,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-16 13:15:29,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-10-16 13:15:29,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-10-16 13:15:29,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:15:29,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2022-10-16 13:15:29,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:29,546 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-10-16 13:15:29,547 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:29,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1174633001] [2022-10-16 13:15:29,547 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1174633001] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:15:29,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1648746662] [2022-10-16 13:15:29,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:29,548 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:15:29,548 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:15:29,553 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:15:29,575 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-16 13:15:30,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:30,258 INFO L263 TraceCheckSpWp]: Trace formula consists of 2253 conjuncts, 37 conjunts are in the unsatisfiable core [2022-10-16 13:15:30,280 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:15:30,491 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-10-16 13:15:30,491 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:15:30,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1648746662] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:15:30,492 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:15:30,492 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [7] total 11 [2022-10-16 13:15:30,492 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [943828568] [2022-10-16 13:15:30,493 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:15:30,493 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:15:30,493 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:30,494 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:15:30,494 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2022-10-16 13:15:30,494 INFO L87 Difference]: Start difference. First operand 1951 states and 2705 transitions. Second operand has 6 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 3 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:15:30,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:30,783 INFO L93 Difference]: Finished difference Result 3889 states and 5400 transitions. [2022-10-16 13:15:30,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:15:30,784 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 3 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 105 [2022-10-16 13:15:30,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:30,798 INFO L225 Difference]: With dead ends: 3889 [2022-10-16 13:15:30,799 INFO L226 Difference]: Without dead ends: 1966 [2022-10-16 13:15:30,806 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:15:30,808 INFO L413 NwaCegarLoop]: 996 mSDtfsCounter, 453 mSDsluCounter, 3434 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 4430 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:30,808 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [538 Valid, 4430 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-16 13:15:30,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1966 states. [2022-10-16 13:15:30,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1966 to 1951. [2022-10-16 13:15:30,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1951 states, 1456 states have (on average 1.3949175824175823) internal successors, (2031), 1516 states have internal predecessors, (2031), 336 states have call successors, (336), 123 states have call predecessors, (336), 123 states have return successors, (336), 320 states have call predecessors, (336), 336 states have call successors, (336) [2022-10-16 13:15:30,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1951 states to 1951 states and 2703 transitions. [2022-10-16 13:15:30,924 INFO L78 Accepts]: Start accepts. Automaton has 1951 states and 2703 transitions. Word has length 105 [2022-10-16 13:15:30,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:30,925 INFO L495 AbstractCegarLoop]: Abstraction has 1951 states and 2703 transitions. [2022-10-16 13:15:30,925 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 3 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:15:30,925 INFO L276 IsEmpty]: Start isEmpty. Operand 1951 states and 2703 transitions. [2022-10-16 13:15:30,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2022-10-16 13:15:30,927 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:30,928 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:30,975 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-16 13:15:31,142 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-10-16 13:15:31,143 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 33 more)] === [2022-10-16 13:15:31,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:31,144 INFO L85 PathProgramCache]: Analyzing trace with hash -1206477889, now seen corresponding path program 1 times [2022-10-16 13:15:31,145 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:31,146 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1116709817] [2022-10-16 13:15:31,146 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:31,146 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:31,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:31,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:31,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:15:31,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:32,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:15:32,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:32,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:15:32,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:32,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-16 13:15:32,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:32,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-16 13:15:32,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:32,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-10-16 13:15:32,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:32,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-10-16 13:15:32,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:32,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:15:32,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:32,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2022-10-16 13:15:32,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:32,311 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-10-16 13:15:32,312 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:32,312 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1116709817] [2022-10-16 13:15:32,312 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1116709817] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:15:32,312 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1559835504] [2022-10-16 13:15:32,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:32,313 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:15:32,313 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:15:32,314 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:15:32,319 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-16 13:15:33,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:33,087 INFO L263 TraceCheckSpWp]: Trace formula consists of 2254 conjuncts, 37 conjunts are in the unsatisfiable core [2022-10-16 13:15:33,102 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:15:33,289 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-10-16 13:15:33,290 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:15:33,290 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1559835504] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:15:33,290 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:15:33,291 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [7] total 14 [2022-10-16 13:15:33,291 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1195707551] [2022-10-16 13:15:33,291 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:15:33,292 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-10-16 13:15:33,292 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:33,292 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-10-16 13:15:33,293 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2022-10-16 13:15:33,293 INFO L87 Difference]: Start difference. First operand 1951 states and 2703 transitions. Second operand has 9 states, 7 states have (on average 10.0) internal successors, (70), 7 states have internal predecessors, (70), 4 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2022-10-16 13:15:33,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:33,951 INFO L93 Difference]: Finished difference Result 3889 states and 5396 transitions. [2022-10-16 13:15:33,951 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:15:33,951 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 10.0) internal successors, (70), 7 states have internal predecessors, (70), 4 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) Word has length 105 [2022-10-16 13:15:33,952 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:33,964 INFO L225 Difference]: With dead ends: 3889 [2022-10-16 13:15:33,965 INFO L226 Difference]: Without dead ends: 1966 [2022-10-16 13:15:33,971 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=43, Invalid=263, Unknown=0, NotChecked=0, Total=306 [2022-10-16 13:15:33,973 INFO L413 NwaCegarLoop]: 993 mSDtfsCounter, 893 mSDsluCounter, 5875 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 167 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 895 SdHoareTripleChecker+Valid, 6868 SdHoareTripleChecker+Invalid, 316 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 167 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:33,973 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [895 Valid, 6868 Invalid, 316 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [167 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-10-16 13:15:33,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1966 states. [2022-10-16 13:15:34,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1966 to 1951. [2022-10-16 13:15:34,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1951 states, 1456 states have (on average 1.3942307692307692) internal successors, (2030), 1516 states have internal predecessors, (2030), 336 states have call successors, (336), 123 states have call predecessors, (336), 123 states have return successors, (336), 320 states have call predecessors, (336), 336 states have call successors, (336) [2022-10-16 13:15:34,084 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1951 states to 1951 states and 2702 transitions. [2022-10-16 13:15:34,084 INFO L78 Accepts]: Start accepts. Automaton has 1951 states and 2702 transitions. Word has length 105 [2022-10-16 13:15:34,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:34,085 INFO L495 AbstractCegarLoop]: Abstraction has 1951 states and 2702 transitions. [2022-10-16 13:15:34,085 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 10.0) internal successors, (70), 7 states have internal predecessors, (70), 4 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2022-10-16 13:15:34,085 INFO L276 IsEmpty]: Start isEmpty. Operand 1951 states and 2702 transitions. [2022-10-16 13:15:34,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2022-10-16 13:15:34,088 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:34,088 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:34,120 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-16 13:15:34,301 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-10-16 13:15:34,302 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 33 more)] === [2022-10-16 13:15:34,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:34,303 INFO L85 PathProgramCache]: Analyzing trace with hash -312991551, now seen corresponding path program 1 times [2022-10-16 13:15:34,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:34,304 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [41680784] [2022-10-16 13:15:34,304 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:34,304 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:34,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:15:35,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:15:35,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:15:35,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-16 13:15:35,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-16 13:15:35,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-10-16 13:15:35,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-10-16 13:15:35,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-10-16 13:15:35,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-10-16 13:15:35,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2022-10-16 13:15:35,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:35,300 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-10-16 13:15:35,300 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:15:35,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [41680784] [2022-10-16 13:15:35,301 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [41680784] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:15:35,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1983434547] [2022-10-16 13:15:35,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:35,301 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:15:35,302 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:15:35,305 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:15:35,325 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-10-16 13:15:37,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:15:37,446 INFO L263 TraceCheckSpWp]: Trace formula consists of 2255 conjuncts, 7 conjunts are in the unsatisfiable core [2022-10-16 13:15:37,451 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:15:37,543 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 36 proven. 1 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2022-10-16 13:15:37,543 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:15:37,722 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-10-16 13:15:37,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1983434547] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:15:37,724 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:15:37,724 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 12 [2022-10-16 13:15:37,724 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [497897258] [2022-10-16 13:15:37,724 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:15:37,726 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-10-16 13:15:37,726 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:15:37,726 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-10-16 13:15:37,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:15:37,727 INFO L87 Difference]: Start difference. First operand 1951 states and 2702 transitions. Second operand has 12 states, 12 states have (on average 6.5) internal successors, (78), 10 states have internal predecessors, (78), 2 states have call successors, (24), 4 states have call predecessors, (24), 5 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2022-10-16 13:15:40,228 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:42,256 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:15:47,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:15:47,252 INFO L93 Difference]: Finished difference Result 4122 states and 5739 transitions. [2022-10-16 13:15:47,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-16 13:15:47,253 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 6.5) internal successors, (78), 10 states have internal predecessors, (78), 2 states have call successors, (24), 4 states have call predecessors, (24), 5 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 105 [2022-10-16 13:15:47,253 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:15:47,271 INFO L225 Difference]: With dead ends: 4122 [2022-10-16 13:15:47,271 INFO L226 Difference]: Without dead ends: 2188 [2022-10-16 13:15:47,278 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 241 GetRequests, 222 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=107, Invalid=273, Unknown=0, NotChecked=0, Total=380 [2022-10-16 13:15:47,279 INFO L413 NwaCegarLoop]: 938 mSDtfsCounter, 311 mSDsluCounter, 5586 mSDsCounter, 0 mSdLazyCounter, 2030 mSolverCounterSat, 316 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 6524 SdHoareTripleChecker+Invalid, 2348 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 316 IncrementalHoareTripleChecker+Valid, 2030 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:15:47,280 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [318 Valid, 6524 Invalid, 2348 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [316 Valid, 2030 Invalid, 2 Unknown, 0 Unchecked, 9.0s Time] [2022-10-16 13:15:47,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2188 states. [2022-10-16 13:15:47,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2188 to 1957. [2022-10-16 13:15:47,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1957 states, 1462 states have (on average 1.3926128590971272) internal successors, (2036), 1522 states have internal predecessors, (2036), 336 states have call successors, (336), 123 states have call predecessors, (336), 123 states have return successors, (336), 320 states have call predecessors, (336), 336 states have call successors, (336) [2022-10-16 13:15:47,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1957 states to 1957 states and 2708 transitions. [2022-10-16 13:15:47,443 INFO L78 Accepts]: Start accepts. Automaton has 1957 states and 2708 transitions. Word has length 105 [2022-10-16 13:15:47,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:15:47,445 INFO L495 AbstractCegarLoop]: Abstraction has 1957 states and 2708 transitions. [2022-10-16 13:15:47,445 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 6.5) internal successors, (78), 10 states have internal predecessors, (78), 2 states have call successors, (24), 4 states have call predecessors, (24), 5 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2022-10-16 13:15:47,445 INFO L276 IsEmpty]: Start isEmpty. Operand 1957 states and 2708 transitions. [2022-10-16 13:15:47,451 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-10-16 13:15:47,451 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:15:47,452 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:47,506 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-10-16 13:15:47,665 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:15:47,665 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (and 33 more)] === [2022-10-16 13:15:47,666 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:15:47,666 INFO L85 PathProgramCache]: Analyzing trace with hash -530924250, now seen corresponding path program 2 times [2022-10-16 13:15:47,666 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:15:47,667 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [634588963] [2022-10-16 13:15:47,667 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:15:47,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:15:48,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:15:48,024 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 13:15:48,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:15:48,414 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 13:15:48,415 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 13:15:48,416 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (35 of 36 remaining) [2022-10-16 13:15:48,419 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (34 of 36 remaining) [2022-10-16 13:15:48,419 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (33 of 36 remaining) [2022-10-16 13:15:48,420 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (32 of 36 remaining) [2022-10-16 13:15:48,420 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (31 of 36 remaining) [2022-10-16 13:15:48,420 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (30 of 36 remaining) [2022-10-16 13:15:48,420 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (29 of 36 remaining) [2022-10-16 13:15:48,421 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (28 of 36 remaining) [2022-10-16 13:15:48,421 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_get_privErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (27 of 36 remaining) [2022-10-16 13:15:48,421 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_get_privErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (26 of 36 remaining) [2022-10-16 13:15:48,421 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 36 remaining) [2022-10-16 13:15:48,422 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 36 remaining) [2022-10-16 13:15:48,422 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 36 remaining) [2022-10-16 13:15:48,422 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_skb_allocErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 36 remaining) [2022-10-16 13:15:48,422 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_resumeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 36 remaining) [2022-10-16 13:15:48,423 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_resumeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 36 remaining) [2022-10-16 13:15:48,423 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 36 remaining) [2022-10-16 13:15:48,423 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 36 remaining) [2022-10-16 13:15:48,423 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 36 remaining) [2022-10-16 13:15:48,423 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 36 remaining) [2022-10-16 13:15:48,424 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 36 remaining) [2022-10-16 13:15:48,424 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 36 remaining) [2022-10-16 13:15:48,424 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 36 remaining) [2022-10-16 13:15:48,424 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 36 remaining) [2022-10-16 13:15:48,425 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 36 remaining) [2022-10-16 13:15:48,425 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 36 remaining) [2022-10-16 13:15:48,425 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 36 remaining) [2022-10-16 13:15:48,425 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 36 remaining) [2022-10-16 13:15:48,425 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 36 remaining) [2022-10-16 13:15:48,426 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 36 remaining) [2022-10-16 13:15:48,426 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 36 remaining) [2022-10-16 13:15:48,426 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 36 remaining) [2022-10-16 13:15:48,426 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 36 remaining) [2022-10-16 13:15:48,427 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 36 remaining) [2022-10-16 13:15:48,427 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 36 remaining) [2022-10-16 13:15:48,427 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr19ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 36 remaining) [2022-10-16 13:15:48,427 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-16 13:15:48,433 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:15:48,438 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 13:15:48,476 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:15:48,666 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 01:15:48 BoogieIcfgContainer [2022-10-16 13:15:48,666 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 13:15:48,667 INFO L158 Benchmark]: Toolchain (without parser) took 83315.46ms. Allocated memory was 151.0MB in the beginning and 468.7MB in the end (delta: 317.7MB). Free memory was 114.6MB in the beginning and 143.6MB in the end (delta: -29.1MB). Peak memory consumption was 289.7MB. Max. memory is 8.0GB. [2022-10-16 13:15:48,667 INFO L158 Benchmark]: CDTParser took 0.41ms. Allocated memory is still 151.0MB. Free memory is still 121.3MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:15:48,668 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2735.00ms. Allocated memory was 151.0MB in the beginning and 209.7MB in the end (delta: 58.7MB). Free memory was 114.4MB in the beginning and 149.4MB in the end (delta: -35.0MB). Peak memory consumption was 108.3MB. Max. memory is 8.0GB. [2022-10-16 13:15:48,668 INFO L158 Benchmark]: Boogie Procedure Inliner took 278.72ms. Allocated memory is still 209.7MB. Free memory was 149.4MB in the beginning and 135.3MB in the end (delta: 14.2MB). Peak memory consumption was 14.7MB. Max. memory is 8.0GB. [2022-10-16 13:15:48,668 INFO L158 Benchmark]: Boogie Preprocessor took 213.39ms. Allocated memory is still 209.7MB. Free memory was 135.3MB in the beginning and 119.5MB in the end (delta: 15.7MB). Peak memory consumption was 15.7MB. Max. memory is 8.0GB. [2022-10-16 13:15:48,669 INFO L158 Benchmark]: RCFGBuilder took 5757.38ms. Allocated memory was 209.7MB in the beginning and 325.1MB in the end (delta: 115.3MB). Free memory was 119.0MB in the beginning and 188.6MB in the end (delta: -69.6MB). Peak memory consumption was 78.8MB. Max. memory is 8.0GB. [2022-10-16 13:15:48,669 INFO L158 Benchmark]: TraceAbstraction took 74316.19ms. Allocated memory was 325.1MB in the beginning and 468.7MB in the end (delta: 143.7MB). Free memory was 187.6MB in the beginning and 143.6MB in the end (delta: 43.9MB). Peak memory consumption was 187.6MB. Max. memory is 8.0GB. [2022-10-16 13:15:48,671 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.41ms. Allocated memory is still 151.0MB. Free memory is still 121.3MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 2735.00ms. Allocated memory was 151.0MB in the beginning and 209.7MB in the end (delta: 58.7MB). Free memory was 114.4MB in the beginning and 149.4MB in the end (delta: -35.0MB). Peak memory consumption was 108.3MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 278.72ms. Allocated memory is still 209.7MB. Free memory was 149.4MB in the beginning and 135.3MB in the end (delta: 14.2MB). Peak memory consumption was 14.7MB. Max. memory is 8.0GB. * Boogie Preprocessor took 213.39ms. Allocated memory is still 209.7MB. Free memory was 135.3MB in the beginning and 119.5MB in the end (delta: 15.7MB). Peak memory consumption was 15.7MB. Max. memory is 8.0GB. * RCFGBuilder took 5757.38ms. Allocated memory was 209.7MB in the beginning and 325.1MB in the end (delta: 115.3MB). Free memory was 119.0MB in the beginning and 188.6MB in the end (delta: -69.6MB). Peak memory consumption was 78.8MB. Max. memory is 8.0GB. * TraceAbstraction took 74316.19ms. Allocated memory was 325.1MB in the beginning and 468.7MB in the end (delta: 143.7MB). Free memory was 187.6MB in the beginning and 143.6MB in the end (delta: 43.9MB). Peak memory consumption was 187.6MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7505]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 8887. Possible FailurePath: [L7346] int LDV_IN_INTERRUPT = 1; [L7347] struct usb_interface *mwifiex_usb_driver_group1 ; [L7348] int ldv_state_variable_2 ; [L7349] int ref_cnt ; [L7350] struct mwifiex_adapter *usb_ops_group0 ; [L7351] int ldv_state_variable_1 ; [L7352] int usb_counter ; [L7353] struct sk_buff *usb_ops_group1 ; [L7354] int ldv_state_variable_0 ; [L7514] static u8 user_rmmod ; [L7516] static struct semaphore add_remove_card_sem ; [L7517-L7527] static struct usb_device_id mwifiex_usb_table[5U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}, {3U, 4742U, 8261U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8262U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7528] struct usb_device_id const __mod_usb__mwifiex_usb_table_device_table ; [L8349-L8355] static struct usb_driver mwifiex_usb_driver = {"mwifiex_usb", & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1U}; [L8862-L8866] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0, 0}; [L8920] int ldv_retval_0 ; [L8921] int ldv_retval_4 ; [L8922] int ldv_retval_1 ; [L8926] int ldv_retval_3 ; [L8927] int ldv_retval_2 ; [L9241] Element set_impl[15] ; [L9242] int last_index = 0; [L9376] Set LDV_SKBS ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8951] u8 ldvarg1 ; [L8952] u8 tmp ; [L8953] struct mwifiex_tx_param *ldvarg0 ; [L8954] void *tmp___0 ; [L8955] struct mwifiex_fw_image *ldvarg2 ; [L8956] void *tmp___1 ; [L8957] struct usb_device_id *ldvarg4 ; [L8958] void *tmp___2 ; [L8959] pm_message_t ldvarg3 ; [L8960] int tmp___3 ; [L8961] int tmp___4 ; [L8962] int tmp___5 ; [L8963] int tmp___6 ; [L8965] tmp = __VERIFIER_nondet_u8() [L8966] ldvarg1 = tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=0, ldvarg3={173:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=4, tmp___0=-2, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] RET, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=0, ldvarg3={173:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] tmp___0 = ldv_zalloc(4UL) [L8968] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg3={173:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=-3, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg3={173:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] tmp___1 = ldv_zalloc(32UL) [L8970] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={173:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=-4, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={173:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] tmp___2 = ldv_zalloc(32UL) [L8972] ldvarg4 = (struct usb_device_id *)tmp___2 [L8973] CALL ldv_initialize() [L9395] CALL ldv_set_init(LDV_SKBS) [L9247] set = set_impl [L9248] last_index = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={167:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9395] RET ldv_set_init(LDV_SKBS) [L8973] RET ldv_initialize() [L8974] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={173:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={173:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8975] ldv_state_variable_1 = 0 [L8976] ref_cnt = 0 [L8977] ldv_state_variable_0 = 1 [L8978] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={173:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={173:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: [L9068] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={173:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9069] COND TRUE ldv_state_variable_0 == 1 [L9070] CALL, EXPR mwifiex_usb_init_module() [L8869] int ret ; [L8870] struct _ddebug descriptor ; [L8871] long tmp ; [L8872] struct _ddebug descriptor___0 ; [L8873] long tmp___0 ; [L8875] descriptor.modname = "mwifiex_usb" [L8876] descriptor.function = "mwifiex_usb_init_module" [L8877] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8878] descriptor.format = "Marvell USB8797 Driver\n" [L8879] descriptor.lineno = 1046U [L8880] descriptor.flags = 0U [L8881] EXPR descriptor.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={168:0}, descriptor.flags=0, descriptor___0={174:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={168:0}, descriptor.flags=0, descriptor___0={174:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8882] COND FALSE !(tmp != 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={168:0}, descriptor___0={174:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8886] CALL sema_init(& add_remove_card_sem, 1) [L7359] struct lock_class_key __key ; [L7360] struct semaphore __constr_expr_0 ; [L7362] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7363] __constr_expr_0.lock.magic = 3735899821U [L7364] __constr_expr_0.lock.owner_cpu = 4294967295U [L7365] __constr_expr_0.lock.owner = (void *)-1 [L7366] __constr_expr_0.lock.dep_map.key = 0 [L7367] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7368] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7369] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7370] __constr_expr_0.lock.dep_map.cpu = 0 [L7371] __constr_expr_0.lock.dep_map.ip = 0UL [L7372] __constr_expr_0.count = (unsigned int )val [L7373] __constr_expr_0.wait_list.next = & sem->wait_list [L7374] __constr_expr_0.wait_list.prev = & sem->wait_list [L7375] *sem = __constr_expr_0 [L7376] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7377] return; [L7377] return; VAL [\old(val)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, sem={163:0}, sem={163:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0, val=1] [L8886] RET sema_init(& add_remove_card_sem, 1) [L8887] CALL, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L9221] ldv_func_ret_type ldv_func_res ; [L9222] int tmp ; [L9224] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9571] return __VERIFIER_nondet_int(); [L9224] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9224] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9225] ldv_func_res = tmp [L9226] ldv_state_variable_2 = 1 [L9227] usb_counter = 0 [L9228] CALL ldv_usb_driver_2() [L8930] void *tmp ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=1560, tmp___0=-5, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1560UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] tmp = ldv_zalloc(1560UL) [L8933] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9228] RET ldv_usb_driver_2() [L9229] return (ldv_func_res); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, ldv_func_arg1={165:0}, ldv_func_arg1={165:0}, ldv_func_arg2={4294967368:4294967314}, ldv_func_arg2={4294967368:4294967314}, ldv_func_arg3={156:0}, ldv_func_arg3={156:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8887] RET, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8887] ret = ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8888] COND FALSE !(ret != 0) [L8891] descriptor___0.modname = "mwifiex_usb" [L8892] descriptor___0.function = "mwifiex_usb_init_module" [L8893] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8894] descriptor___0.format = "info: Driver registered successfully!\n" [L8895] descriptor___0.lineno = 1054U [L8896] descriptor___0.flags = 0U [L8897] EXPR descriptor___0.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, descriptor={168:0}, descriptor___0={174:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, descriptor={168:0}, descriptor___0={174:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8898] COND FALSE !(tmp___0 != 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, descriptor={168:0}, descriptor___0={174:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8903] return (ret); [L8903] return (ret); [L8903] return (ret); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9070] RET, EXPR mwifiex_usb_init_module() [L9070] ldv_retval_0 = mwifiex_usb_init_module() [L9071] COND TRUE ldv_retval_0 == 0 [L9072] ldv_state_variable_0 = 3 [L9073] ldv_state_variable_1 = 1 [L9074] CALL ldv_initialize_mwifiex_if_ops_1() [L8939] void *tmp ; [L8940] void *tmp___0 ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=6864, tmp___0=-6, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(6864UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] tmp = ldv_zalloc(6864UL) [L8943] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=232, tmp___0=-7, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] tmp___0 = ldv_zalloc(232UL) [L8945] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9074] RET ldv_initialize_mwifiex_if_ops_1() [L9077] COND FALSE !(ldv_retval_0 != 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={173:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={173:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8983] COND TRUE ldv_state_variable_1 != 0 [L8984] tmp___4 = __VERIFIER_nondet_int() [L8986] case 0: [L8993] case 1: [L9000] case 2: [L9007] case 3: [L9014] case 4: [L9021] case 5: [L9028] case 6: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={173:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=6, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9029] COND TRUE ldv_state_variable_1 == 1 [L9030] CALL mwifiex_usb_host_to_card(usb_ops_group0, (int )ldvarg1, usb_ops_group1, ldvarg0) [L8495] struct usb_card_rec *card ; [L8496] struct urb_context *context ; [L8497] u8 *data ; [L8498] struct urb *tx_urb ; [L8499] int tmp ; [L8500] struct _ddebug descriptor ; [L8501] long tmp___0 ; [L8502] int tmp___1 ; [L8503] unsigned int tmp___2 ; [L8504] int tmp___3 ; [L8505] int tmp___4 ; [L8507] EXPR adapter->card [L8507] card = (struct usb_card_rec *)adapter->card [L8508] EXPR skb->data [L8508] data = skb->data [L8509] EXPR adapter->is_suspended VAL [\old(ep)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, adapter={0:0}, adapter={0:0}, adapter->is_suspended=0, add_remove_card_sem={163:0}, card={4294967307:-148}, data={4294967343:4294967300}, descriptor={171:0}, ep=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, skb={0:0}, tx_param={0:0}, tx_param={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8509] COND FALSE !((int )adapter->is_suspended) [L8515] EXPR adapter->surprise_removed VAL [\old(ep)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, adapter={0:0}, adapter={0:0}, adapter->surprise_removed=0, add_remove_card_sem={163:0}, card={4294967307:-148}, data={4294967343:4294967300}, descriptor={171:0}, ep=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, skb={0:0}, tx_param={0:0}, tx_param={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8515] COND FALSE !((int )adapter->surprise_removed) [L8520] EXPR card->tx_data_ep VAL [\old(ep)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967307:-148}, card->tx_data_ep=172, data={4294967343:4294967300}, descriptor={171:0}, ep=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, skb={0:0}, tx_param={0:0}, tx_param={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8520] COND FALSE !((int )card->tx_data_ep == (int )ep) [L8528] descriptor.modname = "mwifiex_usb" [L8529] descriptor.function = "mwifiex_usb_host_to_card" [L8530] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8531] descriptor.format = "%s: ep=%d\n" [L8532] descriptor.lineno = 754U [L8533] descriptor.flags = 0U [L8534] EXPR descriptor.flags VAL [\old(ep)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967307:-148}, data={4294967343:4294967300}, descriptor={171:0}, descriptor.flags=0, ep=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, skb={0:0}, tx_param={0:0}, tx_param={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8534] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8534] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(ep)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967307:-148}, data={4294967343:4294967300}, descriptor={171:0}, descriptor.flags=0, ep=0, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, skb={0:0}, tx_param={0:0}, tx_param={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8534] tmp___0 = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8535] COND FALSE !(tmp___0 != 0L) VAL [\old(ep)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967307:-148}, data={4294967343:4294967300}, descriptor={171:0}, ep=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, skb={0:0}, tmp___0=0, tx_param={0:0}, tx_param={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8540] EXPR card->tx_cmd_ep VAL [\old(ep)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967307:-148}, card->tx_cmd_ep=0, data={4294967343:4294967300}, descriptor={171:0}, ep=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, skb={0:0}, tmp___0=0, tx_param={0:0}, tx_param={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8540] COND TRUE (int )card->tx_cmd_ep == (int )ep [L8541] context = & card->tx_cmd VAL [\old(ep)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967307:-148}, context={4294967307:-20}, data={4294967343:4294967300}, descriptor={171:0}, ep=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, skb={0:0}, tmp___0=0, tx_param={0:0}, tx_param={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8551] context->adapter = adapter [L8552] context->ep = ep [L8553] context->skb = skb [L8554] EXPR context->urb [L8554] tx_urb = context->urb [L8555] EXPR card->udev VAL [\old(ep)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={4294967307:-148}, card->udev={4294967310:4294967349}, context={4294967307:-20}, data={4294967343:4294967300}, descriptor={171:0}, ep=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, skb={0:0}, tmp___0=0, tx_param={0:0}, tx_param={0:0}, tx_urb={4294967318:4294967298}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8555] CALL __create_pipe(card->udev, (unsigned int )ep) VAL [\old(endpoint)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, dev={4294967310:4294967349}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7505] EXPR dev->devnum VAL [\old(endpoint)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, dev={4294967310:4294967349}, dev={4294967310:4294967349}, dev->devnum=8388608, endpoint=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7505] dev->devnum << 8 VAL [\old(endpoint)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={4294967368:4294967314}, add_remove_card_sem={163:0}, dev={4294967310:4294967349}, dev={4294967310:4294967349}, dev->devnum=8388608, endpoint=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] - UnprovableResult [Line: 7904]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7904]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7917]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7917]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7928]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7928]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7505]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7410]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7410]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9267]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9267]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9271]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9271]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8271]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8271]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8435]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8435]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8382]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8382]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8548]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8548]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8573]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8573]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8150]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8150]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9101]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9101]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9111]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9111]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9117]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9117]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8210]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8210]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8225]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8225]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 39 procedures, 745 locations, 36 error locations. Started 1 CEGAR loops. OverallTime: 74.0s, OverallIterations: 9, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 59.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 17 mSolverCounterUnknown, 6099 SdHoareTripleChecker+Valid, 56.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 5761 mSDsluCounter, 34275 SdHoareTripleChecker+Invalid, 54.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 26214 mSDsCounter, 3035 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7621 IncrementalHoareTripleChecker+Invalid, 10673 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3035 mSolverCounterUnsat, 8061 mSDtfsCounter, 7621 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 617 GetRequests, 539 SyntacticMatches, 1 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 1.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1957occurred in iteration=8, InterpolantAutomatonStates: 63, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.1s AutomataMinimizationTime, 8 MinimizatonAttempts, 1324 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.4s SsaConstructionTime, 4.0s SatisfiabilityAnalysisTime, 6.1s InterpolantComputationTime, 1129 NumberOfCodeBlocks, 1129 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 1114 ConstructedInterpolants, 0 QuantifiedInterpolants, 1949 SizeOfPredicates, 17 NumberOfNonLiveVariables, 6762 ConjunctsInSsa, 81 ConjunctsInUnsatCore, 12 InterpolantComputations, 7 PerfectInterpolantSequences, 687/692 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-16 13:15:48,767 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...