/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 13:04:07,645 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 13:04:07,648 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 13:04:07,700 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 13:04:07,701 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 13:04:07,702 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 13:04:07,704 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 13:04:07,707 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 13:04:07,709 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 13:04:07,710 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 13:04:07,712 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 13:04:07,713 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 13:04:07,714 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 13:04:07,715 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 13:04:07,716 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 13:04:07,718 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 13:04:07,719 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 13:04:07,720 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 13:04:07,722 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 13:04:07,725 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 13:04:07,727 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 13:04:07,728 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 13:04:07,730 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 13:04:07,731 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 13:04:07,735 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 13:04:07,736 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 13:04:07,736 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 13:04:07,737 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 13:04:07,738 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 13:04:07,739 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 13:04:07,739 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 13:04:07,740 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 13:04:07,741 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 13:04:07,742 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 13:04:07,744 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 13:04:07,744 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 13:04:07,745 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 13:04:07,745 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 13:04:07,745 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 13:04:07,746 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 13:04:07,747 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 13:04:07,749 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 13:04:07,778 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 13:04:07,778 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 13:04:07,778 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 13:04:07,779 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 13:04:07,779 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 13:04:07,780 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 13:04:07,781 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 13:04:07,781 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 13:04:07,781 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 13:04:07,781 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 13:04:07,781 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 13:04:07,782 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 13:04:07,782 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 13:04:07,782 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 13:04:07,782 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 13:04:07,783 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 13:04:07,783 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 13:04:07,783 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 13:04:07,783 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 13:04:07,783 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 13:04:07,784 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 13:04:07,784 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 13:04:07,784 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 13:04:07,784 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 13:04:07,785 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 13:04:07,785 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 13:04:07,785 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:04:07,785 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 13:04:07,785 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 13:04:07,786 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 13:04:07,786 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 13:04:07,786 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 13:04:07,786 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 13:04:07,786 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 13:04:08,182 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 13:04:08,211 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 13:04:08,214 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 13:04:08,216 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 13:04:08,217 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 13:04:08,218 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-10-16 13:04:08,320 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1c43c2235/eefd985aba304a82a39f57392a54e4d8/FLAG4bb259181 [2022-10-16 13:04:09,417 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 13:04:09,418 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-10-16 13:04:09,469 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1c43c2235/eefd985aba304a82a39f57392a54e4d8/FLAG4bb259181 [2022-10-16 13:04:09,814 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1c43c2235/eefd985aba304a82a39f57392a54e4d8 [2022-10-16 13:04:09,818 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 13:04:09,824 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 13:04:09,826 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 13:04:09,826 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 13:04:09,831 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 13:04:09,832 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:04:09" (1/1) ... [2022-10-16 13:04:09,833 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@47332f0a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:09, skipping insertion in model container [2022-10-16 13:04:09,833 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:04:09" (1/1) ... [2022-10-16 13:04:09,843 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 13:04:09,992 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 13:04:11,111 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-10-16 13:04:11,748 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:04:11,778 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 13:04:12,100 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[202214,202227] [2022-10-16 13:04:12,327 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:04:12,539 INFO L208 MainTranslator]: Completed translation [2022-10-16 13:04:12,540 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12 WrapperNode [2022-10-16 13:04:12,540 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 13:04:12,541 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 13:04:12,541 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 13:04:12,542 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 13:04:12,550 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:12,653 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:12,821 INFO L138 Inliner]: procedures = 163, calls = 1186, calls flagged for inlining = 76, calls inlined = 76, statements flattened = 3123 [2022-10-16 13:04:12,821 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 13:04:12,822 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 13:04:12,822 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 13:04:12,823 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 13:04:12,834 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:12,835 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:12,878 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:12,879 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:13,001 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:13,063 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:13,093 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:13,119 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:13,162 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 13:04:13,164 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 13:04:13,164 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 13:04:13,165 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 13:04:13,166 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (1/1) ... [2022-10-16 13:04:13,175 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:04:13,190 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:04:13,214 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 13:04:13,234 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 13:04:13,285 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-10-16 13:04:13,285 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-10-16 13:04:13,286 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unregister_dev [2022-10-16 13:04:13,286 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unregister_dev [2022-10-16 13:04:13,286 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_2 [2022-10-16 13:04:13,286 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_2 [2022-10-16 13:04:13,287 INFO L130 BoogieDeclarations]: Found specification of procedure skb_copy_from_linear_data [2022-10-16 13:04:13,287 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_copy_from_linear_data [2022-10-16 13:04:13,287 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-16 13:04:13,287 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2022-10-16 13:04:13,287 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2022-10-16 13:04:13,287 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-16 13:04:13,287 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-16 13:04:13,288 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2022-10-16 13:04:13,288 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2022-10-16 13:04:13,288 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-16 13:04:13,289 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-16 13:04:13,289 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 13:04:13,289 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-10-16 13:04:13,289 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-10-16 13:04:13,289 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-10-16 13:04:13,290 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-10-16 13:04:13,290 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-10-16 13:04:13,290 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-10-16 13:04:13,290 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-10-16 13:04:13,290 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-10-16 13:04:13,290 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2022-10-16 13:04:13,290 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2022-10-16 13:04:13,290 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-10-16 13:04:13,291 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-10-16 13:04:13,291 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 13:04:13,291 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 13:04:13,291 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-10-16 13:04:13,291 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-10-16 13:04:13,291 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-10-16 13:04:13,291 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-10-16 13:04:13,292 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-10-16 13:04:13,292 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-10-16 13:04:13,292 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2022-10-16 13:04:13,292 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2022-10-16 13:04:13,292 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-10-16 13:04:13,292 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-10-16 13:04:13,292 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 13:04:13,293 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 13:04:13,293 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 13:04:13,293 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_rx_complete [2022-10-16 13:04:13,293 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_rx_complete [2022-10-16 13:04:13,293 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-10-16 13:04:13,293 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-10-16 13:04:13,293 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2022-10-16 13:04:13,294 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2022-10-16 13:04:13,294 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-10-16 13:04:13,295 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-10-16 13:04:13,295 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-10-16 13:04:13,295 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-10-16 13:04:13,296 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-10-16 13:04:13,296 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-10-16 13:04:13,296 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-16 13:04:13,296 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-16 13:04:13,296 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 13:04:13,296 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-10-16 13:04:13,297 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-10-16 13:04:13,297 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-10-16 13:04:13,297 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-10-16 13:04:13,297 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 13:04:13,297 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2022-10-16 13:04:13,297 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2022-10-16 13:04:13,298 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-10-16 13:04:13,298 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-10-16 13:04:13,299 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 13:04:13,299 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 13:04:13,299 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 13:04:13,300 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 13:04:13,300 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2022-10-16 13:04:13,300 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2022-10-16 13:04:13,301 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2022-10-16 13:04:13,302 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2022-10-16 13:04:13,302 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 13:04:13,302 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2022-10-16 13:04:13,302 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2022-10-16 13:04:13,302 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-10-16 13:04:13,302 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-10-16 13:04:13,302 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 13:04:13,302 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 13:04:13,303 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_10 [2022-10-16 13:04:13,303 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_10 [2022-10-16 13:04:13,303 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-10-16 13:04:13,303 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-10-16 13:04:13,304 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-10-16 13:04:13,304 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-10-16 13:04:13,304 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 13:04:13,304 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2022-10-16 13:04:13,304 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2022-10-16 13:04:13,306 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2022-10-16 13:04:13,306 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2022-10-16 13:04:13,306 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-10-16 13:04:13,307 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-10-16 13:04:13,308 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-16 13:04:13,308 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-10-16 13:04:13,308 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-10-16 13:04:13,308 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-10-16 13:04:13,308 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 13:04:13,308 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 13:04:13,308 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2022-10-16 13:04:13,309 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2022-10-16 13:04:14,017 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 13:04:14,020 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 13:04:14,422 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-16 13:04:15,379 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-10-16 13:04:19,298 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 13:04:19,317 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 13:04:19,317 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-10-16 13:04:19,322 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:04:19 BoogieIcfgContainer [2022-10-16 13:04:19,322 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 13:04:19,325 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 13:04:19,325 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 13:04:19,329 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 13:04:19,330 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 01:04:09" (1/3) ... [2022-10-16 13:04:19,331 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1af8ff6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:04:19, skipping insertion in model container [2022-10-16 13:04:19,331 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:12" (2/3) ... [2022-10-16 13:04:19,331 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1af8ff6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:04:19, skipping insertion in model container [2022-10-16 13:04:19,332 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:04:19" (3/3) ... [2022-10-16 13:04:19,333 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-10-16 13:04:19,358 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 13:04:19,358 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 46 error locations. [2022-10-16 13:04:19,467 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 13:04:19,476 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@f8bcfc6, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 13:04:19,476 INFO L358 AbstractCegarLoop]: Starting to check reachability of 46 error locations. [2022-10-16 13:04:19,487 INFO L276 IsEmpty]: Start isEmpty. Operand has 939 states, 670 states have (on average 1.4298507462686567) internal successors, (958), 741 states have internal predecessors, (958), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) [2022-10-16 13:04:19,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-16 13:04:19,505 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:19,507 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:19,507 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:04:19,514 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:19,514 INFO L85 PathProgramCache]: Analyzing trace with hash 2067218169, now seen corresponding path program 1 times [2022-10-16 13:04:19,525 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:19,526 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1579016722] [2022-10-16 13:04:19,526 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:19,527 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:19,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:20,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:04:20,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:04:20,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:04:20,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,461 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-10-16 13:04:20,461 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:20,462 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1579016722] [2022-10-16 13:04:20,463 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1579016722] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:20,463 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:20,463 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:04:20,465 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1275304283] [2022-10-16 13:04:20,466 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:20,474 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:04:20,475 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:20,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:04:20,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:04:20,528 INFO L87 Difference]: Start difference. First operand has 939 states, 670 states have (on average 1.4298507462686567) internal successors, (958), 741 states have internal predecessors, (958), 180 states have call successors, (180), 44 states have call predecessors, (180), 42 states have return successors, (174), 166 states have call predecessors, (174), 174 states have call successors, (174) Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:04:23,094 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:04:25,126 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:04:30,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:30,933 INFO L93 Difference]: Finished difference Result 3004 states and 4373 transitions. [2022-10-16 13:04:30,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:04:30,937 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 45 [2022-10-16 13:04:30,937 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:30,975 INFO L225 Difference]: With dead ends: 3004 [2022-10-16 13:04:30,975 INFO L226 Difference]: Without dead ends: 2028 [2022-10-16 13:04:30,998 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:04:31,004 INFO L413 NwaCegarLoop]: 1401 mSDtfsCounter, 2027 mSDsluCounter, 2269 mSDsCounter, 0 mSdLazyCounter, 1554 mSolverCounterSat, 1010 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2176 SdHoareTripleChecker+Valid, 3670 SdHoareTripleChecker+Invalid, 2566 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1010 IncrementalHoareTripleChecker+Valid, 1554 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:31,006 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2176 Valid, 3670 Invalid, 2566 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1010 Valid, 1554 Invalid, 2 Unknown, 0 Unchecked, 9.8s Time] [2022-10-16 13:04:31,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2028 states. [2022-10-16 13:04:31,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2028 to 1716. [2022-10-16 13:04:31,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1716 states, 1261 states have (on average 1.421887390959556) internal successors, (1793), 1335 states have internal predecessors, (1793), 327 states have call successors, (327), 82 states have call predecessors, (327), 82 states have return successors, (326), 310 states have call predecessors, (326), 326 states have call successors, (326) [2022-10-16 13:04:31,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1716 states to 1716 states and 2446 transitions. [2022-10-16 13:04:31,294 INFO L78 Accepts]: Start accepts. Automaton has 1716 states and 2446 transitions. Word has length 45 [2022-10-16 13:04:31,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:31,295 INFO L495 AbstractCegarLoop]: Abstraction has 1716 states and 2446 transitions. [2022-10-16 13:04:31,295 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-16 13:04:31,297 INFO L276 IsEmpty]: Start isEmpty. Operand 1716 states and 2446 transitions. [2022-10-16 13:04:31,307 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-10-16 13:04:31,307 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:31,307 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:31,308 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 13:04:31,308 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr20ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:04:31,309 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:31,309 INFO L85 PathProgramCache]: Analyzing trace with hash 1070180879, now seen corresponding path program 1 times [2022-10-16 13:04:31,309 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:31,310 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [915815419] [2022-10-16 13:04:31,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:31,310 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:31,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:31,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:31,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:31,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:04:31,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:31,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:04:31,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:31,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:04:31,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:31,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-16 13:04:31,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:31,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:31,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:31,714 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-10-16 13:04:31,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:31,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [915815419] [2022-10-16 13:04:31,716 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [915815419] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:31,716 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:31,716 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:04:31,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [314230368] [2022-10-16 13:04:31,717 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:31,718 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:04:31,719 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:31,719 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:04:31,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:04:31,720 INFO L87 Difference]: Start difference. First operand 1716 states and 2446 transitions. Second operand has 6 states, 6 states have (on average 5.333333333333333) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-16 13:04:34,036 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:04:36,061 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:04:38,084 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:04:47,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:47,492 INFO L93 Difference]: Finished difference Result 5275 states and 7647 transitions. [2022-10-16 13:04:47,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:04:47,494 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.333333333333333) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 50 [2022-10-16 13:04:47,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:47,524 INFO L225 Difference]: With dead ends: 5275 [2022-10-16 13:04:47,524 INFO L226 Difference]: Without dead ends: 3570 [2022-10-16 13:04:47,534 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=36, Invalid=54, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:04:47,536 INFO L413 NwaCegarLoop]: 1642 mSDtfsCounter, 1386 mSDsluCounter, 3237 mSDsCounter, 0 mSdLazyCounter, 2434 mSolverCounterSat, 499 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1510 SdHoareTripleChecker+Valid, 4879 SdHoareTripleChecker+Invalid, 2936 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 499 IncrementalHoareTripleChecker+Valid, 2434 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:47,536 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1510 Valid, 4879 Invalid, 2936 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [499 Valid, 2434 Invalid, 3 Unknown, 0 Unchecked, 15.1s Time] [2022-10-16 13:04:47,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3570 states. [2022-10-16 13:04:47,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3570 to 2912. [2022-10-16 13:04:47,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2912 states, 2162 states have (on average 1.4144310823311748) internal successors, (3058), 2260 states have internal predecessors, (3058), 553 states have call successors, (553), 151 states have call predecessors, (553), 151 states have return successors, (551), 518 states have call predecessors, (551), 551 states have call successors, (551) [2022-10-16 13:04:47,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2912 states to 2912 states and 4162 transitions. [2022-10-16 13:04:47,853 INFO L78 Accepts]: Start accepts. Automaton has 2912 states and 4162 transitions. Word has length 50 [2022-10-16 13:04:47,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:47,854 INFO L495 AbstractCegarLoop]: Abstraction has 2912 states and 4162 transitions. [2022-10-16 13:04:47,855 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.333333333333333) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-16 13:04:47,855 INFO L276 IsEmpty]: Start isEmpty. Operand 2912 states and 4162 transitions. [2022-10-16 13:04:47,861 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-10-16 13:04:47,861 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:47,862 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:47,862 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 13:04:47,863 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:04:47,864 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:47,864 INFO L85 PathProgramCache]: Analyzing trace with hash -549607408, now seen corresponding path program 1 times [2022-10-16 13:04:47,865 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:47,867 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1871257200] [2022-10-16 13:04:47,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:47,869 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:47,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:48,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:04:48,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:04:48,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:04:48,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:04:48,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,190 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-10-16 13:04:48,190 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:48,192 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1871257200] [2022-10-16 13:04:48,192 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1871257200] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:48,193 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:48,193 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:04:48,194 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [109001838] [2022-10-16 13:04:48,195 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:48,198 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:04:48,199 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:48,200 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:04:48,200 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:04:48,201 INFO L87 Difference]: Start difference. First operand 2912 states and 4162 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-10-16 13:04:50,332 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:04:52,354 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:04:54,822 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:04:56,847 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:01,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:01,679 INFO L93 Difference]: Finished difference Result 8353 states and 12000 transitions. [2022-10-16 13:05:01,680 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:05:01,680 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 54 [2022-10-16 13:05:01,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:01,723 INFO L225 Difference]: With dead ends: 8353 [2022-10-16 13:05:01,723 INFO L226 Difference]: Without dead ends: 5459 [2022-10-16 13:05:01,739 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:05:01,747 INFO L413 NwaCegarLoop]: 1463 mSDtfsCounter, 1538 mSDsluCounter, 2247 mSDsCounter, 0 mSdLazyCounter, 1487 mSolverCounterSat, 812 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1646 SdHoareTripleChecker+Valid, 3710 SdHoareTripleChecker+Invalid, 2303 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 812 IncrementalHoareTripleChecker+Valid, 1487 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.9s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:01,749 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1646 Valid, 3710 Invalid, 2303 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [812 Valid, 1487 Invalid, 4 Unknown, 0 Unchecked, 12.9s Time] [2022-10-16 13:05:01,759 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5459 states. [2022-10-16 13:05:02,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5459 to 4568. [2022-10-16 13:05:02,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4568 states, 3408 states have (on average 1.40962441314554) internal successors, (4804), 3542 states have internal predecessors, (4804), 858 states have call successors, (858), 256 states have call predecessors, (858), 256 states have return successors, (854), 799 states have call predecessors, (854), 854 states have call successors, (854) [2022-10-16 13:05:02,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4568 states to 4568 states and 6516 transitions. [2022-10-16 13:05:02,212 INFO L78 Accepts]: Start accepts. Automaton has 4568 states and 6516 transitions. Word has length 54 [2022-10-16 13:05:02,213 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:02,213 INFO L495 AbstractCegarLoop]: Abstraction has 4568 states and 6516 transitions. [2022-10-16 13:05:02,213 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (6), 4 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-10-16 13:05:02,214 INFO L276 IsEmpty]: Start isEmpty. Operand 4568 states and 6516 transitions. [2022-10-16 13:05:02,216 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-10-16 13:05:02,216 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:02,216 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:02,216 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 13:05:02,217 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:05:02,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:02,218 INFO L85 PathProgramCache]: Analyzing trace with hash -1159619035, now seen corresponding path program 1 times [2022-10-16 13:05:02,218 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:02,218 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901748649] [2022-10-16 13:05:02,218 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:02,219 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:02,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:02,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:05:02,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:05:02,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:05:02,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 13:05:02,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:05:02,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-10-16 13:05:02,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:02,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,751 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-10-16 13:05:02,751 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:02,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901748649] [2022-10-16 13:05:02,752 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901748649] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:02,752 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:05:02,752 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:05:02,752 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367445903] [2022-10-16 13:05:02,753 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:02,753 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:05:02,753 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:02,758 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:05:02,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:05:02,759 INFO L87 Difference]: Start difference. First operand 4568 states and 6516 transitions. Second operand has 6 states, 6 states have (on average 9.0) internal successors, (54), 3 states have internal predecessors, (54), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:05:04,951 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:06,977 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:08,994 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:14,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:14,257 INFO L93 Difference]: Finished difference Result 7745 states and 11103 transitions. [2022-10-16 13:05:14,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:05:14,258 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 3 states have internal predecessors, (54), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 79 [2022-10-16 13:05:14,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:14,283 INFO L225 Difference]: With dead ends: 7745 [2022-10-16 13:05:14,283 INFO L226 Difference]: Without dead ends: 3197 [2022-10-16 13:05:14,300 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=16, Invalid=26, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:05:14,301 INFO L413 NwaCegarLoop]: 1210 mSDtfsCounter, 311 mSDsluCounter, 2754 mSDsCounter, 0 mSdLazyCounter, 1671 mSolverCounterSat, 235 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 336 SdHoareTripleChecker+Valid, 3964 SdHoareTripleChecker+Invalid, 1909 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 235 IncrementalHoareTripleChecker+Valid, 1671 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.2s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:14,302 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [336 Valid, 3964 Invalid, 1909 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [235 Valid, 1671 Invalid, 3 Unknown, 0 Unchecked, 11.2s Time] [2022-10-16 13:05:14,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3197 states. [2022-10-16 13:05:14,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3197 to 2599. [2022-10-16 13:05:14,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2599 states, 1929 states have (on average 1.4074650077760498) internal successors, (2715), 2025 states have internal predecessors, (2715), 476 states have call successors, (476), 148 states have call predecessors, (476), 148 states have return successors, (472), 441 states have call predecessors, (472), 472 states have call successors, (472) [2022-10-16 13:05:14,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2599 states to 2599 states and 3663 transitions. [2022-10-16 13:05:14,505 INFO L78 Accepts]: Start accepts. Automaton has 2599 states and 3663 transitions. Word has length 79 [2022-10-16 13:05:14,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:14,506 INFO L495 AbstractCegarLoop]: Abstraction has 2599 states and 3663 transitions. [2022-10-16 13:05:14,507 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 3 states have internal predecessors, (54), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:05:14,507 INFO L276 IsEmpty]: Start isEmpty. Operand 2599 states and 3663 transitions. [2022-10-16 13:05:14,512 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-10-16 13:05:14,512 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:14,513 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:14,513 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 13:05:14,513 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:05:14,514 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:14,515 INFO L85 PathProgramCache]: Analyzing trace with hash -493003555, now seen corresponding path program 1 times [2022-10-16 13:05:14,516 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:14,516 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [156588676] [2022-10-16 13:05:14,516 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:14,517 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:14,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:14,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:15,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:05:15,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:15,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:05:15,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:15,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:05:15,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:15,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 13:05:15,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:15,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:05:15,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:15,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:05:15,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:15,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:05:15,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:15,088 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-10-16 13:05:15,088 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:15,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [156588676] [2022-10-16 13:05:15,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [156588676] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:15,089 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:05:15,089 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-16 13:05:15,089 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1488794338] [2022-10-16 13:05:15,089 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:15,090 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:05:15,090 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:15,090 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:05:15,090 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:05:15,091 INFO L87 Difference]: Start difference. First operand 2599 states and 3663 transitions. Second operand has 5 states, 4 states have (on average 13.25) internal successors, (53), 3 states have internal predecessors, (53), 1 states have call successors, (8), 3 states have call predecessors, (8), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-10-16 13:05:17,256 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:19,283 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:23,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:23,051 INFO L93 Difference]: Finished difference Result 3119 states and 4475 transitions. [2022-10-16 13:05:23,051 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:05:23,051 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 13.25) internal successors, (53), 3 states have internal predecessors, (53), 1 states have call successors, (8), 3 states have call predecessors, (8), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) Word has length 88 [2022-10-16 13:05:23,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:23,073 INFO L225 Difference]: With dead ends: 3119 [2022-10-16 13:05:23,074 INFO L226 Difference]: Without dead ends: 3117 [2022-10-16 13:05:23,076 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:05:23,077 INFO L413 NwaCegarLoop]: 1203 mSDtfsCounter, 471 mSDsluCounter, 2170 mSDsCounter, 0 mSdLazyCounter, 1172 mSolverCounterSat, 435 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 485 SdHoareTripleChecker+Valid, 3373 SdHoareTripleChecker+Invalid, 1609 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 435 IncrementalHoareTripleChecker+Valid, 1172 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.7s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:23,077 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [485 Valid, 3373 Invalid, 1609 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [435 Valid, 1172 Invalid, 2 Unknown, 0 Unchecked, 7.7s Time] [2022-10-16 13:05:23,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3117 states. [2022-10-16 13:05:23,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3117 to 2631. [2022-10-16 13:05:23,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2631 states, 1961 states have (on average 1.4069352371239163) internal successors, (2759), 2057 states have internal predecessors, (2759), 476 states have call successors, (476), 148 states have call predecessors, (476), 148 states have return successors, (472), 441 states have call predecessors, (472), 472 states have call successors, (472) [2022-10-16 13:05:23,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2631 states to 2631 states and 3707 transitions. [2022-10-16 13:05:23,269 INFO L78 Accepts]: Start accepts. Automaton has 2631 states and 3707 transitions. Word has length 88 [2022-10-16 13:05:23,272 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:23,272 INFO L495 AbstractCegarLoop]: Abstraction has 2631 states and 3707 transitions. [2022-10-16 13:05:23,272 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 13.25) internal successors, (53), 3 states have internal predecessors, (53), 1 states have call successors, (8), 3 states have call predecessors, (8), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-10-16 13:05:23,272 INFO L276 IsEmpty]: Start isEmpty. Operand 2631 states and 3707 transitions. [2022-10-16 13:05:23,275 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2022-10-16 13:05:23,276 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:23,276 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:23,276 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-16 13:05:23,276 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:05:23,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:23,277 INFO L85 PathProgramCache]: Analyzing trace with hash 1249426519, now seen corresponding path program 1 times [2022-10-16 13:05:23,277 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:23,277 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [533989289] [2022-10-16 13:05:23,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:23,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:23,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:23,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:05:23,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:05:23,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:05:23,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 13:05:23,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:05:23,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:05:23,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:05:23,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-10-16 13:05:23,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:23,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,970 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2022-10-16 13:05:23,970 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:23,971 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [533989289] [2022-10-16 13:05:23,971 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [533989289] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:23,971 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:05:23,971 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:05:23,971 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565477164] [2022-10-16 13:05:23,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:23,972 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:05:23,972 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:23,973 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:05:23,973 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:05:23,973 INFO L87 Difference]: Start difference. First operand 2631 states and 3707 transitions. Second operand has 6 states, 6 states have (on average 9.5) internal successors, (57), 3 states have internal predecessors, (57), 3 states have call successors, (10), 4 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:05:26,119 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:28,150 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:31,303 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:33,330 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:37,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:37,887 INFO L93 Difference]: Finished difference Result 7179 states and 10271 transitions. [2022-10-16 13:05:37,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:05:37,894 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 3 states have internal predecessors, (57), 3 states have call successors, (10), 4 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 92 [2022-10-16 13:05:37,895 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:37,928 INFO L225 Difference]: With dead ends: 7179 [2022-10-16 13:05:37,928 INFO L226 Difference]: Without dead ends: 4585 [2022-10-16 13:05:37,938 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=54, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:05:37,939 INFO L413 NwaCegarLoop]: 1444 mSDtfsCounter, 2231 mSDsluCounter, 2144 mSDsCounter, 0 mSdLazyCounter, 1577 mSolverCounterSat, 1223 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2381 SdHoareTripleChecker+Valid, 3588 SdHoareTripleChecker+Invalid, 2804 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1223 IncrementalHoareTripleChecker+Valid, 1577 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.4s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:37,940 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2381 Valid, 3588 Invalid, 2804 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1223 Valid, 1577 Invalid, 4 Unknown, 0 Unchecked, 13.4s Time] [2022-10-16 13:05:37,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4585 states. [2022-10-16 13:05:38,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4585 to 3714. [2022-10-16 13:05:38,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3714 states, 2790 states have (on average 1.4050179211469533) internal successors, (3920), 2908 states have internal predecessors, (3920), 665 states have call successors, (665), 213 states have call predecessors, (665), 213 states have return successors, (659), 613 states have call predecessors, (659), 659 states have call successors, (659) [2022-10-16 13:05:38,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3714 states to 3714 states and 5244 transitions. [2022-10-16 13:05:38,224 INFO L78 Accepts]: Start accepts. Automaton has 3714 states and 5244 transitions. Word has length 92 [2022-10-16 13:05:38,224 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:38,224 INFO L495 AbstractCegarLoop]: Abstraction has 3714 states and 5244 transitions. [2022-10-16 13:05:38,225 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.5) internal successors, (57), 3 states have internal predecessors, (57), 3 states have call successors, (10), 4 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:05:38,225 INFO L276 IsEmpty]: Start isEmpty. Operand 3714 states and 5244 transitions. [2022-10-16 13:05:38,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-10-16 13:05:38,227 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:38,227 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:38,228 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-16 13:05:38,228 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting mwifiex_get_privErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:05:38,228 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:38,228 INFO L85 PathProgramCache]: Analyzing trace with hash -1661942328, now seen corresponding path program 1 times [2022-10-16 13:05:38,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:38,229 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019083213] [2022-10-16 13:05:38,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:38,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:38,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:38,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:38,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:38,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:05:38,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:38,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:05:38,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:38,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:05:38,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:38,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 13:05:38,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:38,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:05:38,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:38,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:05:38,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:38,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:05:38,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:38,694 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-10-16 13:05:38,695 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:38,695 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019083213] [2022-10-16 13:05:38,696 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2019083213] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:38,696 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:05:38,696 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-16 13:05:38,697 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [62241786] [2022-10-16 13:05:38,697 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:38,698 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:05:38,698 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:38,699 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:05:38,699 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:05:38,699 INFO L87 Difference]: Start difference. First operand 3714 states and 5244 transitions. Second operand has 5 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 1 states have call successors, (9), 3 states have call predecessors, (9), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-10-16 13:05:40,858 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:42,887 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:46,749 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:46,750 INFO L93 Difference]: Finished difference Result 4510 states and 6484 transitions. [2022-10-16 13:05:46,751 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:05:46,751 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 1 states have call successors, (9), 3 states have call predecessors, (9), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) Word has length 91 [2022-10-16 13:05:46,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:46,784 INFO L225 Difference]: With dead ends: 4510 [2022-10-16 13:05:46,784 INFO L226 Difference]: Without dead ends: 4508 [2022-10-16 13:05:46,787 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:05:46,788 INFO L413 NwaCegarLoop]: 1210 mSDtfsCounter, 506 mSDsluCounter, 2177 mSDsCounter, 0 mSdLazyCounter, 1170 mSolverCounterSat, 430 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 520 SdHoareTripleChecker+Valid, 3387 SdHoareTripleChecker+Invalid, 1602 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 430 IncrementalHoareTripleChecker+Valid, 1170 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.7s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:46,789 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [520 Valid, 3387 Invalid, 1602 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [430 Valid, 1170 Invalid, 2 Unknown, 0 Unchecked, 7.7s Time] [2022-10-16 13:05:46,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4508 states. [2022-10-16 13:05:47,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4508 to 3762. [2022-10-16 13:05:47,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3762 states, 2838 states have (on average 1.4066243833685694) internal successors, (3992), 2956 states have internal predecessors, (3992), 665 states have call successors, (665), 213 states have call predecessors, (665), 213 states have return successors, (659), 613 states have call predecessors, (659), 659 states have call successors, (659) [2022-10-16 13:05:47,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3762 states to 3762 states and 5316 transitions. [2022-10-16 13:05:47,137 INFO L78 Accepts]: Start accepts. Automaton has 3762 states and 5316 transitions. Word has length 91 [2022-10-16 13:05:47,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:47,137 INFO L495 AbstractCegarLoop]: Abstraction has 3762 states and 5316 transitions. [2022-10-16 13:05:47,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 1 states have call successors, (9), 3 states have call predecessors, (9), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-10-16 13:05:47,138 INFO L276 IsEmpty]: Start isEmpty. Operand 3762 states and 5316 transitions. [2022-10-16 13:05:47,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-10-16 13:05:47,140 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:47,140 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:47,141 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-16 13:05:47,141 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:05:47,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:47,142 INFO L85 PathProgramCache]: Analyzing trace with hash 1305537196, now seen corresponding path program 1 times [2022-10-16 13:05:47,142 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:47,142 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [852881585] [2022-10-16 13:05:47,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:47,142 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:47,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:47,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:47,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:47,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:05:47,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:47,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:05:47,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:47,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:05:47,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 13:05:48,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-10-16 13:05:48,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:05:48,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:05:48,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-10-16 13:05:48,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,082 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-10-16 13:05:48,083 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:48,083 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [852881585] [2022-10-16 13:05:48,083 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [852881585] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:48,083 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:05:48,083 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:05:48,084 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [461727404] [2022-10-16 13:05:48,084 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:48,084 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:05:48,085 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:48,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:05:48,085 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:05:48,086 INFO L87 Difference]: Start difference. First operand 3762 states and 5316 transitions. Second operand has 6 states, 6 states have (on average 10.0) internal successors, (60), 4 states have internal predecessors, (60), 2 states have call successors, (10), 4 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:05:50,320 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:52,349 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:05:56,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:56,451 INFO L93 Difference]: Finished difference Result 8219 states and 11726 transitions. [2022-10-16 13:05:56,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:05:56,453 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.0) internal successors, (60), 4 states have internal predecessors, (60), 2 states have call successors, (10), 4 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 97 [2022-10-16 13:05:56,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:56,480 INFO L225 Difference]: With dead ends: 8219 [2022-10-16 13:05:56,481 INFO L226 Difference]: Without dead ends: 4470 [2022-10-16 13:05:56,495 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-10-16 13:05:56,496 INFO L413 NwaCegarLoop]: 1201 mSDtfsCounter, 463 mSDsluCounter, 3128 mSDsCounter, 0 mSdLazyCounter, 1499 mSolverCounterSat, 431 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 477 SdHoareTripleChecker+Valid, 4329 SdHoareTripleChecker+Invalid, 1932 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 431 IncrementalHoareTripleChecker+Valid, 1499 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:56,496 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [477 Valid, 4329 Invalid, 1932 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [431 Valid, 1499 Invalid, 2 Unknown, 0 Unchecked, 8.0s Time] [2022-10-16 13:05:56,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4470 states. [2022-10-16 13:05:56,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4470 to 3766. [2022-10-16 13:05:56,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3766 states, 2842 states have (on average 1.406052076002815) internal successors, (3996), 2960 states have internal predecessors, (3996), 665 states have call successors, (665), 213 states have call predecessors, (665), 213 states have return successors, (659), 613 states have call predecessors, (659), 659 states have call successors, (659) [2022-10-16 13:05:56,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3766 states to 3766 states and 5320 transitions. [2022-10-16 13:05:56,829 INFO L78 Accepts]: Start accepts. Automaton has 3766 states and 5320 transitions. Word has length 97 [2022-10-16 13:05:56,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:56,829 INFO L495 AbstractCegarLoop]: Abstraction has 3766 states and 5320 transitions. [2022-10-16 13:05:56,830 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.0) internal successors, (60), 4 states have internal predecessors, (60), 2 states have call successors, (10), 4 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:05:56,830 INFO L276 IsEmpty]: Start isEmpty. Operand 3766 states and 5320 transitions. [2022-10-16 13:05:56,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-10-16 13:05:56,834 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:56,834 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:56,834 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-16 13:05:56,834 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:05:56,835 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:56,835 INFO L85 PathProgramCache]: Analyzing trace with hash 1396851049, now seen corresponding path program 1 times [2022-10-16 13:05:56,835 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:56,835 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1415102586] [2022-10-16 13:05:56,835 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:56,836 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:57,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:57,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:57,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:57,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:05:57,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:57,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:05:57,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:57,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:05:57,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:57,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-16 13:05:57,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:57,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-16 13:05:57,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:57,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-10-16 13:05:57,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:57,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:05:57,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:57,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-10-16 13:05:57,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:57,916 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-10-16 13:05:57,916 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:57,916 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1415102586] [2022-10-16 13:05:57,917 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1415102586] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:05:57,917 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2147383245] [2022-10-16 13:05:57,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:57,917 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:57,917 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:05:57,923 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:05:57,947 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-16 13:05:58,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:58,599 INFO L263 TraceCheckSpWp]: Trace formula consists of 2134 conjuncts, 15 conjunts are in the unsatisfiable core [2022-10-16 13:05:58,614 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:05:58,700 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-10-16 13:05:58,700 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:05:58,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2147383245] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:58,701 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:05:58,701 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [7] total 10 [2022-10-16 13:05:58,701 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1161374608] [2022-10-16 13:05:58,701 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:58,702 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:05:58,702 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:58,702 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:05:58,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:05:58,703 INFO L87 Difference]: Start difference. First operand 3766 states and 5320 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:05:59,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:59,062 INFO L93 Difference]: Finished difference Result 7497 states and 10595 transitions. [2022-10-16 13:05:59,062 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:05:59,062 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-10-16 13:05:59,063 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:59,086 INFO L225 Difference]: With dead ends: 7497 [2022-10-16 13:05:59,086 INFO L226 Difference]: Without dead ends: 3766 [2022-10-16 13:05:59,100 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 111 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=105, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:05:59,101 INFO L413 NwaCegarLoop]: 1258 mSDtfsCounter, 3 mSDsluCounter, 3767 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 5025 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:59,101 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 5025 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-16 13:05:59,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3766 states. [2022-10-16 13:05:59,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3766 to 3766. [2022-10-16 13:05:59,357 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3766 states, 2842 states have (on average 1.4057002111189303) internal successors, (3995), 2960 states have internal predecessors, (3995), 665 states have call successors, (665), 213 states have call predecessors, (665), 213 states have return successors, (659), 613 states have call predecessors, (659), 659 states have call successors, (659) [2022-10-16 13:05:59,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3766 states to 3766 states and 5319 transitions. [2022-10-16 13:05:59,373 INFO L78 Accepts]: Start accepts. Automaton has 3766 states and 5319 transitions. Word has length 98 [2022-10-16 13:05:59,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:59,373 INFO L495 AbstractCegarLoop]: Abstraction has 3766 states and 5319 transitions. [2022-10-16 13:05:59,374 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:05:59,374 INFO L276 IsEmpty]: Start isEmpty. Operand 3766 states and 5319 transitions. [2022-10-16 13:05:59,376 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2022-10-16 13:05:59,376 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:59,377 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:59,422 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-16 13:05:59,592 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:59,593 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:05:59,594 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:59,594 INFO L85 PathProgramCache]: Analyzing trace with hash 600970062, now seen corresponding path program 1 times [2022-10-16 13:05:59,594 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:59,595 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [891574047] [2022-10-16 13:05:59,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:59,595 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:59,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:00,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:06:00,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:06:00,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:06:00,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-16 13:06:00,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-16 13:06:00,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-10-16 13:06:00,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:06:00,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-10-16 13:06:00,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:06:00,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:00,623 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-10-16 13:06:00,623 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:06:00,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [891574047] [2022-10-16 13:06:00,624 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [891574047] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:06:00,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [575918175] [2022-10-16 13:06:00,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:00,624 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:06:00,624 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:06:00,626 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:06:00,648 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-16 13:06:01,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,645 INFO L263 TraceCheckSpWp]: Trace formula consists of 2211 conjuncts, 35 conjunts are in the unsatisfiable core [2022-10-16 13:06:01,654 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:06:01,791 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2022-10-16 13:06:01,791 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:06:02,045 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2022-10-16 13:06:02,046 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [575918175] provided 1 perfect and 1 imperfect interpolant sequences [2022-10-16 13:06:02,046 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-10-16 13:06:02,046 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [7, 8] total 15 [2022-10-16 13:06:02,046 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [839394154] [2022-10-16 13:06:02,046 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:06:02,047 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:06:02,047 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:06:02,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:06:02,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=181, Unknown=0, NotChecked=0, Total=210 [2022-10-16 13:06:02,048 INFO L87 Difference]: Start difference. First operand 3766 states and 5319 transitions. Second operand has 6 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-10-16 13:06:02,763 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:06:02,763 INFO L93 Difference]: Finished difference Result 8580 states and 12262 transitions. [2022-10-16 13:06:02,764 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:06:02,764 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 104 [2022-10-16 13:06:02,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:06:02,786 INFO L225 Difference]: With dead ends: 8580 [2022-10-16 13:06:02,786 INFO L226 Difference]: Without dead ends: 4852 [2022-10-16 13:06:02,800 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 231 GetRequests, 217 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=33, Invalid=207, Unknown=0, NotChecked=0, Total=240 [2022-10-16 13:06:02,801 INFO L413 NwaCegarLoop]: 1783 mSDtfsCounter, 473 mSDsluCounter, 6565 mSDsCounter, 0 mSdLazyCounter, 201 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 558 SdHoareTripleChecker+Valid, 8348 SdHoareTripleChecker+Invalid, 201 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 201 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-10-16 13:06:02,801 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [558 Valid, 8348 Invalid, 201 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 201 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-10-16 13:06:02,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4852 states. [2022-10-16 13:06:03,079 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4852 to 3766. [2022-10-16 13:06:03,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3766 states, 2842 states have (on average 1.4046446164672766) internal successors, (3992), 2960 states have internal predecessors, (3992), 665 states have call successors, (665), 213 states have call predecessors, (665), 213 states have return successors, (659), 613 states have call predecessors, (659), 659 states have call successors, (659) [2022-10-16 13:06:03,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3766 states to 3766 states and 5316 transitions. [2022-10-16 13:06:03,100 INFO L78 Accepts]: Start accepts. Automaton has 3766 states and 5316 transitions. Word has length 104 [2022-10-16 13:06:03,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:06:03,101 INFO L495 AbstractCegarLoop]: Abstraction has 3766 states and 5316 transitions. [2022-10-16 13:06:03,101 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 3 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-10-16 13:06:03,101 INFO L276 IsEmpty]: Start isEmpty. Operand 3766 states and 5316 transitions. [2022-10-16 13:06:03,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2022-10-16 13:06:03,103 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:06:03,104 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:06:03,148 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-16 13:06:03,317 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-10-16 13:06:03,318 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:06:03,318 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:06:03,319 INFO L85 PathProgramCache]: Analyzing trace with hash -1918989872, now seen corresponding path program 1 times [2022-10-16 13:06:03,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:06:03,319 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [602681566] [2022-10-16 13:06:03,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:03,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:06:03,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:04,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:06:04,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:06:04,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:06:04,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-16 13:06:04,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-16 13:06:04,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-10-16 13:06:04,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:06:04,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-10-16 13:06:04,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:06:04,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:04,325 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-10-16 13:06:04,325 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:06:04,325 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [602681566] [2022-10-16 13:06:04,326 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [602681566] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:06:04,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [406599468] [2022-10-16 13:06:04,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:04,326 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:06:04,326 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:06:04,327 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:06:04,351 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-10-16 13:06:05,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:05,011 INFO L263 TraceCheckSpWp]: Trace formula consists of 2212 conjuncts, 37 conjunts are in the unsatisfiable core [2022-10-16 13:06:05,018 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:06:05,097 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-10-16 13:06:05,097 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:06:05,097 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [406599468] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:06:05,097 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:06:05,097 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [7] total 11 [2022-10-16 13:06:05,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1280363204] [2022-10-16 13:06:05,098 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:06:05,098 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:06:05,099 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:06:05,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:06:05,099 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2022-10-16 13:06:05,099 INFO L87 Difference]: Start difference. First operand 3766 states and 5316 transitions. Second operand has 6 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 3 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:06:05,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:06:05,570 INFO L93 Difference]: Finished difference Result 7494 states and 10584 transitions. [2022-10-16 13:06:05,571 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:06:05,571 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 3 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 104 [2022-10-16 13:06:05,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:06:05,586 INFO L225 Difference]: With dead ends: 7494 [2022-10-16 13:06:05,587 INFO L226 Difference]: Without dead ends: 3766 [2022-10-16 13:06:05,600 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 118 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:06:05,601 INFO L413 NwaCegarLoop]: 1253 mSDtfsCounter, 482 mSDsluCounter, 4424 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 568 SdHoareTripleChecker+Valid, 5677 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-16 13:06:05,601 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [568 Valid, 5677 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-16 13:06:05,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3766 states. [2022-10-16 13:06:05,841 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3766 to 3766. [2022-10-16 13:06:05,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3766 states, 2842 states have (on average 1.404292751583392) internal successors, (3991), 2960 states have internal predecessors, (3991), 665 states have call successors, (665), 213 states have call predecessors, (665), 213 states have return successors, (659), 613 states have call predecessors, (659), 659 states have call successors, (659) [2022-10-16 13:06:05,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3766 states to 3766 states and 5315 transitions. [2022-10-16 13:06:05,863 INFO L78 Accepts]: Start accepts. Automaton has 3766 states and 5315 transitions. Word has length 104 [2022-10-16 13:06:05,863 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:06:05,863 INFO L495 AbstractCegarLoop]: Abstraction has 3766 states and 5315 transitions. [2022-10-16 13:06:05,864 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 3 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:06:05,864 INFO L276 IsEmpty]: Start isEmpty. Operand 3766 states and 5315 transitions. [2022-10-16 13:06:05,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2022-10-16 13:06:05,866 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:06:05,867 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:06:05,904 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-10-16 13:06:06,080 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:06:06,081 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:06:06,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:06:06,082 INFO L85 PathProgramCache]: Analyzing trace with hash -1973382770, now seen corresponding path program 1 times [2022-10-16 13:06:06,082 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:06:06,082 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [845564114] [2022-10-16 13:06:06,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:06,083 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:06:06,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:06,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:06,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:06,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:06:06,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:06,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:06:06,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:06,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:06:06,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-16 13:06:07,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-16 13:06:07,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-10-16 13:06:07,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:06:07,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-10-16 13:06:07,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:06:07,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,192 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-10-16 13:06:07,192 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:06:07,192 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [845564114] [2022-10-16 13:06:07,193 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [845564114] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:06:07,193 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [790771093] [2022-10-16 13:06:07,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:07,193 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:06:07,193 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:06:07,197 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:06:07,215 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-10-16 13:06:08,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:08,044 INFO L263 TraceCheckSpWp]: Trace formula consists of 2213 conjuncts, 37 conjunts are in the unsatisfiable core [2022-10-16 13:06:08,059 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:06:08,243 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-10-16 13:06:08,244 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:06:08,245 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [790771093] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:06:08,245 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:06:08,246 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [7] total 14 [2022-10-16 13:06:08,246 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427042884] [2022-10-16 13:06:08,246 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:06:08,246 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-10-16 13:06:08,247 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:06:08,249 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-10-16 13:06:08,249 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=157, Unknown=0, NotChecked=0, Total=182 [2022-10-16 13:06:08,250 INFO L87 Difference]: Start difference. First operand 3766 states and 5315 transitions. Second operand has 9 states, 7 states have (on average 9.857142857142858) internal successors, (69), 7 states have internal predecessors, (69), 4 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2022-10-16 13:06:09,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:06:09,176 INFO L93 Difference]: Finished difference Result 7494 states and 10582 transitions. [2022-10-16 13:06:09,177 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:06:09,177 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 7 states have (on average 9.857142857142858) internal successors, (69), 7 states have internal predecessors, (69), 4 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) Word has length 104 [2022-10-16 13:06:09,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:06:09,192 INFO L225 Difference]: With dead ends: 7494 [2022-10-16 13:06:09,192 INFO L226 Difference]: Without dead ends: 3766 [2022-10-16 13:06:09,204 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=43, Invalid=263, Unknown=0, NotChecked=0, Total=306 [2022-10-16 13:06:09,206 INFO L413 NwaCegarLoop]: 1250 mSDtfsCounter, 951 mSDsluCounter, 7606 mSDsCounter, 0 mSdLazyCounter, 221 mSolverCounterSat, 169 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 953 SdHoareTripleChecker+Valid, 8856 SdHoareTripleChecker+Invalid, 390 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 169 IncrementalHoareTripleChecker+Valid, 221 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-10-16 13:06:09,206 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [953 Valid, 8856 Invalid, 390 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [169 Valid, 221 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-10-16 13:06:09,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3766 states. [2022-10-16 13:06:09,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3766 to 3766. [2022-10-16 13:06:09,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3766 states, 2842 states have (on average 1.4039408866995073) internal successors, (3990), 2960 states have internal predecessors, (3990), 665 states have call successors, (665), 213 states have call predecessors, (665), 213 states have return successors, (659), 613 states have call predecessors, (659), 659 states have call successors, (659) [2022-10-16 13:06:09,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3766 states to 3766 states and 5314 transitions. [2022-10-16 13:06:09,481 INFO L78 Accepts]: Start accepts. Automaton has 3766 states and 5314 transitions. Word has length 104 [2022-10-16 13:06:09,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:06:09,481 INFO L495 AbstractCegarLoop]: Abstraction has 3766 states and 5314 transitions. [2022-10-16 13:06:09,481 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 7 states have (on average 9.857142857142858) internal successors, (69), 7 states have internal predecessors, (69), 4 states have call successors, (11), 2 states have call predecessors, (11), 3 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2022-10-16 13:06:09,482 INFO L276 IsEmpty]: Start isEmpty. Operand 3766 states and 5314 transitions. [2022-10-16 13:06:09,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2022-10-16 13:06:09,484 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:06:09,484 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:06:09,528 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-10-16 13:06:09,698 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:06:09,698 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:06:09,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:06:09,699 INFO L85 PathProgramCache]: Analyzing trace with hash -1079896432, now seen corresponding path program 1 times [2022-10-16 13:06:09,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:06:09,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [540015158] [2022-10-16 13:06:09,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:09,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:06:09,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:10,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:06:10,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:06:10,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-10-16 13:06:10,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-16 13:06:10,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-16 13:06:10,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-10-16 13:06:10,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:06:10,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-10-16 13:06:10,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-10-16 13:06:10,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:10,740 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-10-16 13:06:10,741 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:06:10,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [540015158] [2022-10-16 13:06:10,741 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [540015158] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:06:10,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1399726323] [2022-10-16 13:06:10,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:10,742 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:06:10,742 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:06:10,743 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:06:10,760 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-10-16 13:06:11,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:11,750 INFO L263 TraceCheckSpWp]: Trace formula consists of 2214 conjuncts, 8 conjunts are in the unsatisfiable core [2022-10-16 13:06:11,754 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:06:11,892 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 36 proven. 1 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2022-10-16 13:06:11,892 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:06:12,068 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-10-16 13:06:12,069 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1399726323] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:06:12,069 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:06:12,069 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 12 [2022-10-16 13:06:12,070 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1556636543] [2022-10-16 13:06:12,070 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:06:12,071 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-10-16 13:06:12,071 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:06:12,071 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-10-16 13:06:12,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=95, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:06:12,072 INFO L87 Difference]: Start difference. First operand 3766 states and 5314 transitions. Second operand has 12 states, 12 states have (on average 6.416666666666667) internal successors, (77), 10 states have internal predecessors, (77), 2 states have call successors, (24), 4 states have call predecessors, (24), 5 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2022-10-16 13:06:14,531 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:06:16,562 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:06:22,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:06:22,285 INFO L93 Difference]: Finished difference Result 8230 states and 11727 transitions. [2022-10-16 13:06:22,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-10-16 13:06:22,286 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 6.416666666666667) internal successors, (77), 10 states have internal predecessors, (77), 2 states have call successors, (24), 4 states have call predecessors, (24), 5 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 104 [2022-10-16 13:06:22,286 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:06:22,305 INFO L225 Difference]: With dead ends: 8230 [2022-10-16 13:06:22,305 INFO L226 Difference]: Without dead ends: 4476 [2022-10-16 13:06:22,318 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 238 GetRequests, 220 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=100, Invalid=242, Unknown=0, NotChecked=0, Total=342 [2022-10-16 13:06:22,319 INFO L413 NwaCegarLoop]: 1194 mSDtfsCounter, 471 mSDsluCounter, 4052 mSDsCounter, 0 mSdLazyCounter, 1890 mSolverCounterSat, 440 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 485 SdHoareTripleChecker+Valid, 5246 SdHoareTripleChecker+Invalid, 2332 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 440 IncrementalHoareTripleChecker+Valid, 1890 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.6s IncrementalHoareTripleChecker+Time [2022-10-16 13:06:22,319 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [485 Valid, 5246 Invalid, 2332 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [440 Valid, 1890 Invalid, 2 Unknown, 0 Unchecked, 9.6s Time] [2022-10-16 13:06:22,326 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4476 states. [2022-10-16 13:06:22,716 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4476 to 3772. [2022-10-16 13:06:22,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3772 states, 2848 states have (on average 1.4030898876404494) internal successors, (3996), 2966 states have internal predecessors, (3996), 665 states have call successors, (665), 213 states have call predecessors, (665), 213 states have return successors, (659), 613 states have call predecessors, (659), 659 states have call successors, (659) [2022-10-16 13:06:22,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3772 states to 3772 states and 5320 transitions. [2022-10-16 13:06:22,742 INFO L78 Accepts]: Start accepts. Automaton has 3772 states and 5320 transitions. Word has length 104 [2022-10-16 13:06:22,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:06:22,743 INFO L495 AbstractCegarLoop]: Abstraction has 3772 states and 5320 transitions. [2022-10-16 13:06:22,743 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 6.416666666666667) internal successors, (77), 10 states have internal predecessors, (77), 2 states have call successors, (24), 4 states have call predecessors, (24), 5 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2022-10-16 13:06:22,743 INFO L276 IsEmpty]: Start isEmpty. Operand 3772 states and 5320 transitions. [2022-10-16 13:06:22,746 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2022-10-16 13:06:22,746 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:06:22,746 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 4, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:06:22,793 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-10-16 13:06:22,961 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-10-16 13:06:22,962 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 44 more)] === [2022-10-16 13:06:22,962 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:06:22,963 INFO L85 PathProgramCache]: Analyzing trace with hash 1200314579, now seen corresponding path program 2 times [2022-10-16 13:06:22,963 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:06:22,963 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1285933722] [2022-10-16 13:06:22,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:22,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:06:23,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:06:23,329 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 13:06:23,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:06:23,774 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 13:06:23,775 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 13:06:23,776 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (45 of 46 remaining) [2022-10-16 13:06:23,779 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_usb_fill_bulk_urb_2Err0ASSERT_VIOLATIONINTEGER_OVERFLOW (44 of 46 remaining) [2022-10-16 13:06:23,780 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_usb_fill_bulk_urb_2Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (43 of 46 remaining) [2022-10-16 13:06:23,780 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (42 of 46 remaining) [2022-10-16 13:06:23,780 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (41 of 46 remaining) [2022-10-16 13:06:23,780 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (40 of 46 remaining) [2022-10-16 13:06:23,781 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (39 of 46 remaining) [2022-10-16 13:06:23,781 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (38 of 46 remaining) [2022-10-16 13:06:23,781 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (37 of 46 remaining) [2022-10-16 13:06:23,781 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (36 of 46 remaining) [2022-10-16 13:06:23,781 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_disconnectErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (35 of 46 remaining) [2022-10-16 13:06:23,782 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (34 of 46 remaining) [2022-10-16 13:06:23,782 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_get_privErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (33 of 46 remaining) [2022-10-16 13:06:23,782 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_get_privErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (32 of 46 remaining) [2022-10-16 13:06:23,782 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_resumeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (31 of 46 remaining) [2022-10-16 13:06:23,782 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_resumeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (30 of 46 remaining) [2022-10-16 13:06:23,783 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_resumeErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (29 of 46 remaining) [2022-10-16 13:06:23,783 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location mwifiex_usb_resumeErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (28 of 46 remaining) [2022-10-16 13:06:23,783 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (27 of 46 remaining) [2022-10-16 13:06:23,783 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (26 of 46 remaining) [2022-10-16 13:06:23,784 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 46 remaining) [2022-10-16 13:06:23,784 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 46 remaining) [2022-10-16 13:06:23,784 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 46 remaining) [2022-10-16 13:06:23,784 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 46 remaining) [2022-10-16 13:06:23,784 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 46 remaining) [2022-10-16 13:06:23,785 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 46 remaining) [2022-10-16 13:06:23,785 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 46 remaining) [2022-10-16 13:06:23,785 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 46 remaining) [2022-10-16 13:06:23,785 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 46 remaining) [2022-10-16 13:06:23,785 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 46 remaining) [2022-10-16 13:06:23,786 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 46 remaining) [2022-10-16 13:06:23,786 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 46 remaining) [2022-10-16 13:06:23,786 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 46 remaining) [2022-10-16 13:06:23,786 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 46 remaining) [2022-10-16 13:06:23,786 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 46 remaining) [2022-10-16 13:06:23,787 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 46 remaining) [2022-10-16 13:06:23,787 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr18ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 46 remaining) [2022-10-16 13:06:23,787 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr19ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 46 remaining) [2022-10-16 13:06:23,787 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr20ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 46 remaining) [2022-10-16 13:06:23,787 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr21ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 46 remaining) [2022-10-16 13:06:23,788 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr22ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 46 remaining) [2022-10-16 13:06:23,788 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr23ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 46 remaining) [2022-10-16 13:06:23,788 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr24ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 46 remaining) [2022-10-16 13:06:23,788 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr25ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 46 remaining) [2022-10-16 13:06:23,788 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr26ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 46 remaining) [2022-10-16 13:06:23,789 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr27ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 46 remaining) [2022-10-16 13:06:23,789 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-10-16 13:06:23,794 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:06:23,799 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 13:06:23,841 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:06:24,074 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 01:06:24 BoogieIcfgContainer [2022-10-16 13:06:24,074 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 13:06:24,077 INFO L158 Benchmark]: Toolchain (without parser) took 134255.40ms. Allocated memory was 151.0MB in the beginning and 650.1MB in the end (delta: 499.1MB). Free memory was 113.7MB in the beginning and 303.7MB in the end (delta: -190.0MB). Peak memory consumption was 310.5MB. Max. memory is 8.0GB. [2022-10-16 13:06:24,078 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 151.0MB. Free memory is still 120.5MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:06:24,078 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2714.80ms. Allocated memory was 151.0MB in the beginning and 190.8MB in the end (delta: 39.8MB). Free memory was 113.5MB in the beginning and 116.9MB in the end (delta: -3.4MB). Peak memory consumption was 100.4MB. Max. memory is 8.0GB. [2022-10-16 13:06:24,080 INFO L158 Benchmark]: Boogie Procedure Inliner took 280.27ms. Allocated memory is still 190.8MB. Free memory was 116.9MB in the beginning and 99.1MB in the end (delta: 17.8MB). Peak memory consumption was 17.8MB. Max. memory is 8.0GB. [2022-10-16 13:06:24,080 INFO L158 Benchmark]: Boogie Preprocessor took 339.73ms. Allocated memory is still 190.8MB. Free memory was 99.1MB in the beginning and 122.2MB in the end (delta: -23.1MB). Peak memory consumption was 26.7MB. Max. memory is 8.0GB. [2022-10-16 13:06:24,080 INFO L158 Benchmark]: RCFGBuilder took 6158.22ms. Allocated memory was 190.8MB in the beginning and 342.9MB in the end (delta: 152.0MB). Free memory was 122.2MB in the beginning and 130.5MB in the end (delta: -8.4MB). Peak memory consumption was 148.9MB. Max. memory is 8.0GB. [2022-10-16 13:06:24,081 INFO L158 Benchmark]: TraceAbstraction took 124748.73ms. Allocated memory was 342.9MB in the beginning and 650.1MB in the end (delta: 307.2MB). Free memory was 130.0MB in the beginning and 303.7MB in the end (delta: -173.6MB). Peak memory consumption was 134.1MB. Max. memory is 8.0GB. [2022-10-16 13:06:24,083 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 151.0MB. Free memory is still 120.5MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 2714.80ms. Allocated memory was 151.0MB in the beginning and 190.8MB in the end (delta: 39.8MB). Free memory was 113.5MB in the beginning and 116.9MB in the end (delta: -3.4MB). Peak memory consumption was 100.4MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 280.27ms. Allocated memory is still 190.8MB. Free memory was 116.9MB in the beginning and 99.1MB in the end (delta: 17.8MB). Peak memory consumption was 17.8MB. Max. memory is 8.0GB. * Boogie Preprocessor took 339.73ms. Allocated memory is still 190.8MB. Free memory was 99.1MB in the beginning and 122.2MB in the end (delta: -23.1MB). Peak memory consumption was 26.7MB. Max. memory is 8.0GB. * RCFGBuilder took 6158.22ms. Allocated memory was 190.8MB in the beginning and 342.9MB in the end (delta: 152.0MB). Free memory was 122.2MB in the beginning and 130.5MB in the end (delta: -8.4MB). Peak memory consumption was 148.9MB. Max. memory is 8.0GB. * TraceAbstraction took 124748.73ms. Allocated memory was 342.9MB in the beginning and 650.1MB in the end (delta: 307.2MB). Free memory was 130.0MB in the beginning and 303.7MB in the end (delta: -173.6MB). Peak memory consumption was 134.1MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 6955]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 8527. Possible FailurePath: [L7077] int LDV_IN_INTERRUPT = 1; [L7078] struct usb_interface *mwifiex_usb_driver_group1 ; [L7079] int ldv_state_variable_2 ; [L7080] int ref_cnt ; [L7081] struct mwifiex_adapter *usb_ops_group0 ; [L7082] int ldv_state_variable_1 ; [L7083] int usb_counter ; [L7084] struct sk_buff *usb_ops_group1 ; [L7085] int ldv_state_variable_0 ; [L7166-L7168] static char const usbdriver_name[8U] = { 'u', 's', 'b', '8', '7', '9', '7', '\000'}; [L7170] static struct semaphore add_remove_card_sem ; [L7171] static struct usb_card_rec *usb_card ; [L7172-L7176] static struct usb_device_id mwifiex_usb_table[3U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7177] struct usb_device_id const __mod_usb_device_table ; [L8001-L8007] static struct usb_driver mwifiex_usb_driver = {(char const *)(& usbdriver_name), & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L8502-L8506] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0}; [L8586] int ldv_retval_0 ; [L8587] int ldv_retval_4 ; [L8588] int ldv_retval_1 ; [L8592] int ldv_retval_3 ; [L8593] int ldv_retval_2 ; [L8989] int INTERF_STATE = 0; [L8990] int SERIAL_STATE = 0; [L8991] void *usb_intfdata = 0; [L8992] struct urb *usb_urb = 0; [L8993] struct usb_device *usb_dev = 0; [L8994] int dev_counter = 0; [L8995] int completeFnIntCounter = 0; [L8996] int completeFnBulkCounter = 0; [L8997] void (*completeFnInt)(struct urb * ) ; [L8998] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8617] u8 ldvarg1 ; [L8618] u8 tmp ; [L8619] struct mwifiex_tx_param *ldvarg0 ; [L8620] void *tmp___0 ; [L8621] struct mwifiex_fw_image *ldvarg2 ; [L8622] void *tmp___1 ; [L8623] struct usb_device_id *ldvarg4 ; [L8624] void *tmp___2 ; [L8625] pm_message_t ldvarg3 ; [L8626] int tmp___3 ; [L8627] int tmp___4 ; [L8628] int tmp___5 ; [L8629] int tmp___6 ; [L8631] tmp = __VERIFIER_nondet_u8() [L8632] ldvarg1 = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=0, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=0, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8633] tmp___0 = ldv_zalloc(4UL) [L8634] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8635] tmp___1 = ldv_zalloc(32UL) [L8636] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, tmp___1={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8637] tmp___2 = ldv_zalloc(32UL) [L8638] ldvarg4 = (struct usb_device_id *)tmp___2 [L8639] FCALL ldv_initialize() [L8640] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={169:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8641] ldv_state_variable_1 = 0 [L8642] ref_cnt = 0 [L8643] ldv_state_variable_0 = 1 [L8644] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: [L8722] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8723] COND TRUE ldv_state_variable_0 != 0 [L8724] tmp___5 = __VERIFIER_nondet_int() [L8726] case 0: [L8734] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8735] COND TRUE ldv_state_variable_0 == 1 [L8736] CALL, EXPR mwifiex_usb_init_module() [L8509] int ret ; [L8510] struct _ddebug descriptor ; [L8511] long tmp ; [L8512] struct _ddebug descriptor___0 ; [L8513] long tmp___0 ; [L8515] descriptor.modname = "mwifiex_usb" [L8516] descriptor.function = "mwifiex_usb_init_module" [L8517] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8518] descriptor.format = "Marvell USB8797 Driver\n" [L8519] descriptor.lineno = 1030U [L8520] descriptor.flags = 0U [L8521] EXPR descriptor.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor.flags=0, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor.flags=0, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8521] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8522] COND FALSE !(tmp != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8526] CALL sema_init(& add_remove_card_sem, 1) [L6892] struct lock_class_key __key ; [L6893] struct semaphore __constr_expr_0 ; [L6895] __constr_expr_0.lock.raw_lock.ldv_2243.head_tail = 0U [L6896] __constr_expr_0.lock.magic = 3735899821U [L6897] __constr_expr_0.lock.owner_cpu = 4294967295U [L6898] __constr_expr_0.lock.owner = (void *)-1 [L6899] __constr_expr_0.lock.dep_map.key = 0 [L6900] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L6901] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L6902] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L6903] __constr_expr_0.lock.dep_map.cpu = 0 [L6904] __constr_expr_0.lock.dep_map.ip = 0UL [L6905] __constr_expr_0.count = (unsigned int )val [L6906] __constr_expr_0.wait_list.next = & sem->wait_list [L6907] __constr_expr_0.wait_list.prev = & sem->wait_list [L6908] *sem = __constr_expr_0 [L6909] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L6910] return; [L6910] return; VAL [={0:0}, ={0:0}, \old(val)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, sem={161:0}, sem={161:0}, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}, val=1] [L8526] RET sema_init(& add_remove_card_sem, 1) [L8527] CALL, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8961] ldv_func_ret_type ldv_func_res ; [L8962] int tmp ; [L8964] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9357] return __VERIFIER_nondet_int(); [L8964] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8964] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8965] ldv_func_res = tmp [L8966] ldv_state_variable_2 = 1 [L8967] usb_counter = 0 [L8968] CALL ldv_usb_driver_2() [L8596] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1520UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8598] tmp = ldv_zalloc(1520UL) [L8599] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8968] RET ldv_usb_driver_2() [L8969] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={163:0}, ldv_func_arg1={163:0}, ldv_func_arg2={4294967316:4294967304}, ldv_func_arg2={4294967316:4294967304}, ldv_func_arg3={153:0}, ldv_func_arg3={153:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8527] RET, EXPR ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8527] ret = ldv_usb_register_driver_22(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8528] COND FALSE !(ret != 0) [L8531] descriptor___0.modname = "mwifiex_usb" [L8532] descriptor___0.function = "mwifiex_usb_init_module" [L8533] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8534] descriptor___0.format = "info: Driver registered successfully!\n" [L8535] descriptor___0.lineno = 1038U [L8536] descriptor___0.flags = 0U [L8537] EXPR descriptor___0.flags VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, descriptor___0.flags=0, dev_counter=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8537] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8538] COND FALSE !(tmp___0 != 0L) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, descriptor={165:0}, descriptor___0={170:0}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8543] return (ret); [L8543] return (ret); [L8543] return (ret); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, ret=0, SERIAL_STATE=0, tmp=0, tmp___0=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8736] RET, EXPR mwifiex_usb_init_module() [L8736] ldv_retval_0 = mwifiex_usb_init_module() [L8737] COND TRUE ldv_retval_0 == 0 [L8738] ldv_state_variable_0 = 3 [L8739] ldv_state_variable_1 = 1 [L8740] CALL ldv_initialize_mwifiex_if_ops_1() [L8605] void *tmp ; [L8606] void *tmp___0 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] CALL, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=5920, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=5920, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] RET, EXPR ldv_zalloc(5920UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(5920UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8608] tmp = ldv_zalloc(5920UL) [L8609] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] CALL, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7019] void *p ; [L7020] void *tmp ; [L7021] int tmp___0 ; [L7023] tmp___0 = __VERIFIER_nondet_int() [L7024] COND TRUE tmp___0 != 0 [L7025] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=240, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, size=240, tmp___0=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] RET, EXPR ldv_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(240UL)={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8610] tmp___0 = ldv_zalloc(240UL) [L8611] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8740] RET ldv_initialize_mwifiex_if_ops_1() [L8743] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8646] tmp___3 = __VERIFIER_nondet_int() [L8648] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8649] COND TRUE ldv_state_variable_1 != 0 [L8650] tmp___4 = __VERIFIER_nondet_int() [L8652] case 0: [L8659] case 1: [L8666] case 2: [L8673] case 3: [L8680] case 4: [L8687] case 5: [L8694] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=0, ldvarg2={0:0}, ldvarg3={169:0}, ldvarg4={0:0}, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=6, tmp___5=1, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8695] COND TRUE ldv_state_variable_1 == 1 [L8696] CALL mwifiex_usb_host_to_card(usb_ops_group0, (int )ldvarg1, usb_ops_group1, ldvarg0) [L8147] struct usb_card_rec *card ; [L8148] struct urb_context *context ; [L8149] u8 *data ; [L8150] struct urb *tx_urb ; [L8151] int tmp ; [L8152] struct _ddebug descriptor ; [L8153] long tmp___0 ; [L8154] int tmp___1 ; [L8155] unsigned int tmp___2 ; [L8156] int tmp___3 ; [L8157] int tmp___4 ; [L8159] EXPR adapter->card [L8159] card = (struct usb_card_rec *)adapter->card [L8160] EXPR skb->data [L8160] data = skb->data [L8161] EXPR adapter->is_suspended VAL [={0:0}, ={0:0}, \old(ep)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, adapter={0:0}, adapter={0:0}, adapter->is_suspended=0, add_remove_card_sem={161:0}, card={168:-142}, completeFnBulkCounter=0, completeFnIntCounter=0, data={4294967299:4294967336}, descriptor={168:0}, dev_counter=0, ep=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, skb={0:0}, tx_param={0:0}, tx_param={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8161] COND FALSE !((int )adapter->is_suspended) [L8167] EXPR adapter->surprise_removed VAL [={0:0}, ={0:0}, \old(ep)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, adapter={0:0}, adapter={0:0}, adapter->surprise_removed=0, add_remove_card_sem={161:0}, card={168:-142}, completeFnBulkCounter=0, completeFnIntCounter=0, data={4294967299:4294967336}, descriptor={168:0}, dev_counter=0, ep=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, skb={0:0}, tx_param={0:0}, tx_param={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8167] COND FALSE !((int )adapter->surprise_removed) [L8172] EXPR card->tx_data_ep VAL [={0:0}, ={0:0}, \old(ep)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={168:-142}, card->tx_data_ep=171, completeFnBulkCounter=0, completeFnIntCounter=0, data={4294967299:4294967336}, descriptor={168:0}, dev_counter=0, ep=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, skb={0:0}, tx_param={0:0}, tx_param={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8172] COND FALSE !((int )card->tx_data_ep == (int )ep) [L8180] descriptor.modname = "mwifiex_usb" [L8181] descriptor.function = "mwifiex_usb_host_to_card" [L8182] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers--X--defaultlinux-3.12-rc1.tar.xz--X--144_2a--X--cpachecker/linux-3.12-rc1.tar.xz/csd_deg_dscv/6606/dscv_tempdir/dscv/ri/144_2a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8183] descriptor.format = "%s: ep=%d\n" [L8184] descriptor.lineno = 749U [L8185] descriptor.flags = 0U [L8186] EXPR descriptor.flags VAL [={0:0}, ={0:0}, \old(ep)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={168:-142}, completeFnBulkCounter=0, completeFnIntCounter=0, data={4294967299:4294967336}, descriptor={168:0}, descriptor.flags=0, dev_counter=0, ep=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, skb={0:0}, tx_param={0:0}, tx_param={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8186] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L7067] return (exp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(exp)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, exp=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8186] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [={0:0}, ={0:0}, \old(ep)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={168:-142}, completeFnBulkCounter=0, completeFnIntCounter=0, data={4294967299:4294967336}, descriptor={168:0}, descriptor.flags=0, dev_counter=0, ep=0, INTERF_STATE=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, skb={0:0}, tx_param={0:0}, tx_param={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8186] tmp___0 = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8187] COND FALSE !(tmp___0 != 0L) VAL [={0:0}, ={0:0}, \old(ep)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={168:-142}, completeFnBulkCounter=0, completeFnIntCounter=0, data={4294967299:4294967336}, descriptor={168:0}, dev_counter=0, ep=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, skb={0:0}, tmp___0=0, tx_param={0:0}, tx_param={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8192] EXPR card->tx_cmd_ep VAL [={0:0}, ={0:0}, \old(ep)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={168:-142}, card->tx_cmd_ep=0, completeFnBulkCounter=0, completeFnIntCounter=0, data={4294967299:4294967336}, descriptor={168:0}, dev_counter=0, ep=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, skb={0:0}, tmp___0=0, tx_param={0:0}, tx_param={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8192] COND TRUE (int )card->tx_cmd_ep == (int )ep [L8193] context = & card->tx_cmd VAL [={0:0}, ={0:0}, \old(ep)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={168:-142}, completeFnBulkCounter=0, completeFnIntCounter=0, context={168:-14}, data={4294967299:4294967336}, descriptor={168:0}, dev_counter=0, ep=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, skb={0:0}, tmp___0=0, tx_param={0:0}, tx_param={0:0}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8203] context->adapter = adapter [L8204] context->ep = ep [L8205] context->skb = skb [L8206] EXPR context->urb [L8206] tx_urb = context->urb [L8207] EXPR card->udev VAL [={0:0}, ={0:0}, \old(ep)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={161:0}, card={168:-142}, card->udev={4294967297:4294967307}, completeFnBulkCounter=0, completeFnIntCounter=0, context={168:-14}, data={4294967299:4294967336}, descriptor={168:0}, dev_counter=0, ep=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, skb={0:0}, skb={0:0}, tmp___0=0, tx_param={0:0}, tx_param={0:0}, tx_urb={4294967345:4294967333}, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L8207] CALL __create_pipe(card->udev, (unsigned int )ep) VAL [={0:0}, ={0:0}, \old(endpoint)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={4294967297:4294967307}, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L6955] EXPR dev->devnum VAL [={0:0}, ={0:0}, \old(endpoint)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={4294967297:4294967307}, dev={4294967297:4294967307}, dev->devnum=8388608, dev_counter=0, endpoint=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] [L6955] dev->devnum << 8 VAL [={0:0}, ={0:0}, \old(endpoint)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4294967316:4294967304}, add_remove_card_sem={161:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={4294967297:4294967307}, dev={4294967297:4294967307}, dev->devnum=8388608, dev_counter=0, endpoint=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={163:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={162:0}, ref_cnt=0, SERIAL_STATE=0, usb_card={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_ops={164:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, usb_urb={0:0}, usbdriver_name={160:0}] - UnprovableResult [Line: 9064]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9064]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7553]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7553]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7566]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7566]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7577]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7577]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9137]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9137]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6955]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7144]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7144]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7920]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7920]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7944]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7944]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8087]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8087]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8034]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8034]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8200]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8200]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8225]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8225]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8572]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8572]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7790]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7790]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9121]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9121]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9127]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9127]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8767]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8767]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8777]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8777]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8783]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8783]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7839]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7839]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7859]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7859]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7874]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7874]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 45 procedures, 941 locations, 46 error locations. Started 1 CEGAR loops. OverallTime: 124.4s, OverallIterations: 14, TraceHistogramMax: 6, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 102.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 24 mSolverCounterUnknown, 12098 SdHoareTripleChecker+Valid, 96.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 11313 mSDsluCounter, 64052 SdHoareTripleChecker+Invalid, 90.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 46540 mSDsCounter, 5684 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 15024 IncrementalHoareTripleChecker+Invalid, 20732 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5684 mSolverCounterUnsat, 17512 mSDtfsCounter, 15024 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1020 GetRequests, 903 SyntacticMatches, 1 SemanticMatches, 116 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 64 ImplicationChecksByTransitivity, 2.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4568occurred in iteration=3, InterpolantAutomatonStates: 94, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.9s AutomataMinimizationTime, 13 MinimizatonAttempts, 7056 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.5s SsaConstructionTime, 4.1s SatisfiabilityAnalysisTime, 8.7s InterpolantComputationTime, 1731 NumberOfCodeBlocks, 1731 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 1812 ConstructedInterpolants, 0 QuantifiedInterpolants, 3216 SizeOfPredicates, 34 NumberOfNonLiveVariables, 10984 ConjunctsInSsa, 132 ConjunctsInUnsatCore, 20 InterpolantComputations, 12 PerfectInterpolantSequences, 1164/1173 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-16 13:06:24,261 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...