./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:03:33,546 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:03:33,549 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:03:33,600 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:03:33,603 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:03:33,606 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:03:33,608 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:03:33,611 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:03:33,613 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:03:33,621 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:03:33,622 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:03:33,624 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:03:33,624 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:03:33,626 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:03:33,628 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:03:33,630 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:03:33,632 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:03:33,633 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:03:33,635 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:03:33,639 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:03:33,642 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:03:33,644 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:03:33,645 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:03:33,646 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:03:33,649 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:03:33,649 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:03:33,650 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:03:33,650 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:03:33,651 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:03:33,652 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:03:33,652 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:03:33,653 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:03:33,653 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:03:33,654 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:03:33,655 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:03:33,655 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:03:33,656 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:03:33,656 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:03:33,657 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:03:33,657 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:03:33,658 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:03:33,659 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-64bit-Taipan_Default.epf [2022-11-03 02:03:33,679 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:03:33,680 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:03:33,680 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:03:33,680 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:03:33,681 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:03:33,681 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:03:33,681 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:03:33,682 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:03:33,682 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:03:33,682 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:03:33,682 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:03:33,683 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:03:33,683 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:03:33,683 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:03:33,683 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:03:33,684 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:03:33,684 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:03:33,684 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:03:33,685 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:03:33,685 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:03:33,686 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:03:33,686 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 02:03:33,686 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:03:33,686 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 02:03:33,687 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 02:03:33,687 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:03:33,687 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 02:03:33,688 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:03:33,688 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:03:33,688 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:03:33,688 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:03:33,689 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:03:33,689 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:03:33,689 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 02:03:33,689 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:03:33,690 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:03:33,690 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 02:03:33,690 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:03:33,690 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2022-11-03 02:03:33,939 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:03:33,964 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:03:33,967 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:03:33,968 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:03:33,970 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:03:33,971 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-03 02:03:34,051 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/data/b768c03fa/a239f55ef0d74018b276f0e98abd76f3/FLAG4b259a42e [2022-11-03 02:03:35,087 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:03:35,088 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-03 02:03:35,137 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/data/b768c03fa/a239f55ef0d74018b276f0e98abd76f3/FLAG4b259a42e [2022-11-03 02:03:35,440 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/data/b768c03fa/a239f55ef0d74018b276f0e98abd76f3 [2022-11-03 02:03:35,442 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:03:35,444 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:03:35,451 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:03:35,451 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:03:35,455 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:03:35,457 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:03:35" (1/1) ... [2022-11-03 02:03:35,458 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3ef43e0c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:35, skipping insertion in model container [2022-11-03 02:03:35,458 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:03:35" (1/1) ... [2022-11-03 02:03:35,466 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:03:35,577 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:03:36,826 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-03 02:03:38,002 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:03:38,037 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:03:38,257 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-03 02:03:38,546 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:03:38,711 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:03:38,712 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38 WrapperNode [2022-11-03 02:03:38,712 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:03:38,713 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:03:38,713 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:03:38,714 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:03:38,721 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:38,809 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:39,071 INFO L138 Inliner]: procedures = 247, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6382 [2022-11-03 02:03:39,071 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:03:39,073 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:03:39,073 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:03:39,074 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:03:39,097 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:39,098 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:39,165 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:39,165 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:39,311 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:39,332 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:39,353 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:39,375 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:39,404 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:03:39,405 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:03:39,405 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:03:39,406 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:03:39,407 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (1/1) ... [2022-11-03 02:03:39,413 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:03:39,424 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:03:39,438 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:03:39,466 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:03:39,484 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-11-03 02:03:39,484 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-11-03 02:03:39,485 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2022-11-03 02:03:39,485 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2022-11-03 02:03:39,485 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-03 02:03:39,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-03 02:03:39,485 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-03 02:03:39,485 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-03 02:03:39,485 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-03 02:03:39,485 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-03 02:03:39,486 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-03 02:03:39,486 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-03 02:03:39,486 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-03 02:03:39,486 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-03 02:03:39,486 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2022-11-03 02:03:39,486 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2022-11-03 02:03:39,486 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-03 02:03:39,486 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-03 02:03:39,487 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-11-03 02:03:39,487 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-11-03 02:03:39,487 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2022-11-03 02:03:39,487 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2022-11-03 02:03:39,487 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2022-11-03 02:03:39,487 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2022-11-03 02:03:39,487 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2022-11-03 02:03:39,487 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2022-11-03 02:03:39,488 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2022-11-03 02:03:39,488 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2022-11-03 02:03:39,488 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-03 02:03:39,488 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-03 02:03:39,488 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2022-11-03 02:03:39,488 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2022-11-03 02:03:39,488 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-03 02:03:39,488 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-03 02:03:39,489 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-03 02:03:39,489 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-03 02:03:39,489 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2022-11-03 02:03:39,489 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2022-11-03 02:03:39,490 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-11-03 02:03:39,490 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-11-03 02:03:39,490 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2022-11-03 02:03:39,490 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2022-11-03 02:03:39,490 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-03 02:03:39,491 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-03 02:03:39,491 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2022-11-03 02:03:39,491 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2022-11-03 02:03:39,491 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-11-03 02:03:39,492 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-11-03 02:03:39,492 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-11-03 02:03:39,493 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2022-11-03 02:03:39,493 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2022-11-03 02:03:39,493 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-03 02:03:39,493 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-03 02:03:39,493 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2022-11-03 02:03:39,494 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2022-11-03 02:03:39,494 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-03 02:03:39,494 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-03 02:03:39,495 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2022-11-03 02:03:39,495 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2022-11-03 02:03:39,495 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-11-03 02:03:39,495 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-11-03 02:03:39,496 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-03 02:03:39,496 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-03 02:03:39,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-03 02:03:39,496 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-03 02:03:39,496 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-03 02:03:39,496 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2022-11-03 02:03:39,496 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2022-11-03 02:03:39,497 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2022-11-03 02:03:39,497 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2022-11-03 02:03:39,497 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2022-11-03 02:03:39,498 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2022-11-03 02:03:39,498 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-03 02:03:39,498 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2022-11-03 02:03:39,498 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2022-11-03 02:03:39,498 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-03 02:03:39,498 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2022-11-03 02:03:39,498 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2022-11-03 02:03:39,498 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-03 02:03:39,499 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-03 02:03:39,499 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2022-11-03 02:03:39,499 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2022-11-03 02:03:39,500 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2022-11-03 02:03:39,500 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2022-11-03 02:03:39,500 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2022-11-03 02:03:39,500 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2022-11-03 02:03:39,500 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2022-11-03 02:03:39,500 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2022-11-03 02:03:39,501 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-03 02:03:39,501 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-03 02:03:39,501 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-03 02:03:39,502 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-03 02:03:39,503 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2022-11-03 02:03:39,503 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2022-11-03 02:03:39,503 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2022-11-03 02:03:39,503 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2022-11-03 02:03:39,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-03 02:03:39,504 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2022-11-03 02:03:39,504 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2022-11-03 02:03:39,504 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-11-03 02:03:39,504 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-11-03 02:03:39,504 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2022-11-03 02:03:39,504 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2022-11-03 02:03:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-03 02:03:39,505 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-03 02:03:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-03 02:03:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-03 02:03:39,505 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-03 02:03:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2022-11-03 02:03:39,506 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2022-11-03 02:03:39,507 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 02:03:39,509 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2022-11-03 02:03:39,509 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2022-11-03 02:03:39,510 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-03 02:03:39,510 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-03 02:03:39,510 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-03 02:03:39,511 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2022-11-03 02:03:39,514 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2022-11-03 02:03:39,514 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2022-11-03 02:03:39,514 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2022-11-03 02:03:39,520 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2022-11-03 02:03:39,520 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2022-11-03 02:03:39,520 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-11-03 02:03:39,520 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-11-03 02:03:39,520 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 02:03:39,520 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-03 02:03:39,520 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:03:39,521 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:03:39,521 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2022-11-03 02:03:39,521 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2022-11-03 02:03:39,521 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2022-11-03 02:03:39,521 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2022-11-03 02:03:40,455 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:03:40,459 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:03:41,342 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-03 02:03:48,999 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:03:50,868 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:03:50,868 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 02:03:50,874 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:03:50 BoogieIcfgContainer [2022-11-03 02:03:50,874 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:03:50,877 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:03:50,877 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:03:50,881 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:03:50,881 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:03:35" (1/3) ... [2022-11-03 02:03:50,882 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@78426c79 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:03:50, skipping insertion in model container [2022-11-03 02:03:50,882 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:03:38" (2/3) ... [2022-11-03 02:03:50,882 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@78426c79 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:03:50, skipping insertion in model container [2022-11-03 02:03:50,882 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:03:50" (3/3) ... [2022-11-03 02:03:50,884 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-03 02:03:50,904 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:03:50,904 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 02:03:51,012 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:03:51,021 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7e91b16d, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:03:51,021 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 02:03:51,031 INFO L276 IsEmpty]: Start isEmpty. Operand has 1158 states, 785 states have (on average 1.4) internal successors, (1099), 806 states have internal predecessors, (1099), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2022-11-03 02:03:51,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-03 02:03:51,046 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:03:51,046 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:03:51,047 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:03:51,054 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:03:51,054 INFO L85 PathProgramCache]: Analyzing trace with hash -113297092, now seen corresponding path program 1 times [2022-11-03 02:03:51,066 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:03:51,066 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [471895797] [2022-11-03 02:03:51,067 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:03:51,069 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:03:51,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:03:52,071 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:03:52,071 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:03:52,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [471895797] [2022-11-03 02:03:52,072 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [471895797] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:03:52,073 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:03:52,073 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:03:52,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1129009025] [2022-11-03 02:03:52,075 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:03:52,080 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:03:52,080 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:03:52,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:03:52,109 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:03:52,114 INFO L87 Difference]: Start difference. First operand has 1158 states, 785 states have (on average 1.4) internal successors, (1099), 806 states have internal predecessors, (1099), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 6 states, 6 states have (on average 2.8333333333333335) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 02:03:54,450 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:08,411 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:11,454 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:12,724 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.22s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:14,753 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:15,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:04:15,135 INFO L93 Difference]: Finished difference Result 4669 states and 6976 transitions. [2022-11-03 02:04:15,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:04:15,138 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 2.8333333333333335) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 30 [2022-11-03 02:04:15,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:04:15,178 INFO L225 Difference]: With dead ends: 4669 [2022-11-03 02:04:15,179 INFO L226 Difference]: Without dead ends: 3483 [2022-11-03 02:04:15,190 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=42, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:04:15,193 INFO L413 NwaCegarLoop]: 1833 mSDtfsCounter, 5238 mSDsluCounter, 4522 mSDsCounter, 0 mSdLazyCounter, 3297 mSolverCounterSat, 1378 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 21.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5430 SdHoareTripleChecker+Valid, 5610 SdHoareTripleChecker+Invalid, 4679 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1378 IncrementalHoareTripleChecker+Valid, 3297 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 22.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:04:15,194 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5430 Valid, 5610 Invalid, 4679 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1378 Valid, 3297 Invalid, 4 Unknown, 0 Unchecked, 22.4s Time] [2022-11-03 02:04:15,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3483 states. [2022-11-03 02:04:15,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3483 to 3307. [2022-11-03 02:04:15,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3307 states, 2261 states have (on average 1.3883237505528527) internal successors, (3139), 2302 states have internal predecessors, (3139), 880 states have call successors, (880), 166 states have call predecessors, (880), 165 states have return successors, (879), 874 states have call predecessors, (879), 879 states have call successors, (879) [2022-11-03 02:04:15,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3307 states to 3307 states and 4898 transitions. [2022-11-03 02:04:15,624 INFO L78 Accepts]: Start accepts. Automaton has 3307 states and 4898 transitions. Word has length 30 [2022-11-03 02:04:15,625 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:04:15,626 INFO L495 AbstractCegarLoop]: Abstraction has 3307 states and 4898 transitions. [2022-11-03 02:04:15,626 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 2.8333333333333335) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 02:04:15,626 INFO L276 IsEmpty]: Start isEmpty. Operand 3307 states and 4898 transitions. [2022-11-03 02:04:15,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-03 02:04:15,638 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:04:15,638 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:04:15,638 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:04:15,639 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:04:15,639 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:04:15,640 INFO L85 PathProgramCache]: Analyzing trace with hash -841497831, now seen corresponding path program 1 times [2022-11-03 02:04:15,640 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:04:15,641 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1895256023] [2022-11-03 02:04:15,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:04:15,642 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:04:15,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:04:16,210 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:04:16,211 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:04:16,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1895256023] [2022-11-03 02:04:16,211 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1895256023] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:04:16,211 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:04:16,211 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:04:16,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [610810387] [2022-11-03 02:04:16,212 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:04:16,213 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:04:16,213 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:04:16,214 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:04:16,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:04:16,214 INFO L87 Difference]: Start difference. First operand 3307 states and 4898 transitions. Second operand has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 3 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 02:04:18,306 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:21,975 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.44s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:23,516 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:24,564 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.00s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:26,930 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.94s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:28,949 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:31,390 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:33,495 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:35,530 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:35,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:04:35,679 INFO L93 Difference]: Finished difference Result 6597 states and 9788 transitions. [2022-11-03 02:04:35,681 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:04:35,682 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 3 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 38 [2022-11-03 02:04:35,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:04:35,724 INFO L225 Difference]: With dead ends: 6597 [2022-11-03 02:04:35,724 INFO L226 Difference]: Without dead ends: 6592 [2022-11-03 02:04:35,733 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:04:35,737 INFO L413 NwaCegarLoop]: 1882 mSDtfsCounter, 1658 mSDsluCounter, 3775 mSDsCounter, 0 mSdLazyCounter, 634 mSolverCounterSat, 1 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 18.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1658 SdHoareTripleChecker+Valid, 5244 SdHoareTripleChecker+Invalid, 640 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 634 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 19.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:04:35,737 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1658 Valid, 5244 Invalid, 640 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 634 Invalid, 5 Unknown, 0 Unchecked, 19.1s Time] [2022-11-03 02:04:35,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6592 states. [2022-11-03 02:04:36,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6592 to 6586. [2022-11-03 02:04:36,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6586 states, 4503 states have (on average 1.3890739506995335) internal successors, (6255), 4588 states have internal predecessors, (6255), 1752 states have call successors, (1752), 331 states have call predecessors, (1752), 330 states have return successors, (1769), 1738 states have call predecessors, (1769), 1751 states have call successors, (1769) [2022-11-03 02:04:36,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6586 states to 6586 states and 9776 transitions. [2022-11-03 02:04:36,137 INFO L78 Accepts]: Start accepts. Automaton has 6586 states and 9776 transitions. Word has length 38 [2022-11-03 02:04:36,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:04:36,138 INFO L495 AbstractCegarLoop]: Abstraction has 6586 states and 9776 transitions. [2022-11-03 02:04:36,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 3 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 02:04:36,138 INFO L276 IsEmpty]: Start isEmpty. Operand 6586 states and 9776 transitions. [2022-11-03 02:04:36,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-11-03 02:04:36,157 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:04:36,157 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:04:36,157 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:04:36,158 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:04:36,167 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:04:36,167 INFO L85 PathProgramCache]: Analyzing trace with hash 706590417, now seen corresponding path program 1 times [2022-11-03 02:04:36,167 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:04:36,167 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [631556510] [2022-11-03 02:04:36,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:04:36,168 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:04:36,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:04:36,585 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-11-03 02:04:36,585 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:04:36,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [631556510] [2022-11-03 02:04:36,586 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [631556510] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:04:36,586 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:04:36,586 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:04:36,586 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1398656196] [2022-11-03 02:04:36,586 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:04:36,587 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:04:36,587 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:04:36,588 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:04:36,588 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:04:36,588 INFO L87 Difference]: Start difference. First operand 6586 states and 9776 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-03 02:04:38,672 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:44,423 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:46,526 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:48,558 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:48,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:04:48,624 INFO L93 Difference]: Finished difference Result 12134 states and 17965 transitions. [2022-11-03 02:04:48,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:04:48,626 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 101 [2022-11-03 02:04:48,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:04:48,657 INFO L225 Difference]: With dead ends: 12134 [2022-11-03 02:04:48,657 INFO L226 Difference]: Without dead ends: 5555 [2022-11-03 02:04:48,682 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:04:48,682 INFO L413 NwaCegarLoop]: 1537 mSDtfsCounter, 337 mSDsluCounter, 1633 mSDsCounter, 0 mSdLazyCounter, 463 mSolverCounterSat, 2 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 337 SdHoareTripleChecker+Valid, 2970 SdHoareTripleChecker+Invalid, 469 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 463 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:04:48,683 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [337 Valid, 2970 Invalid, 469 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 463 Invalid, 4 Unknown, 0 Unchecked, 11.8s Time] [2022-11-03 02:04:48,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5555 states. [2022-11-03 02:04:48,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5555 to 5545. [2022-11-03 02:04:48,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5545 states, 3869 states have (on average 1.4060480744378392) internal successors, (5440), 3926 states have internal predecessors, (5440), 1367 states have call successors, (1367), 309 states have call predecessors, (1367), 308 states have return successors, (1378), 1357 states have call predecessors, (1378), 1366 states have call successors, (1378) [2022-11-03 02:04:48,980 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5545 states to 5545 states and 8185 transitions. [2022-11-03 02:04:48,982 INFO L78 Accepts]: Start accepts. Automaton has 5545 states and 8185 transitions. Word has length 101 [2022-11-03 02:04:48,983 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:04:48,983 INFO L495 AbstractCegarLoop]: Abstraction has 5545 states and 8185 transitions. [2022-11-03 02:04:48,984 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-03 02:04:48,985 INFO L276 IsEmpty]: Start isEmpty. Operand 5545 states and 8185 transitions. [2022-11-03 02:04:48,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-11-03 02:04:48,996 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:04:48,997 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:04:48,997 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:04:48,997 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:04:48,998 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:04:48,998 INFO L85 PathProgramCache]: Analyzing trace with hash -812203856, now seen corresponding path program 1 times [2022-11-03 02:04:48,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:04:48,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [721012545] [2022-11-03 02:04:48,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:04:48,999 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:04:49,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:04:49,367 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-03 02:04:49,367 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:04:49,367 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [721012545] [2022-11-03 02:04:49,368 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [721012545] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:04:49,368 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:04:49,368 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:04:49,368 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [466150157] [2022-11-03 02:04:49,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:04:49,369 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:04:49,369 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:04:49,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:04:49,370 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:04:49,370 INFO L87 Difference]: Start difference. First operand 5545 states and 8185 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-03 02:04:51,445 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:54,320 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:04:58,171 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:00,509 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:02,558 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:02,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:05:02,639 INFO L93 Difference]: Finished difference Result 15702 states and 23163 transitions. [2022-11-03 02:05:02,639 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:05:02,640 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 109 [2022-11-03 02:05:02,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:05:02,706 INFO L225 Difference]: With dead ends: 15702 [2022-11-03 02:05:02,707 INFO L226 Difference]: Without dead ends: 10390 [2022-11-03 02:05:02,733 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:05:02,734 INFO L413 NwaCegarLoop]: 1739 mSDtfsCounter, 1483 mSDsluCounter, 1663 mSDsCounter, 0 mSdLazyCounter, 410 mSolverCounterSat, 1 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1483 SdHoareTripleChecker+Valid, 3202 SdHoareTripleChecker+Invalid, 416 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 410 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:05:02,734 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1483 Valid, 3202 Invalid, 416 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 410 Invalid, 5 Unknown, 0 Unchecked, 12.9s Time] [2022-11-03 02:05:02,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10390 states. [2022-11-03 02:05:03,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10390 to 9701. [2022-11-03 02:05:03,360 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9701 states, 6743 states have (on average 1.4053092095506452) internal successors, (9476), 6860 states have internal predecessors, (9476), 2416 states have call successors, (2416), 542 states have call predecessors, (2416), 541 states have return successors, (2433), 2394 states have call predecessors, (2433), 2415 states have call successors, (2433) [2022-11-03 02:05:03,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9701 states to 9701 states and 14325 transitions. [2022-11-03 02:05:03,406 INFO L78 Accepts]: Start accepts. Automaton has 9701 states and 14325 transitions. Word has length 109 [2022-11-03 02:05:03,407 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:05:03,407 INFO L495 AbstractCegarLoop]: Abstraction has 9701 states and 14325 transitions. [2022-11-03 02:05:03,407 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-03 02:05:03,407 INFO L276 IsEmpty]: Start isEmpty. Operand 9701 states and 14325 transitions. [2022-11-03 02:05:03,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2022-11-03 02:05:03,426 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:05:03,427 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:05:03,427 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:05:03,427 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:05:03,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:05:03,428 INFO L85 PathProgramCache]: Analyzing trace with hash -430987220, now seen corresponding path program 1 times [2022-11-03 02:05:03,428 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:05:03,428 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [703547504] [2022-11-03 02:05:03,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:05:03,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:05:03,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:05:04,366 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2022-11-03 02:05:04,366 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:05:04,366 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [703547504] [2022-11-03 02:05:04,366 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [703547504] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:05:04,367 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:05:04,367 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:05:04,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [450582196] [2022-11-03 02:05:04,367 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:05:04,368 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:05:04,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:05:04,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:05:04,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:05:04,369 INFO L87 Difference]: Start difference. First operand 9701 states and 14325 transitions. Second operand has 5 states, 5 states have (on average 15.8) internal successors, (79), 4 states have internal predecessors, (79), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-03 02:05:06,519 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:11,694 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.33s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:15,930 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.54s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:17,953 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:19,887 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.93s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:21,912 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:25,026 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:27,621 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:29,667 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:29,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:05:29,858 INFO L93 Difference]: Finished difference Result 19219 states and 28437 transitions. [2022-11-03 02:05:29,859 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:05:29,859 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.8) internal successors, (79), 4 states have internal predecessors, (79), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 133 [2022-11-03 02:05:29,859 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:05:29,903 INFO L225 Difference]: With dead ends: 19219 [2022-11-03 02:05:29,904 INFO L226 Difference]: Without dead ends: 9751 [2022-11-03 02:05:29,938 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:05:29,939 INFO L413 NwaCegarLoop]: 1481 mSDtfsCounter, 2 mSDsluCounter, 5057 mSDsCounter, 0 mSdLazyCounter, 851 mSolverCounterSat, 1 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 24.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 5911 SdHoareTripleChecker+Invalid, 858 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 851 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 25.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:05:29,940 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 5911 Invalid, 858 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 851 Invalid, 6 Unknown, 0 Unchecked, 25.1s Time] [2022-11-03 02:05:29,952 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9751 states. [2022-11-03 02:05:30,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9751 to 9741. [2022-11-03 02:05:30,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9741 states, 6771 states have (on average 1.4036331413380594) internal successors, (9504), 6892 states have internal predecessors, (9504), 2416 states have call successors, (2416), 542 states have call predecessors, (2416), 553 states have return successors, (2453), 2402 states have call predecessors, (2453), 2415 states have call successors, (2453) [2022-11-03 02:05:30,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9741 states to 9741 states and 14373 transitions. [2022-11-03 02:05:30,511 INFO L78 Accepts]: Start accepts. Automaton has 9741 states and 14373 transitions. Word has length 133 [2022-11-03 02:05:30,512 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:05:30,512 INFO L495 AbstractCegarLoop]: Abstraction has 9741 states and 14373 transitions. [2022-11-03 02:05:30,512 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.8) internal successors, (79), 4 states have internal predecessors, (79), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-03 02:05:30,512 INFO L276 IsEmpty]: Start isEmpty. Operand 9741 states and 14373 transitions. [2022-11-03 02:05:30,527 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2022-11-03 02:05:30,527 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:05:30,527 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:05:30,527 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:05:30,528 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:05:30,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:05:30,528 INFO L85 PathProgramCache]: Analyzing trace with hash 1328474735, now seen corresponding path program 1 times [2022-11-03 02:05:30,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:05:30,528 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1105559422] [2022-11-03 02:05:30,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:05:30,529 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:05:30,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:05:31,356 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2022-11-03 02:05:31,357 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:05:31,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1105559422] [2022-11-03 02:05:31,357 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1105559422] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:05:31,357 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:05:31,357 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:05:31,358 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1645982518] [2022-11-03 02:05:31,358 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:05:31,359 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:05:31,359 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:05:31,359 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:05:31,360 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:05:31,360 INFO L87 Difference]: Start difference. First operand 9741 states and 14373 transitions. Second operand has 5 states, 5 states have (on average 16.0) internal successors, (80), 4 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-03 02:05:33,483 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:36,667 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.12s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:37,901 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.23s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:42,460 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.80s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:45,378 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.22s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:48,356 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:51,211 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:51,526 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:05:51,527 INFO L93 Difference]: Finished difference Result 19609 states and 29105 transitions. [2022-11-03 02:05:51,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:05:51,528 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 4 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 137 [2022-11-03 02:05:51,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:05:51,566 INFO L225 Difference]: With dead ends: 19609 [2022-11-03 02:05:51,566 INFO L226 Difference]: Without dead ends: 9881 [2022-11-03 02:05:51,593 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:05:51,594 INFO L413 NwaCegarLoop]: 1482 mSDtfsCounter, 6 mSDsluCounter, 5054 mSDsCounter, 0 mSdLazyCounter, 859 mSolverCounterSat, 1 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 5909 SdHoareTripleChecker+Invalid, 863 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 859 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 19.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:05:51,595 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 5909 Invalid, 863 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 859 Invalid, 3 Unknown, 0 Unchecked, 19.8s Time] [2022-11-03 02:05:51,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9881 states. [2022-11-03 02:05:52,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9881 to 9797. [2022-11-03 02:05:52,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9797 states, 6813 states have (on average 1.401144870101277) internal successors, (9546), 6934 states have internal predecessors, (9546), 2416 states have call successors, (2416), 542 states have call predecessors, (2416), 567 states have return successors, (2575), 2416 states have call predecessors, (2575), 2415 states have call successors, (2575) [2022-11-03 02:05:52,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9797 states to 9797 states and 14537 transitions. [2022-11-03 02:05:52,075 INFO L78 Accepts]: Start accepts. Automaton has 9797 states and 14537 transitions. Word has length 137 [2022-11-03 02:05:52,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:05:52,076 INFO L495 AbstractCegarLoop]: Abstraction has 9797 states and 14537 transitions. [2022-11-03 02:05:52,076 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 4 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-03 02:05:52,077 INFO L276 IsEmpty]: Start isEmpty. Operand 9797 states and 14537 transitions. [2022-11-03 02:05:52,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-11-03 02:05:52,090 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:05:52,090 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:05:52,090 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 02:05:52,090 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:05:52,091 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:05:52,091 INFO L85 PathProgramCache]: Analyzing trace with hash 577324914, now seen corresponding path program 1 times [2022-11-03 02:05:52,091 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:05:52,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1883345459] [2022-11-03 02:05:52,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:05:52,092 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:05:53,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:05:53,644 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2022-11-03 02:05:53,645 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:05:53,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1883345459] [2022-11-03 02:05:53,645 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1883345459] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:05:53,645 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:05:53,645 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:05:53,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819035303] [2022-11-03 02:05:53,646 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:05:53,647 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:05:53,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:05:53,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:05:53,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:05:53,648 INFO L87 Difference]: Start difference. First operand 9797 states and 14537 transitions. Second operand has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-03 02:05:55,763 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:05:59,646 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:03,431 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:04,855 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.26s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:06,378 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.52s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:09,388 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:09,517 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:06:09,518 INFO L93 Difference]: Finished difference Result 19369 states and 28745 transitions. [2022-11-03 02:06:09,518 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:06:09,518 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 139 [2022-11-03 02:06:09,519 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:06:09,565 INFO L225 Difference]: With dead ends: 19369 [2022-11-03 02:06:09,565 INFO L226 Difference]: Without dead ends: 9807 [2022-11-03 02:06:09,595 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:06:09,596 INFO L413 NwaCegarLoop]: 1482 mSDtfsCounter, 11 mSDsluCounter, 3371 mSDsCounter, 0 mSdLazyCounter, 626 mSolverCounterSat, 2 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 4442 SdHoareTripleChecker+Invalid, 632 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 626 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:06:09,596 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 4442 Invalid, 632 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 626 Invalid, 4 Unknown, 0 Unchecked, 15.5s Time] [2022-11-03 02:06:09,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9807 states. [2022-11-03 02:06:10,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9807 to 9799. [2022-11-03 02:06:10,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9799 states, 6815 states have (on average 1.4008804108584005) internal successors, (9547), 6936 states have internal predecessors, (9547), 2416 states have call successors, (2416), 542 states have call predecessors, (2416), 567 states have return successors, (2575), 2416 states have call predecessors, (2575), 2415 states have call successors, (2575) [2022-11-03 02:06:10,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9799 states to 9799 states and 14538 transitions. [2022-11-03 02:06:10,112 INFO L78 Accepts]: Start accepts. Automaton has 9799 states and 14538 transitions. Word has length 139 [2022-11-03 02:06:10,114 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:06:10,114 INFO L495 AbstractCegarLoop]: Abstraction has 9799 states and 14538 transitions. [2022-11-03 02:06:10,114 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-03 02:06:10,115 INFO L276 IsEmpty]: Start isEmpty. Operand 9799 states and 14538 transitions. [2022-11-03 02:06:10,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2022-11-03 02:06:10,128 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:06:10,128 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:06:10,129 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 02:06:10,129 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:06:10,129 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:06:10,129 INFO L85 PathProgramCache]: Analyzing trace with hash -1565029374, now seen corresponding path program 1 times [2022-11-03 02:06:10,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:06:10,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1152199868] [2022-11-03 02:06:10,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:06:10,130 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:06:14,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:06:17,197 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2022-11-03 02:06:17,197 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:06:17,197 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1152199868] [2022-11-03 02:06:17,197 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1152199868] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:06:17,197 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:06:17,198 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-03 02:06:17,198 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [96211993] [2022-11-03 02:06:17,198 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:06:17,198 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 02:06:17,198 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:06:17,199 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 02:06:17,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2022-11-03 02:06:17,199 INFO L87 Difference]: Start difference. First operand 9799 states and 14538 transitions. Second operand has 13 states, 10 states have (on average 8.4) internal successors, (84), 9 states have internal predecessors, (84), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2022-11-03 02:06:19,632 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:30,341 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:38,202 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:42,503 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:43,826 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.32s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:45,988 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:48,157 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.60s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:49,191 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.03s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:51,212 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:53,240 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:55,327 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:06:55,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:06:55,720 INFO L93 Difference]: Finished difference Result 24372 states and 37005 transitions. [2022-11-03 02:06:55,721 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 02:06:55,721 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 8.4) internal successors, (84), 9 states have internal predecessors, (84), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) Word has length 143 [2022-11-03 02:06:55,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:06:55,790 INFO L225 Difference]: With dead ends: 24372 [2022-11-03 02:06:55,790 INFO L226 Difference]: Without dead ends: 14810 [2022-11-03 02:06:55,824 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2022-11-03 02:06:55,825 INFO L413 NwaCegarLoop]: 2270 mSDtfsCounter, 603 mSDsluCounter, 24790 mSDsCounter, 0 mSdLazyCounter, 3336 mSolverCounterSat, 1 mSolverCounterUnsat, 8 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 36.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 762 SdHoareTripleChecker+Valid, 24233 SdHoareTripleChecker+Invalid, 3345 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3336 IncrementalHoareTripleChecker+Invalid, 8 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 37.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:06:55,826 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [762 Valid, 24233 Invalid, 3345 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1 Valid, 3336 Invalid, 8 Unknown, 0 Unchecked, 37.5s Time] [2022-11-03 02:06:55,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14810 states. [2022-11-03 02:06:56,655 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14810 to 9839. [2022-11-03 02:06:56,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9839 states, 6843 states have (on average 1.3980710214818062) internal successors, (9567), 6960 states have internal predecessors, (9567), 2416 states have call successors, (2416), 542 states have call predecessors, (2416), 579 states have return successors, (2607), 2432 states have call predecessors, (2607), 2415 states have call successors, (2607) [2022-11-03 02:06:56,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9839 states to 9839 states and 14590 transitions. [2022-11-03 02:06:56,718 INFO L78 Accepts]: Start accepts. Automaton has 9839 states and 14590 transitions. Word has length 143 [2022-11-03 02:06:56,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:06:56,719 INFO L495 AbstractCegarLoop]: Abstraction has 9839 states and 14590 transitions. [2022-11-03 02:06:56,719 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 8.4) internal successors, (84), 9 states have internal predecessors, (84), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2022-11-03 02:06:56,719 INFO L276 IsEmpty]: Start isEmpty. Operand 9839 states and 14590 transitions. [2022-11-03 02:06:56,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-11-03 02:06:56,735 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:06:56,735 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:06:56,736 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 02:06:56,736 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:06:56,736 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:06:56,736 INFO L85 PathProgramCache]: Analyzing trace with hash -1998960053, now seen corresponding path program 1 times [2022-11-03 02:06:56,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:06:56,737 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1549610136] [2022-11-03 02:06:56,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:06:56,737 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:06:57,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:06:58,187 INFO L134 CoverageAnalysis]: Checked inductivity of 138 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2022-11-03 02:06:58,188 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:06:58,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1549610136] [2022-11-03 02:06:58,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1549610136] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:06:58,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:06:58,189 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:06:58,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [547723817] [2022-11-03 02:06:58,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:06:58,190 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:06:58,190 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:06:58,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:06:58,191 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:06:58,191 INFO L87 Difference]: Start difference. First operand 9839 states and 14590 transitions. Second operand has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-03 02:07:00,300 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:05,530 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:09,210 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:12,178 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:14,281 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:14,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:07:14,553 INFO L93 Difference]: Finished difference Result 28867 states and 44323 transitions. [2022-11-03 02:07:14,554 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:07:14,554 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 150 [2022-11-03 02:07:14,554 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:07:14,621 INFO L225 Difference]: With dead ends: 28867 [2022-11-03 02:07:14,621 INFO L226 Difference]: Without dead ends: 19265 [2022-11-03 02:07:14,649 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:07:14,650 INFO L413 NwaCegarLoop]: 2916 mSDtfsCounter, 1195 mSDsluCounter, 2469 mSDsCounter, 0 mSdLazyCounter, 799 mSolverCounterSat, 161 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1491 SdHoareTripleChecker+Valid, 5099 SdHoareTripleChecker+Invalid, 965 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 161 IncrementalHoareTripleChecker+Valid, 799 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:07:14,651 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1491 Valid, 5099 Invalid, 965 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [161 Valid, 799 Invalid, 5 Unknown, 0 Unchecked, 14.8s Time] [2022-11-03 02:07:14,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19265 states. [2022-11-03 02:07:15,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19265 to 9855. [2022-11-03 02:07:15,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9855 states, 6859 states have (on average 1.3971424405890072) internal successors, (9583), 6976 states have internal predecessors, (9583), 2416 states have call successors, (2416), 542 states have call predecessors, (2416), 579 states have return successors, (2607), 2432 states have call predecessors, (2607), 2415 states have call successors, (2607) [2022-11-03 02:07:15,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9855 states to 9855 states and 14606 transitions. [2022-11-03 02:07:15,890 INFO L78 Accepts]: Start accepts. Automaton has 9855 states and 14606 transitions. Word has length 150 [2022-11-03 02:07:15,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:07:15,891 INFO L495 AbstractCegarLoop]: Abstraction has 9855 states and 14606 transitions. [2022-11-03 02:07:15,892 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-03 02:07:15,892 INFO L276 IsEmpty]: Start isEmpty. Operand 9855 states and 14606 transitions. [2022-11-03 02:07:15,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 150 [2022-11-03 02:07:15,908 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:07:15,909 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:07:15,909 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-03 02:07:15,909 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:07:15,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:07:15,910 INFO L85 PathProgramCache]: Analyzing trace with hash -1413337458, now seen corresponding path program 1 times [2022-11-03 02:07:15,910 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:07:15,910 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1923020893] [2022-11-03 02:07:15,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:07:15,910 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:07:16,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:07:16,468 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 122 trivial. 0 not checked. [2022-11-03 02:07:16,468 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:07:16,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1923020893] [2022-11-03 02:07:16,468 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1923020893] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:07:16,469 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:07:16,469 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:07:16,469 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1213913566] [2022-11-03 02:07:16,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:07:16,470 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:07:16,470 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:07:16,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:07:16,471 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:07:16,471 INFO L87 Difference]: Start difference. First operand 9855 states and 14606 transitions. Second operand has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-03 02:07:18,599 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:22,215 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.73s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:26,256 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:28,111 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.84s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:29,400 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.23s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:31,784 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:33,883 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:34,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:07:34,190 INFO L93 Difference]: Finished difference Result 24811 states and 37616 transitions. [2022-11-03 02:07:34,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:07:34,195 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 149 [2022-11-03 02:07:34,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:07:34,248 INFO L225 Difference]: With dead ends: 24811 [2022-11-03 02:07:34,248 INFO L226 Difference]: Without dead ends: 15193 [2022-11-03 02:07:34,279 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:07:34,280 INFO L413 NwaCegarLoop]: 2362 mSDtfsCounter, 670 mSDsluCounter, 1857 mSDsCounter, 0 mSdLazyCounter, 514 mSolverCounterSat, 0 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 860 SdHoareTripleChecker+Valid, 4013 SdHoareTripleChecker+Invalid, 518 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 514 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:07:34,280 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [860 Valid, 4013 Invalid, 518 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 514 Invalid, 4 Unknown, 0 Unchecked, 16.4s Time] [2022-11-03 02:07:34,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15193 states. [2022-11-03 02:07:35,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15193 to 9863. [2022-11-03 02:07:35,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9863 states, 6867 states have (on average 1.3966797728265619) internal successors, (9591), 6984 states have internal predecessors, (9591), 2416 states have call successors, (2416), 542 states have call predecessors, (2416), 579 states have return successors, (2607), 2432 states have call predecessors, (2607), 2415 states have call successors, (2607) [2022-11-03 02:07:35,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9863 states to 9863 states and 14614 transitions. [2022-11-03 02:07:35,418 INFO L78 Accepts]: Start accepts. Automaton has 9863 states and 14614 transitions. Word has length 149 [2022-11-03 02:07:35,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:07:35,418 INFO L495 AbstractCegarLoop]: Abstraction has 9863 states and 14614 transitions. [2022-11-03 02:07:35,419 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-03 02:07:35,419 INFO L276 IsEmpty]: Start isEmpty. Operand 9863 states and 14614 transitions. [2022-11-03 02:07:35,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2022-11-03 02:07:35,433 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:07:35,433 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:07:35,434 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-03 02:07:35,434 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:07:35,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:07:35,434 INFO L85 PathProgramCache]: Analyzing trace with hash -1889374679, now seen corresponding path program 1 times [2022-11-03 02:07:35,435 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:07:35,435 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1160197126] [2022-11-03 02:07:35,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:07:35,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:07:35,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:07:35,909 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 122 trivial. 0 not checked. [2022-11-03 02:07:35,910 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:07:35,910 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1160197126] [2022-11-03 02:07:35,910 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1160197126] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:07:35,910 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:07:35,911 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:07:35,911 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1252175910] [2022-11-03 02:07:35,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:07:35,912 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:07:35,912 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:07:35,913 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:07:35,913 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:07:35,913 INFO L87 Difference]: Start difference. First operand 9863 states and 14614 transitions. Second operand has 5 states, 4 states have (on average 22.25) internal successors, (89), 4 states have internal predecessors, (89), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-03 02:07:38,057 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:42,045 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.76s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:45,105 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:50,482 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:56,534 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:07:58,165 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.63s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:08:00,188 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:08:02,304 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:08:04,117 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.51s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:08:05,507 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.39s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:08:05,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:08:05,656 INFO L93 Difference]: Finished difference Result 24355 states and 36864 transitions. [2022-11-03 02:08:05,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:08:05,660 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 22.25) internal successors, (89), 4 states have internal predecessors, (89), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 151 [2022-11-03 02:08:05,661 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:08:05,704 INFO L225 Difference]: With dead ends: 24355 [2022-11-03 02:08:05,704 INFO L226 Difference]: Without dead ends: 14729 [2022-11-03 02:08:05,727 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:08:05,728 INFO L413 NwaCegarLoop]: 2342 mSDtfsCounter, 666 mSDsluCounter, 7054 mSDsCounter, 0 mSdLazyCounter, 1156 mSolverCounterSat, 1 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 27.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 856 SdHoareTripleChecker+Valid, 8584 SdHoareTripleChecker+Invalid, 1163 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1156 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 28.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:08:05,728 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [856 Valid, 8584 Invalid, 1163 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1156 Invalid, 6 Unknown, 0 Unchecked, 28.5s Time] [2022-11-03 02:08:05,743 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14729 states. [2022-11-03 02:08:06,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14729 to 9863. [2022-11-03 02:08:06,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9863 states, 6867 states have (on average 1.3955147808358817) internal successors, (9583), 6984 states have internal predecessors, (9583), 2416 states have call successors, (2416), 542 states have call predecessors, (2416), 579 states have return successors, (2607), 2432 states have call predecessors, (2607), 2415 states have call successors, (2607) [2022-11-03 02:08:06,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9863 states to 9863 states and 14606 transitions. [2022-11-03 02:08:06,889 INFO L78 Accepts]: Start accepts. Automaton has 9863 states and 14606 transitions. Word has length 151 [2022-11-03 02:08:06,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:08:06,890 INFO L495 AbstractCegarLoop]: Abstraction has 9863 states and 14606 transitions. [2022-11-03 02:08:06,890 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 22.25) internal successors, (89), 4 states have internal predecessors, (89), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-03 02:08:06,890 INFO L276 IsEmpty]: Start isEmpty. Operand 9863 states and 14606 transitions. [2022-11-03 02:08:06,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 156 [2022-11-03 02:08:06,915 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:08:06,916 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:08:06,916 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-03 02:08:06,916 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:08:06,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:08:06,917 INFO L85 PathProgramCache]: Analyzing trace with hash 2091539802, now seen corresponding path program 1 times [2022-11-03 02:08:06,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:08:06,917 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [449785312] [2022-11-03 02:08:06,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:08:06,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:08:09,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-03 02:08:09,301 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-03 02:09:16,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-03 02:09:16,814 INFO L130 FreeRefinementEngine]: Strategy SIFA_TAIPAN found a feasible trace [2022-11-03 02:09:16,814 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-03 02:09:16,815 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 02:09:16,817 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-03 02:09:16,820 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:09:16,825 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 02:09:16,906 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 02:09:16,907 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 02:09:16,908 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 02:09:16,908 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 02:09:16,909 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 02:09:16,909 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 02:09:16,909 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 02:09:16,910 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 02:09:17,218 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 02:09:17 BoogieIcfgContainer [2022-11-03 02:09:17,218 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 02:09:17,219 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 02:09:17,219 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 02:09:17,219 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 02:09:17,221 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:03:50" (3/4) ... [2022-11-03 02:09:17,224 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-11-03 02:09:17,224 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 02:09:17,225 INFO L158 Benchmark]: Toolchain (without parser) took 341780.41ms. Allocated memory was 115.3MB in the beginning and 2.3GB in the end (delta: 2.2GB). Free memory was 85.1MB in the beginning and 1.1GB in the end (delta: -1.0GB). Peak memory consumption was 1.2GB. Max. memory is 16.1GB. [2022-11-03 02:09:17,225 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 115.3MB. Free memory is still 93.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:09:17,226 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3261.80ms. Allocated memory was 115.3MB in the beginning and 245.4MB in the end (delta: 130.0MB). Free memory was 84.7MB in the beginning and 144.3MB in the end (delta: -59.6MB). Peak memory consumption was 89.0MB. Max. memory is 16.1GB. [2022-11-03 02:09:17,226 INFO L158 Benchmark]: Boogie Procedure Inliner took 358.27ms. Allocated memory is still 245.4MB. Free memory was 144.3MB in the beginning and 157.0MB in the end (delta: -12.7MB). Peak memory consumption was 51.3MB. Max. memory is 16.1GB. [2022-11-03 02:09:17,227 INFO L158 Benchmark]: Boogie Preprocessor took 331.72ms. Allocated memory is still 245.4MB. Free memory was 157.0MB in the beginning and 118.2MB in the end (delta: 38.8MB). Peak memory consumption was 37.7MB. Max. memory is 16.1GB. [2022-11-03 02:09:17,227 INFO L158 Benchmark]: RCFGBuilder took 11468.91ms. Allocated memory was 245.4MB in the beginning and 541.1MB in the end (delta: 295.7MB). Free memory was 118.2MB in the beginning and 303.5MB in the end (delta: -185.3MB). Peak memory consumption was 293.8MB. Max. memory is 16.1GB. [2022-11-03 02:09:17,232 INFO L158 Benchmark]: TraceAbstraction took 326341.67ms. Allocated memory was 541.1MB in the beginning and 2.3GB in the end (delta: 1.8GB). Free memory was 303.5MB in the beginning and 1.1GB in the end (delta: -791.2MB). Peak memory consumption was 1.7GB. Max. memory is 16.1GB. [2022-11-03 02:09:17,232 INFO L158 Benchmark]: Witness Printer took 5.13ms. Allocated memory is still 2.3GB. Free memory was 1.1GB in the beginning and 1.1GB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:09:17,240 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 115.3MB. Free memory is still 93.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3261.80ms. Allocated memory was 115.3MB in the beginning and 245.4MB in the end (delta: 130.0MB). Free memory was 84.7MB in the beginning and 144.3MB in the end (delta: -59.6MB). Peak memory consumption was 89.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 358.27ms. Allocated memory is still 245.4MB. Free memory was 144.3MB in the beginning and 157.0MB in the end (delta: -12.7MB). Peak memory consumption was 51.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 331.72ms. Allocated memory is still 245.4MB. Free memory was 157.0MB in the beginning and 118.2MB in the end (delta: 38.8MB). Peak memory consumption was 37.7MB. Max. memory is 16.1GB. * RCFGBuilder took 11468.91ms. Allocated memory was 245.4MB in the beginning and 541.1MB in the end (delta: 295.7MB). Free memory was 118.2MB in the beginning and 303.5MB in the end (delta: -185.3MB). Peak memory consumption was 293.8MB. Max. memory is 16.1GB. * TraceAbstraction took 326341.67ms. Allocated memory was 541.1MB in the beginning and 2.3GB in the end (delta: 1.8GB). Free memory was 303.5MB in the beginning and 1.1GB in the end (delta: -791.2MB). Peak memory consumption was 1.7GB. Max. memory is 16.1GB. * Witness Printer took 5.13ms. Allocated memory is still 2.3GB. Free memory was 1.1GB in the beginning and 1.1GB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7474]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 10722. Possible FailurePath: [L7497] int ldv_irq_1_3 = 0; [L7498] void *ldv_irq_data_1_1 ; [L7499] int ldv_irq_1_0 = 0; [L7500] void *ldv_irq_data_1_0 ; [L7501] int ldv_state_variable_0 ; [L7502] int ldv_state_variable_2 ; [L7503] void *ldv_irq_data_1_3 ; [L7504] struct sk_buff *pcie_ops_group1 ; [L7505] struct device *mwifiex_pcie_pm_ops_group1 ; [L7506] void *ldv_irq_data_1_2 ; [L7507] struct mwifiex_adapter *pcie_ops_group0 ; [L7508] int ldv_irq_1_2 = 0; [L7509] int LDV_IN_INTERRUPT = 1; [L7510] int ldv_irq_1_1 = 0; [L7511] int ldv_irq_line_1_3 ; [L7512] int ldv_state_variable_3 ; [L7513] int ldv_irq_line_1_0 ; [L7514] int ref_cnt ; [L7515] int ldv_irq_line_1_1 ; [L7516] int ldv_state_variable_1 ; [L7517] int ldv_irq_line_1_2 ; [L7518] int ldv_state_variable_4 ; [L7519] struct pci_dev *mwifiex_pcie_group0 ; [L7687-L7689] static struct mwifiex_pcie_card_reg const mwifiex_reg_8766 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 3288U, 3292U, 3296U, 3300U, 3304U, 3308U, 3312U, 0U, 63U, 0U, 63U, 0U, 128U, 128U, 128U, 0U, 0U, 0U, 0U, 0U, 0U, 1U}; [L7690-L7693] static struct mwifiex_pcie_card_reg const mwifiex_reg_8897 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 49292U, 49244U, 49244U, 49292U, 3304U, 3308U, 3312U, 16U, 67043328U, 134152192U, 1023U, 2047U, 67108864U, 1024U, 128U, 1U, 2U, 4U, 8U, 65536U, 1U, 0U}; [L7694] static struct mwifiex_pcie_device const mwifiex_pcie8766 = {"mrvl/pcie8766_uapsta.bin", & mwifiex_reg_8766, 256U, 2048U}; [L7695] static struct mwifiex_pcie_device const mwifiex_pcie8897 = {"mrvl/pcie8897_uapsta.bin", & mwifiex_reg_8897, 256U, 4096U}; [L7779] static u8 user_rmmod ; [L7781] static struct semaphore add_remove_card_sem ; [L8010-L8012] static struct pci_device_id const mwifiex_ids[3U] = { {4523U, 11056U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8766)}, {4523U, 11064U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8897)}}; [L8013] struct pci_device_id const __mod_pci__mwifiex_ids_device_table ; [L8014-L8017] static struct dev_pm_ops const mwifiex_pcie_pm_ops = {0, 0, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L8018-L8034] static struct pci_driver mwifiex_pcie = {{0, 0}, "mwifiex_pcie", (struct pci_device_id const *)(& mwifiex_ids), & mwifiex_pcie_probe, & mwifiex_pcie_remove, 0, 0, 0, 0, & mwifiex_pcie_shutdown, 0, 0, {0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_pcie_pm_ops, 0}, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}; [L10694-L10700] static struct mwifiex_if_ops pcie_ops = {& mwifiex_pcie_init, & mwifiex_pcie_cleanup, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_pcie_enable_host_int, 0, & mwifiex_process_int_status, & mwifiex_pcie_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, (void (*)(struct mwifiex_adapter * , u16 ))0, (void (*)(struct mwifiex_adapter * ))0, & mwifiex_pcie_cmdrsp_complete, & mwifiex_pcie_event_complete, 0, & mwifiex_pcie_init_fw_port, 0, 0, 0, & mwifiex_clean_pcie_ring_buf}; [L10755] int ldv_retval_20 ; [L10757] int ldv_retval_18 ; [L10758] int ldv_retval_2 ; [L10759] int ldv_retval_5 ; [L10760] int ldv_retval_0 ; [L10762] int ldv_retval_11 ; [L10763] int ldv_retval_1 ; [L10765] int ldv_retval_15 ; [L10766] int ldv_retval_16 ; [L10771] int ldv_retval_8 ; [L10772] int ldv_retval_7 ; [L10773] int ldv_retval_19 ; [L10775] int ldv_retval_14 ; [L10776] int ldv_retval_17 ; [L10779] int ldv_retval_12 ; [L10781] int ldv_retval_6 ; [L10784] int ldv_retval_13 ; [L10785] int ldv_retval_9 ; [L10786] int ldv_retval_10 ; [L10788] int ldv_retval_4 ; [L10790] int ldv_retval_3 ; [L11484] Element set_impl[15] ; [L11485] int last_index = 0; [L11619] Set LDV_SKBS ; [L10945] struct pci_device_id *ldvarg0 ; [L10946] void *tmp ; [L10947] struct mwifiex_tx_param *ldvarg1 ; [L10948] void *tmp___0 ; [L10949] u32 ldvarg4 ; [L10950] u32 tmp___1 ; [L10951] struct mwifiex_fw_image *ldvarg3 ; [L10952] void *tmp___2 ; [L10953] u8 ldvarg2 ; [L10954] u8 tmp___3 ; [L10955] int tmp___4 ; [L10956] int tmp___5 ; [L10957] int tmp___6 ; [L10958] int tmp___7 ; [L10959] int tmp___8 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10961] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=32, tmp___0=1, user_rmmod=0] [L10961] RET, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10961] tmp = ldv_zalloc(32UL) [L10962] ldvarg0 = (struct pci_device_id *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10963] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=4, tmp___0=1, user_rmmod=0] [L10963] RET, EXPR ldv_zalloc(4UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10963] tmp___0 = ldv_zalloc(4UL) [L10964] ldvarg1 = (struct mwifiex_tx_param *)tmp___0 [L10965] tmp___1 = __VERIFIER_nondet_u32() [L10966] ldvarg4 = tmp___1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, user_rmmod=0] [L10967] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=32, tmp___0=1, user_rmmod=0] [L10967] RET, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, user_rmmod=0] [L10967] tmp___2 = ldv_zalloc(32UL) [L10968] ldvarg3 = (struct mwifiex_fw_image *)tmp___2 [L10969] tmp___3 = __VERIFIER_nondet_u8() [L10970] ldvarg2 = tmp___3 [L10971] CALL ldv_initialize() [L11638] CALL ldv_set_init(LDV_SKBS) [L11490] set = set_impl [L11491] last_index = 0 [L11638] RET ldv_set_init(LDV_SKBS) [L10971] RET ldv_initialize() [L10972] ldv_state_variable_4 = 0 [L10973] ldv_state_variable_1 = 1 [L10974] ref_cnt = 0 [L10975] ldv_state_variable_0 = 1 [L10976] ldv_state_variable_3 = 0 [L10977] ldv_state_variable_2 = 0 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=27, ldvarg3={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, tmp___2={0:0}, tmp___3=27, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=27, ldvarg3={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, tmp___2={0:0}, tmp___3=27, tmp___4=2, user_rmmod=0] [L11198] COND TRUE ldv_state_variable_0 != 0 [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: [L11209] case 1: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=27, ldvarg3={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, tmp___2={0:0}, tmp___3=27, tmp___4=2, tmp___6=1, user_rmmod=0] [L11210] COND TRUE ldv_state_variable_0 == 1 [L11211] CALL, EXPR mwifiex_pcie_init_module() [L10703] int ret ; [L10704] struct _ddebug descriptor ; [L10705] long tmp ; [L10706] struct _ddebug descriptor___0 ; [L10707] long tmp___0 ; [L10709] descriptor.modname = "mwifiex_pcie" [L10710] descriptor.function = "mwifiex_pcie_init_module" [L10711] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10712] descriptor.format = "Marvell PCIe Driver\n" [L10713] descriptor.lineno = 2464U [L10714] descriptor.flags = 0U [L10715] EXPR descriptor.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, descriptor={744:0}, descriptor.flags=0, descriptor___0={373:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); [L10715] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, descriptor={744:0}, descriptor.flags=0, descriptor___0={373:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L10716] COND FALSE !(tmp != 0L) [L10720] CALL sema_init(& add_remove_card_sem, 1) [L7532] struct lock_class_key __key ; [L7533] struct semaphore __constr_expr_0 ; [L7535] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7536] __constr_expr_0.lock.magic = 3735899821U [L7537] __constr_expr_0.lock.owner_cpu = 4294967295U [L7538] __constr_expr_0.lock.owner = (void *)-1 [L7539] __constr_expr_0.lock.dep_map.key = 0 [L7540] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7541] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7542] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7543] __constr_expr_0.lock.dep_map.cpu = 0 [L7544] __constr_expr_0.lock.dep_map.ip = 0UL [L7545] __constr_expr_0.count = (unsigned int )val [L7546] __constr_expr_0.wait_list.next = & sem->wait_list [L7547] __constr_expr_0.wait_list.prev = & sem->wait_list [L7548] *sem = __constr_expr_0 [L7549] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7550] return; [L7550] return; [L10720] RET sema_init(& add_remove_card_sem, 1) [L10721] user_rmmod = 0U [L10722] CALL, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L11712] return __VERIFIER_nondet_int(); [L10722] RET, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10722] ret = __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10723] COND FALSE !(ret != 0) [L10726] descriptor___0.modname = "mwifiex_pcie" [L10727] descriptor___0.function = "mwifiex_pcie_init_module" [L10728] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10729] descriptor___0.format = "info: Driver registered successfully!\n" [L10730] descriptor___0.lineno = 2475U [L10731] descriptor___0.flags = 0U [L10732] EXPR descriptor___0.flags VAL [__dynamic_pr_debug(& descriptor, "mwifiex_pcie: Marvell PCIe Driver\n")=4294967316, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, descriptor={744:0}, descriptor___0={373:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=0, user_rmmod=0] [L10732] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); [L10732] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__dynamic_pr_debug(& descriptor, "mwifiex_pcie: Marvell PCIe Driver\n")=4294967316, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, descriptor={744:0}, descriptor___0={373:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=0, user_rmmod=0] [L10732] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L10733] COND FALSE !(tmp___0 != 0L) VAL [__dynamic_pr_debug(& descriptor, "mwifiex_pcie: Marvell PCIe Driver\n")=4294967316, __dynamic_pr_debug(& descriptor___0, "mwifiex_pcie: info: Driver registered successfully!\n")=4294967313, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, descriptor={744:0}, descriptor___0={373:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=0, tmp___0=0, user_rmmod=0] [L10738] return (ret); [L10738] return (ret); [L10738] return (ret); [L11211] RET, EXPR mwifiex_pcie_init_module() [L11211] ldv_retval_19 = mwifiex_pcie_init_module() [L11212] COND FALSE !(ldv_retval_19 != 0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=27, ldvarg3={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, tmp___2={0:0}, tmp___3=27, tmp___4=2, tmp___6=1, user_rmmod=0] [L11217] COND TRUE ldv_retval_19 == 0 [L11218] ldv_state_variable_0 = 2 [L11219] ldv_state_variable_2 = 1 [L11220] CALL ldv_initialize_mwifiex_if_ops_2() [L10899] void *tmp ; [L10900] void *tmp___0 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10902] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=6864, tmp___0=1, user_rmmod=0] [L10902] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(6864UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10902] tmp = ldv_zalloc(6864UL) [L10903] pcie_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10904] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=232, tmp___0=1, user_rmmod=0] [L10904] RET, EXPR ldv_zalloc(232UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(232UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10904] tmp___0 = ldv_zalloc(232UL) [L10905] pcie_ops_group1 = (struct sk_buff *)tmp___0 [L11220] RET ldv_initialize_mwifiex_if_ops_2() [L11221] ldv_state_variable_3 = 1 [L11222] CALL ldv_initialize_pci_driver_3() [L10890] void *tmp ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10892] CALL, EXPR ldv_zalloc(2976UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=2976, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=2976, tmp___0=1, user_rmmod=0] [L10892] RET, EXPR ldv_zalloc(2976UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(2976UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10892] tmp = ldv_zalloc(2976UL) [L10893] mwifiex_pcie_group0 = (struct pci_dev *)tmp [L11222] RET ldv_initialize_pci_driver_3() [L11223] ldv_state_variable_4 = 1 [L11224] CALL ldv_dev_pm_ops_4() [L10911] void *tmp ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10913] CALL, EXPR ldv_zalloc(1416UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=1416, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=1416, tmp___0=1, user_rmmod=0] [L10913] RET, EXPR ldv_zalloc(1416UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1416UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10913] tmp = ldv_zalloc(1416UL) [L10914] mwifiex_pcie_pm_ops_group1 = (struct device *)tmp [L11224] RET ldv_dev_pm_ops_4() [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: [L11237] case 3: [L11280] case 4: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=27, ldvarg3={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, tmp___2={0:0}, tmp___3=27, tmp___4=4, tmp___6=1, user_rmmod=0] [L11281] COND TRUE ldv_state_variable_2 != 0 [L11282] tmp___8 = __VERIFIER_nondet_int() [L11284] case 0: [L11291] case 1: [L11298] case 2: [L11305] case 3: [L11312] case 4: [L11319] case 5: [L11326] case 6: [L11333] case 7: [L11340] case 8: [L11347] case 9: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=27, ldvarg3={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, tmp___2={0:0}, tmp___3=27, tmp___4=4, tmp___6=1, tmp___8=9, user_rmmod=0] [L11348] COND TRUE ldv_state_variable_2 == 1 [L11349] CALL mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L9904] int ret ; [L9905] u8 *firmware ; [L9906] u32 firmware_len ; [L9907] u32 offset ; [L9908] struct sk_buff *skb ; [L9909] u32 txlen ; [L9910] u32 tx_blocks ; [L9911] u32 tries ; [L9912] u32 len ; [L9913] u32 block_retry_cnt ; [L9914] struct pcie_service_card *card ; [L9915] struct mwifiex_pcie_card_reg const *reg ; [L9916] struct _ddebug descriptor ; [L9917] long tmp ; [L9918] int tmp___0 ; [L9919] u32 ireg_intr ; [L9920] struct _ddebug descriptor___0 ; [L9921] long tmp___1 ; [L9922] int tmp___2 ; [L9923] int tmp___3 ; [L9924] struct _ddebug descriptor___1 ; [L9925] long tmp___4 ; [L9927] EXPR fw->fw_buf [L9927] firmware = fw->fw_buf [L9928] EXPR fw->fw_len [L9928] firmware_len = fw->fw_len [L9929] offset = 0U [L9930] tx_blocks = 0U [L9931] block_retry_cnt = 0U [L9932] EXPR adapter->card [L9932] card = (struct pcie_service_card *)adapter->card [L9933] EXPR card->pcie.reg [L9933] reg = card->pcie.reg [L9934] COND FALSE !((unsigned long )firmware == (unsigned long )((u8 *)0U) || firmware_len == 0U) [L9939] descriptor.modname = "mwifiex_pcie" [L9940] descriptor.function = "mwifiex_prog_fw_w_helper" [L9941] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L9942] descriptor.format = "info: Downloading FW image (%d bytes)\n" [L9943] descriptor.lineno = 1857U [L9944] descriptor.flags = 0U [L9945] EXPR descriptor.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor.flags=0, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9945] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); [L9945] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor.flags=0, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9945] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L9946] COND FALSE !(tmp != 0L) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, tmp=0, tx_blocks=0, user_rmmod=0] [L9951] CALL, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8209] int tmp ; [L8210] bool tmp___0 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] CALL, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7823] u32 *cookie_addr ; [L7824] struct pcie_service_card *card ; [L7825] struct mwifiex_pcie_card_reg const *reg ; [L7826] struct _ddebug descriptor ; [L7827] long tmp ; [L7829] EXPR adapter->card [L7829] card = (struct pcie_service_card *)adapter->card [L7830] EXPR card->pcie.reg [L7830] reg = card->pcie.reg [L7831] EXPR reg->sleep_cookie VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={370:-1249}, descriptor={751:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, reg->sleep_cookie=-255, set_impl={370:0}, user_rmmod=0] [L7831] COND FALSE !((unsigned int )((unsigned char )reg->sleep_cookie) == 0U) [L7835] EXPR card->sleep_cookie_vbase VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={370:-1249}, card->sleep_cookie_vbase={0:0}, descriptor={751:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, user_rmmod=0] [L7835] COND FALSE !((unsigned long )card->sleep_cookie_vbase != (unsigned long )((u8 *)0U)) [L7855] return (0); [L7855] return (0); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={370:-1249}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, user_rmmod=0] [L8212] RET, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_ok_to_access_hw(adapter)=0, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] tmp___0 = mwifiex_pcie_ok_to_access_hw(adapter) [L8213] COND FALSE !((int )tmp___0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___0=0, user_rmmod=0] [L8222] return (0); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___0=0, user_rmmod=0] [L9951] RET, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_disable_host_int(adapter)=0, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, tmp=0, tx_blocks=0, user_rmmod=0] [L9951] tmp___0 = mwifiex_pcie_disable_host_int(adapter) [L9952] COND FALSE !(tmp___0 != 0) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9958] CALL, EXPR ldv_dev_alloc_skb_14(2312U) VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11450] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11452] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11622] void *skb ; [L11623] void *tmp___7 ; VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND FALSE !(tmp___0 != 0) [L7447] EXPR, FCALL calloc(1UL, size) [L7447] tmp = calloc(1UL, size) [L7448] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, calloc(1UL, size)={371:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={371:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={371:0}, tmp___0=0, user_rmmod=0] [L7449] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7418] COND FALSE !(!cond) [L7449] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, calloc(1UL, size)={371:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={371:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={371:0}, tmp___0=0, user_rmmod=0] [L7450] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={371:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, calloc(1UL, size)={371:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={371:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={371:0}, tmp___0=0, user_rmmod=0] [L11625] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={371:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L11626] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, skb={371:0}, tmp___7={371:0}, user_rmmod=0] [L11627] COND FALSE !(! skb) [L11630] CALL ldv_set_add(LDV_SKBS, skb) [L11498] int i ; [L11500] i = 0 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, e={371:0}, e={371:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11501] COND TRUE 1 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, e={371:0}, e={371:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11502] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, e={371:0}, e={371:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11512] COND TRUE last_index < 15 [L11513] set_impl[last_index] = e [L11514] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, e={371:0}, e={371:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11630] RET ldv_set_add(LDV_SKBS, skb) [L11631] return (skb); VAL [\old(last_index)=0, \result={371:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, skb={371:0}, tmp___7={371:0}, user_rmmod=0] [L11452] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_skb_alloc()={371:0}, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11452] tmp = ldv_skb_alloc() [L11453] return (tmp); [L9958] RET, EXPR ldv_dev_alloc_skb_14(2312U) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, ldv_dev_alloc_skb_14(2312U)={371:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9958] skb = ldv_dev_alloc_skb_14(2312U) [L9959] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9965] ireg_intr = 0U VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9966] COND FALSE !(offset >= firmware_len) [L9970] tries = 0U VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9986] COND TRUE tries <= 99U [L9973] EXPR reg->cmd_size VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, reg->cmd_size=131071, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] CALL, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8046] struct pcie_service_card *card ; [L8048] EXPR adapter->card [L8048] card = (struct pcie_service_card *)adapter->card [L8049] EXPR card->pci_mmap1 [L8049] CALL, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L11765] return __VERIFIER_nondet_uint(); [L8049] RET, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L8049] *data = ioread32(card->pci_mmap1 + (unsigned long )reg) [L8050] return (0); [L9973] RET, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_read_reg(adapter, (int )reg->cmd_size, & len)=0, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, reg->cmd_size=131071, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] ret = mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) [L9974] COND FALSE !(ret != 0) [L9979] EXPR \read(len) VAL [\read(len)=-4294964983, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=0, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9979] COND TRUE len != 0U [L9991] EXPR \read(len) VAL [\read(len)=-4294964983, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=0, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9991] COND FALSE !(len == 0U) [L9994] EXPR \read(len) VAL [\read(len)=-4294964983, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=0, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9994] COND TRUE len > 2312U [L9996] \read(len) [L9997] ret = -1 VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=-1, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L10076] CALL dev_kfree_skb_any(skb) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7578] FCALL __dev_kfree_skb_any(skb, 1) [L10076] RET dev_kfree_skb_any(skb) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, descriptor={749:0}, descriptor___0={745:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={509:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={748:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=-1, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); VAL [\result=-1, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967299, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, adapter={0:0}, adapter={0:0}, adapter->dev={4294967318:4294967314}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={370:-1249}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=-1, set_impl={370:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L11349] RET mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L11350] ldv_state_variable_2 = 1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=27, ldvarg3={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, tmp___2={0:0}, tmp___3=27, tmp___4=4, tmp___6=1, tmp___8=9, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=27, ldvarg3={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, tmp___2={0:0}, tmp___3=27, tmp___4=2, tmp___6=1, tmp___8=9, user_rmmod=0] [L11198] COND TRUE ldv_state_variable_0 != 0 [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=27, ldvarg3={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, tmp___2={0:0}, tmp___3=27, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=0] [L11202] COND TRUE ldv_state_variable_0 == 2 && ref_cnt == 0 [L11203] CALL mwifiex_pcie_cleanup_module() [L10743] int tmp ; [L10745] CALL, EXPR down_interruptible(& add_remove_card_sem) [L11758] return __VERIFIER_nondet_int(); [L10745] RET, EXPR down_interruptible(& add_remove_card_sem) [L10745] tmp = down_interruptible(& add_remove_card_sem) [L10746] COND FALSE !(tmp == 0) [L10750] user_rmmod = 1U [L10751] FCALL pci_unregister_driver(& mwifiex_pcie) [L11203] RET mwifiex_pcie_cleanup_module() [L11204] ldv_state_variable_0 = 3 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=27, ldvarg3={0:0}, ldvarg4=63, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=63, tmp___2={0:0}, tmp___3=27, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=1] [L11402] CALL ldv_check_final_state() [L11689] int tmp___7 ; [L11691] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L11580] return (last_index == 0); [L11691] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L11691] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L11692] COND FALSE !(\read(tmp___7)) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___7=0, user_rmmod=1] [L11694] CALL ldv_error() VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] [L7474] reach_error() VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967356:4294967375}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 58 procedures, 1159 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 325.8s, OverallIterations: 12, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.2s, AutomataDifference: 232.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 54 mSolverCounterUnknown, 12897 SdHoareTripleChecker+Valid, 223.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 11869 mSDsluCounter, 75217 SdHoareTripleChecker+Invalid, 217.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 61245 mSDsCounter, 1549 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 12945 IncrementalHoareTripleChecker+Invalid, 14548 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1549 mSolverCounterUnsat, 21326 mSDtfsCounter, 12945 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 65 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=9863occurred in iteration=10, InterpolantAutomatonStates: 59, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 7.7s AutomataMinimizationTime, 11 MinimizatonAttempts, 25560 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 9.3s SatisfiabilityAnalysisTime, 7.1s InterpolantComputationTime, 1435 NumberOfCodeBlocks, 1435 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 1269 ConstructedInterpolants, 0 QuantifiedInterpolants, 1724 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 1012/1012 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-11-03 02:09:17,486 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2022-11-03 02:09:17,518 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-64bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:09:20,145 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:09:20,147 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:09:20,198 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:09:20,199 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:09:20,205 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:09:20,207 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:09:20,213 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:09:20,220 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:09:20,229 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:09:20,230 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:09:20,232 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:09:20,233 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:09:20,236 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:09:20,238 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:09:20,240 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:09:20,242 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:09:20,243 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:09:20,245 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:09:20,254 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:09:20,257 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:09:20,260 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:09:20,263 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:09:20,265 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:09:20,272 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:09:20,276 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:09:20,277 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:09:20,278 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:09:20,280 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:09:20,281 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:09:20,282 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:09:20,283 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:09:20,285 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:09:20,287 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:09:20,288 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:09:20,288 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:09:20,289 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:09:20,290 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:09:20,290 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:09:20,292 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:09:20,293 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:09:20,294 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-64bit-Taipan_Bitvector.epf [2022-11-03 02:09:20,362 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:09:20,362 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:09:20,364 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:09:20,364 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:09:20,366 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:09:20,367 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:09:20,367 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:09:20,367 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:09:20,368 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:09:20,368 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:09:20,369 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:09:20,370 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:09:20,372 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:09:20,372 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:09:20,372 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 02:09:20,373 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:09:20,373 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 02:09:20,373 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-03 02:09:20,374 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-11-03 02:09:20,374 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-11-03 02:09:20,374 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 02:09:20,375 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:09:20,375 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 02:09:20,376 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:09:20,376 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-03 02:09:20,376 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:09:20,377 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:09:20,377 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:09:20,377 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:09:20,378 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 02:09:20,378 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2022-11-03 02:09:20,378 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-11-03 02:09:20,379 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 02:09:20,380 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:09:20,380 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-03 02:09:20,380 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2022-11-03 02:09:20,887 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:09:20,921 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:09:20,925 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:09:20,927 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:09:20,928 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:09:20,930 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-03 02:09:21,009 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/data/fc6b512a6/6a3db0f22f5c44babb0c60bd6f79326c/FLAG5d05478e2 [2022-11-03 02:09:22,180 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:09:22,181 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-03 02:09:22,233 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/data/fc6b512a6/6a3db0f22f5c44babb0c60bd6f79326c/FLAG5d05478e2 [2022-11-03 02:09:22,505 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/data/fc6b512a6/6a3db0f22f5c44babb0c60bd6f79326c [2022-11-03 02:09:22,509 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:09:22,510 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:09:22,512 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:09:22,512 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:09:22,517 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:09:22,518 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:09:22" (1/1) ... [2022-11-03 02:09:22,520 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@152896f8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:22, skipping insertion in model container [2022-11-03 02:09:22,520 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:09:22" (1/1) ... [2022-11-03 02:09:22,529 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:09:22,748 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:09:24,189 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-03 02:09:25,275 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:09:25,374 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-11-03 02:09:25,496 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:09:25,804 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-03 02:09:26,140 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:09:26,161 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:09:26,340 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-03 02:09:26,724 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:09:27,085 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:09:27,085 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27 WrapperNode [2022-11-03 02:09:27,086 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:09:27,087 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:09:27,087 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:09:27,088 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:09:27,096 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,239 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,414 INFO L138 Inliner]: procedures = 262, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6145 [2022-11-03 02:09:27,414 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:09:27,416 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:09:27,416 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:09:27,416 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:09:27,428 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,428 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,459 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,460 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,629 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,654 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,717 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,742 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,797 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:09:27,799 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:09:27,799 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:09:27,799 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:09:27,800 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (1/1) ... [2022-11-03 02:09:27,808 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:09:27,821 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:09:27,835 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:09:27,862 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:09:27,894 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-11-03 02:09:27,895 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-11-03 02:09:27,895 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-11-03 02:09:27,895 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2022-11-03 02:09:27,895 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2022-11-03 02:09:27,895 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-11-03 02:09:27,896 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-11-03 02:09:27,896 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-03 02:09:27,896 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-11-03 02:09:27,896 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-03 02:09:27,897 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-03 02:09:27,897 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-03 02:09:27,897 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-03 02:09:27,897 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-03 02:09:27,897 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-03 02:09:27,898 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-03 02:09:27,898 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-03 02:09:27,898 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-03 02:09:27,898 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2022-11-03 02:09:27,898 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2022-11-03 02:09:27,899 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-03 02:09:27,899 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-03 02:09:27,899 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-11-03 02:09:27,899 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-11-03 02:09:27,899 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2022-11-03 02:09:27,900 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2022-11-03 02:09:27,900 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2022-11-03 02:09:27,900 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2022-11-03 02:09:27,900 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2022-11-03 02:09:27,900 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2022-11-03 02:09:27,901 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2022-11-03 02:09:27,901 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2022-11-03 02:09:27,902 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-03 02:09:27,902 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-03 02:09:27,902 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2022-11-03 02:09:27,902 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2022-11-03 02:09:27,902 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-03 02:09:27,903 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-03 02:09:27,903 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-03 02:09:27,903 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-03 02:09:27,903 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2022-11-03 02:09:27,903 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2022-11-03 02:09:27,904 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-11-03 02:09:27,904 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-11-03 02:09:27,904 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2022-11-03 02:09:27,905 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2022-11-03 02:09:27,905 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-03 02:09:27,906 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-03 02:09:27,907 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2022-11-03 02:09:27,907 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2022-11-03 02:09:27,908 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-11-03 02:09:27,909 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-11-03 02:09:27,909 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-11-03 02:09:27,909 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2022-11-03 02:09:27,910 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2022-11-03 02:09:27,910 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-11-03 02:09:27,911 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-11-03 02:09:27,911 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-11-03 02:09:27,912 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-03 02:09:27,912 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-11-03 02:09:27,912 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-03 02:09:27,913 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2022-11-03 02:09:27,913 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2022-11-03 02:09:27,913 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-03 02:09:27,913 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-03 02:09:27,913 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2022-11-03 02:09:27,914 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-11-03 02:09:27,914 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-11-03 02:09:27,915 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-11-03 02:09:27,915 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2022-11-03 02:09:27,915 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2022-11-03 02:09:27,916 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-11-03 02:09:27,916 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-11-03 02:09:27,916 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-03 02:09:27,917 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-03 02:09:27,917 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-03 02:09:27,917 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-03 02:09:27,917 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2022-11-03 02:09:27,918 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2022-11-03 02:09:27,918 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2022-11-03 02:09:27,918 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2022-11-03 02:09:27,919 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2022-11-03 02:09:27,919 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2022-11-03 02:09:27,919 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2022-11-03 02:09:27,920 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2022-11-03 02:09:27,920 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2022-11-03 02:09:27,920 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2022-11-03 02:09:27,921 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-03 02:09:27,921 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-03 02:09:27,922 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2022-11-03 02:09:27,923 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2022-11-03 02:09:27,923 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2022-11-03 02:09:27,924 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2022-11-03 02:09:27,924 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2022-11-03 02:09:27,924 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2022-11-03 02:09:27,924 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2022-11-03 02:09:27,924 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2022-11-03 02:09:27,925 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-03 02:09:27,925 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-03 02:09:27,925 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-03 02:09:27,925 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-03 02:09:27,925 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2022-11-03 02:09:27,926 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2022-11-03 02:09:27,926 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2022-11-03 02:09:27,926 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2022-11-03 02:09:27,927 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2022-11-03 02:09:27,927 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2022-11-03 02:09:27,927 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-11-03 02:09:27,928 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-11-03 02:09:27,929 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2022-11-03 02:09:27,932 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2022-11-03 02:09:27,932 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2022-11-03 02:09:27,932 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2022-11-03 02:09:27,933 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2022-11-03 02:09:27,933 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2022-11-03 02:09:27,934 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-03 02:09:27,934 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-03 02:09:27,934 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-03 02:09:27,934 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-03 02:09:27,941 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-03 02:09:27,942 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2022-11-03 02:09:27,942 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2022-11-03 02:09:27,942 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 02:09:27,943 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2022-11-03 02:09:27,943 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2022-11-03 02:09:27,943 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-03 02:09:27,943 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-03 02:09:27,943 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-03 02:09:27,944 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2022-11-03 02:09:27,944 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2022-11-03 02:09:27,944 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2022-11-03 02:09:27,944 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2022-11-03 02:09:27,944 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2022-11-03 02:09:27,945 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2022-11-03 02:09:27,945 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2022-11-03 02:09:27,945 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2022-11-03 02:09:27,945 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2022-11-03 02:09:27,945 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-11-03 02:09:27,946 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-11-03 02:09:27,946 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2022-11-03 02:09:27,946 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-03 02:09:27,946 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:09:27,947 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:09:27,947 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2022-11-03 02:09:27,947 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2022-11-03 02:09:27,947 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2022-11-03 02:09:27,947 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2022-11-03 02:09:29,222 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:09:29,226 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:09:40,106 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-03 02:10:34,029 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:10:34,053 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:10:34,054 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 02:10:34,058 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:10:34 BoogieIcfgContainer [2022-11-03 02:10:34,059 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:10:34,062 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:10:34,062 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:10:34,066 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:10:34,066 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:09:22" (1/3) ... [2022-11-03 02:10:34,067 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3cdf7e0a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:10:34, skipping insertion in model container [2022-11-03 02:10:34,067 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:09:27" (2/3) ... [2022-11-03 02:10:34,068 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3cdf7e0a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:10:34, skipping insertion in model container [2022-11-03 02:10:34,068 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:10:34" (3/3) ... [2022-11-03 02:10:34,069 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-03 02:10:34,092 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:10:34,092 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 02:10:34,197 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:10:34,203 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@78c826, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:10:34,204 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 02:10:34,214 INFO L276 IsEmpty]: Start isEmpty. Operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2022-11-03 02:10:34,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-03 02:10:34,233 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:10:34,234 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:10:34,234 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:10:34,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:10:34,241 INFO L85 PathProgramCache]: Analyzing trace with hash -1790507018, now seen corresponding path program 1 times [2022-11-03 02:10:34,262 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:10:34,263 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [827357052] [2022-11-03 02:10:34,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:10:34,264 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:10:34,264 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:10:34,270 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:10:34,300 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-11-03 02:10:36,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:10:36,242 INFO L263 TraceCheckSpWp]: Trace formula consists of 1381 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-03 02:10:36,249 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:10:36,432 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:10:36,433 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:10:36,433 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:10:36,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [827357052] [2022-11-03 02:10:36,434 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [827357052] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:10:36,435 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:10:36,435 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:10:36,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1881842846] [2022-11-03 02:10:36,438 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:10:36,443 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:10:36,443 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:10:36,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:10:36,477 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:10:36,484 INFO L87 Difference]: Start difference. First operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 02:10:37,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:10:37,799 INFO L93 Difference]: Finished difference Result 4627 states and 6891 transitions. [2022-11-03 02:10:37,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:10:37,802 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 39 [2022-11-03 02:10:37,803 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:10:37,836 INFO L225 Difference]: With dead ends: 4627 [2022-11-03 02:10:37,836 INFO L226 Difference]: Without dead ends: 3042 [2022-11-03 02:10:37,850 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:10:37,854 INFO L413 NwaCegarLoop]: 2602 mSDtfsCounter, 2242 mSDsluCounter, 2266 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2242 SdHoareTripleChecker+Valid, 4868 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:10:37,856 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2242 Valid, 4868 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-03 02:10:37,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3042 states. [2022-11-03 02:10:38,114 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3042 to 3042. [2022-11-03 02:10:38,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3042 states, 2325 states have (on average 1.4055913978494623) internal successors, (3268), 2349 states have internal predecessors, (3268), 606 states have call successors, (606), 111 states have call predecessors, (606), 110 states have return successors, (605), 605 states have call predecessors, (605), 605 states have call successors, (605) [2022-11-03 02:10:38,156 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3042 states to 3042 states and 4479 transitions. [2022-11-03 02:10:38,160 INFO L78 Accepts]: Start accepts. Automaton has 3042 states and 4479 transitions. Word has length 39 [2022-11-03 02:10:38,160 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:10:38,161 INFO L495 AbstractCegarLoop]: Abstraction has 3042 states and 4479 transitions. [2022-11-03 02:10:38,161 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-03 02:10:38,161 INFO L276 IsEmpty]: Start isEmpty. Operand 3042 states and 4479 transitions. [2022-11-03 02:10:38,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-03 02:10:38,173 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:10:38,173 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:10:38,218 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:10:38,392 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:10:38,392 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:10:38,393 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:10:38,393 INFO L85 PathProgramCache]: Analyzing trace with hash 1277499630, now seen corresponding path program 1 times [2022-11-03 02:10:38,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:10:38,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1510680081] [2022-11-03 02:10:38,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:10:38,399 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:10:38,399 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:10:38,400 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:10:38,446 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-11-03 02:10:40,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:10:40,516 INFO L263 TraceCheckSpWp]: Trace formula consists of 1819 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-03 02:10:40,523 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:10:40,808 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:10:40,808 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:10:40,808 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:10:40,809 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1510680081] [2022-11-03 02:10:40,809 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1510680081] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:10:40,809 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:10:40,809 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:10:40,809 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [951352165] [2022-11-03 02:10:40,810 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:10:40,811 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:10:40,811 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:10:40,812 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:10:40,812 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:10:40,813 INFO L87 Difference]: Start difference. First operand 3042 states and 4479 transitions. Second operand has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 02:10:43,812 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.23s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 02:10:48,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:10:48,101 INFO L93 Difference]: Finished difference Result 6992 states and 10407 transitions. [2022-11-03 02:10:48,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:10:48,102 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2022-11-03 02:10:48,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:10:48,128 INFO L225 Difference]: With dead ends: 6992 [2022-11-03 02:10:48,128 INFO L226 Difference]: Without dead ends: 3960 [2022-11-03 02:10:48,144 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:10:48,149 INFO L413 NwaCegarLoop]: 3489 mSDtfsCounter, 1089 mSDsluCounter, 12717 mSDsCounter, 0 mSdLazyCounter, 555 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1299 SdHoareTripleChecker+Valid, 16206 SdHoareTripleChecker+Invalid, 555 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 555 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:10:48,150 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1299 Valid, 16206 Invalid, 555 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [0 Valid, 555 Invalid, 0 Unknown, 0 Unchecked, 6.9s Time] [2022-11-03 02:10:48,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3960 states. [2022-11-03 02:10:48,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3960 to 3042. [2022-11-03 02:10:48,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3042 states, 2325 states have (on average 1.4051612903225807) internal successors, (3267), 2349 states have internal predecessors, (3267), 606 states have call successors, (606), 111 states have call predecessors, (606), 110 states have return successors, (605), 605 states have call predecessors, (605), 605 states have call successors, (605) [2022-11-03 02:10:48,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3042 states to 3042 states and 4478 transitions. [2022-11-03 02:10:48,381 INFO L78 Accepts]: Start accepts. Automaton has 3042 states and 4478 transitions. Word has length 49 [2022-11-03 02:10:48,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:10:48,382 INFO L495 AbstractCegarLoop]: Abstraction has 3042 states and 4478 transitions. [2022-11-03 02:10:48,382 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 02:10:48,382 INFO L276 IsEmpty]: Start isEmpty. Operand 3042 states and 4478 transitions. [2022-11-03 02:10:48,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-03 02:10:48,388 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:10:48,388 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:10:48,449 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-11-03 02:10:48,602 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:10:48,603 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:10:48,603 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:10:48,603 INFO L85 PathProgramCache]: Analyzing trace with hash 266382380, now seen corresponding path program 1 times [2022-11-03 02:10:48,607 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:10:48,607 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1421811628] [2022-11-03 02:10:48,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:10:48,608 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:10:48,608 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:10:48,609 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:10:48,661 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-11-03 02:10:50,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:10:50,736 INFO L263 TraceCheckSpWp]: Trace formula consists of 1819 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 02:10:50,740 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:10:51,248 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:10:51,249 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:10:51,249 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:10:51,249 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1421811628] [2022-11-03 02:10:51,249 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1421811628] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:10:51,249 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:10:51,250 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:10:51,250 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [246194704] [2022-11-03 02:10:51,250 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:10:51,251 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:10:51,251 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:10:51,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:10:51,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:10:51,252 INFO L87 Difference]: Start difference. First operand 3042 states and 4478 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 02:10:52,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:10:52,101 INFO L93 Difference]: Finished difference Result 9103 states and 13430 transitions. [2022-11-03 02:10:52,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:10:52,102 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2022-11-03 02:10:52,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:10:52,150 INFO L225 Difference]: With dead ends: 9103 [2022-11-03 02:10:52,150 INFO L226 Difference]: Without dead ends: 6062 [2022-11-03 02:10:52,165 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 45 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:10:52,175 INFO L413 NwaCegarLoop]: 2655 mSDtfsCounter, 2241 mSDsluCounter, 7568 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2241 SdHoareTripleChecker+Valid, 10223 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:10:52,177 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2241 Valid, 10223 Invalid, 23 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:10:52,189 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6062 states. [2022-11-03 02:10:52,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6062 to 6062. [2022-11-03 02:10:52,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6062 states, 4633 states have (on average 1.4055687459529462) internal successors, (6512), 4681 states have internal predecessors, (6512), 1208 states have call successors, (1208), 221 states have call predecessors, (1208), 220 states have return successors, (1219), 1207 states have call predecessors, (1219), 1207 states have call successors, (1219) [2022-11-03 02:10:52,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6062 states to 6062 states and 8939 transitions. [2022-11-03 02:10:52,592 INFO L78 Accepts]: Start accepts. Automaton has 6062 states and 8939 transitions. Word has length 49 [2022-11-03 02:10:52,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:10:52,593 INFO L495 AbstractCegarLoop]: Abstraction has 6062 states and 8939 transitions. [2022-11-03 02:10:52,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-03 02:10:52,593 INFO L276 IsEmpty]: Start isEmpty. Operand 6062 states and 8939 transitions. [2022-11-03 02:10:52,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-11-03 02:10:52,606 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:10:52,606 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:10:52,672 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-11-03 02:10:52,834 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:10:52,834 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:10:52,835 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:10:52,835 INFO L85 PathProgramCache]: Analyzing trace with hash -969454711, now seen corresponding path program 1 times [2022-11-03 02:10:52,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:10:52,838 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1535689096] [2022-11-03 02:10:52,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:10:52,838 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:10:52,838 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:10:52,841 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:10:52,854 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-11-03 02:10:54,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:10:55,068 INFO L263 TraceCheckSpWp]: Trace formula consists of 2135 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-03 02:10:55,074 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:10:55,204 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-03 02:10:55,204 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:10:55,204 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:10:55,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1535689096] [2022-11-03 02:10:55,205 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1535689096] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:10:55,205 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:10:55,205 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:10:55,205 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1785560998] [2022-11-03 02:10:55,206 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:10:55,206 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:10:55,206 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:10:55,207 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:10:55,207 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:10:55,208 INFO L87 Difference]: Start difference. First operand 6062 states and 8939 transitions. Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-03 02:10:56,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:10:56,961 INFO L93 Difference]: Finished difference Result 13455 states and 19819 transitions. [2022-11-03 02:10:56,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:10:56,962 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 117 [2022-11-03 02:10:56,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:10:57,015 INFO L225 Difference]: With dead ends: 13455 [2022-11-03 02:10:57,015 INFO L226 Difference]: Without dead ends: 7403 [2022-11-03 02:10:57,047 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:10:57,050 INFO L413 NwaCegarLoop]: 2320 mSDtfsCounter, 519 mSDsluCounter, 2210 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 519 SdHoareTripleChecker+Valid, 4530 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:10:57,052 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [519 Valid, 4530 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-03 02:10:57,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7403 states. [2022-11-03 02:10:57,606 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7403 to 7391. [2022-11-03 02:10:57,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7391 states, 5740 states have (on average 1.418815331010453) internal successors, (8144), 5788 states have internal predecessors, (8144), 1361 states have call successors, (1361), 290 states have call predecessors, (1361), 289 states have return successors, (1372), 1360 states have call predecessors, (1372), 1360 states have call successors, (1372) [2022-11-03 02:10:57,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7391 states to 7391 states and 10877 transitions. [2022-11-03 02:10:57,680 INFO L78 Accepts]: Start accepts. Automaton has 7391 states and 10877 transitions. Word has length 117 [2022-11-03 02:10:57,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:10:57,681 INFO L495 AbstractCegarLoop]: Abstraction has 7391 states and 10877 transitions. [2022-11-03 02:10:57,682 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-03 02:10:57,683 INFO L276 IsEmpty]: Start isEmpty. Operand 7391 states and 10877 transitions. [2022-11-03 02:10:57,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2022-11-03 02:10:57,706 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:10:57,707 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:10:57,776 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-11-03 02:10:57,922 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:10:57,922 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:10:57,923 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:10:57,923 INFO L85 PathProgramCache]: Analyzing trace with hash 104842639, now seen corresponding path program 1 times [2022-11-03 02:10:57,925 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:10:57,925 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1840689095] [2022-11-03 02:10:57,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:10:57,925 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:10:57,926 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:10:57,927 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:10:57,930 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-11-03 02:11:00,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:00,432 INFO L263 TraceCheckSpWp]: Trace formula consists of 2242 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 02:11:00,440 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:00,587 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 73 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-11-03 02:11:00,587 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:11:00,588 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:11:00,588 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1840689095] [2022-11-03 02:11:00,588 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1840689095] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:00,588 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:00,589 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:11:00,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1522396333] [2022-11-03 02:11:00,589 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:00,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:11:00,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:11:00,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:11:00,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:11:00,591 INFO L87 Difference]: Start difference. First operand 7391 states and 10877 transitions. Second operand has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-03 02:11:03,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:03,840 INFO L93 Difference]: Finished difference Result 15179 states and 22309 transitions. [2022-11-03 02:11:03,841 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-03 02:11:03,841 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 157 [2022-11-03 02:11:03,842 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:03,919 INFO L225 Difference]: With dead ends: 15179 [2022-11-03 02:11:03,920 INFO L226 Difference]: Without dead ends: 7795 [2022-11-03 02:11:03,948 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 153 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-03 02:11:03,950 INFO L413 NwaCegarLoop]: 4380 mSDtfsCounter, 2244 mSDsluCounter, 11024 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2244 SdHoareTripleChecker+Valid, 15404 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:03,950 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2244 Valid, 15404 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2022-11-03 02:11:03,961 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7795 states. [2022-11-03 02:11:04,488 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7795 to 7430. [2022-11-03 02:11:04,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7430 states, 5770 states have (on average 1.416637781629116) internal successors, (8174), 5821 states have internal predecessors, (8174), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2022-11-03 02:11:04,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7430 states to 7430 states and 10919 transitions. [2022-11-03 02:11:04,544 INFO L78 Accepts]: Start accepts. Automaton has 7430 states and 10919 transitions. Word has length 157 [2022-11-03 02:11:04,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:04,545 INFO L495 AbstractCegarLoop]: Abstraction has 7430 states and 10919 transitions. [2022-11-03 02:11:04,545 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-03 02:11:04,545 INFO L276 IsEmpty]: Start isEmpty. Operand 7430 states and 10919 transitions. [2022-11-03 02:11:04,564 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-11-03 02:11:04,564 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:04,565 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:04,638 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:04,778 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:11:04,778 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:04,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:04,779 INFO L85 PathProgramCache]: Analyzing trace with hash -1933743724, now seen corresponding path program 1 times [2022-11-03 02:11:04,781 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:11:04,781 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [466932811] [2022-11-03 02:11:04,781 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:04,781 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:11:04,781 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:11:04,782 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:11:04,785 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-11-03 02:11:07,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:07,382 INFO L263 TraceCheckSpWp]: Trace formula consists of 2299 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-03 02:11:07,391 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:07,617 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-11-03 02:11:07,618 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:11:07,618 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:11:07,618 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [466932811] [2022-11-03 02:11:07,618 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [466932811] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:07,619 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:07,619 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:11:07,619 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [871144809] [2022-11-03 02:11:07,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:07,620 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:11:07,620 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:11:07,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:11:07,621 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:11:07,621 INFO L87 Difference]: Start difference. First operand 7430 states and 10919 transitions. Second operand has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-03 02:11:13,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:13,931 INFO L93 Difference]: Finished difference Result 15001 states and 22076 transitions. [2022-11-03 02:11:13,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:11:13,932 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2022-11-03 02:11:13,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:13,972 INFO L225 Difference]: With dead ends: 15001 [2022-11-03 02:11:13,972 INFO L226 Difference]: Without dead ends: 7588 [2022-11-03 02:11:14,000 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 158 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:11:14,001 INFO L413 NwaCegarLoop]: 2469 mSDtfsCounter, 1080 mSDsluCounter, 8560 mSDsCounter, 0 mSdLazyCounter, 329 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1289 SdHoareTripleChecker+Valid, 11029 SdHoareTripleChecker+Invalid, 329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 329 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:14,001 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1289 Valid, 11029 Invalid, 329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 329 Invalid, 0 Unknown, 0 Unchecked, 5.8s Time] [2022-11-03 02:11:14,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7588 states. [2022-11-03 02:11:14,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7588 to 7430. [2022-11-03 02:11:14,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7430 states, 5770 states have (on average 1.415944540727903) internal successors, (8170), 5821 states have internal predecessors, (8170), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2022-11-03 02:11:14,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7430 states to 7430 states and 10915 transitions. [2022-11-03 02:11:14,585 INFO L78 Accepts]: Start accepts. Automaton has 7430 states and 10915 transitions. Word has length 163 [2022-11-03 02:11:14,585 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:14,585 INFO L495 AbstractCegarLoop]: Abstraction has 7430 states and 10915 transitions. [2022-11-03 02:11:14,586 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-03 02:11:14,586 INFO L276 IsEmpty]: Start isEmpty. Operand 7430 states and 10915 transitions. [2022-11-03 02:11:14,601 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-11-03 02:11:14,601 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:14,601 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:14,667 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:14,815 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:11:14,815 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:14,816 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:14,816 INFO L85 PathProgramCache]: Analyzing trace with hash 639220886, now seen corresponding path program 1 times [2022-11-03 02:11:14,818 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:11:14,818 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [720539761] [2022-11-03 02:11:14,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:14,819 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:11:14,819 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:11:14,820 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:11:14,829 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-11-03 02:11:17,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:17,668 INFO L263 TraceCheckSpWp]: Trace formula consists of 2299 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-03 02:11:17,675 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:17,940 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2022-11-03 02:11:17,940 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:11:17,940 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:11:17,941 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [720539761] [2022-11-03 02:11:17,941 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [720539761] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:17,941 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:17,941 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:11:17,941 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1290439105] [2022-11-03 02:11:17,942 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:17,942 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:11:17,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:11:17,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:11:17,943 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:11:17,944 INFO L87 Difference]: Start difference. First operand 7430 states and 10915 transitions. Second operand has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-03 02:11:22,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:22,082 INFO L93 Difference]: Finished difference Result 18921 states and 28318 transitions. [2022-11-03 02:11:22,083 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:11:22,083 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2022-11-03 02:11:22,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:22,139 INFO L225 Difference]: With dead ends: 18921 [2022-11-03 02:11:22,140 INFO L226 Difference]: Without dead ends: 11508 [2022-11-03 02:11:22,164 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 158 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:11:22,165 INFO L413 NwaCegarLoop]: 3534 mSDtfsCounter, 1085 mSDsluCounter, 12788 mSDsCounter, 0 mSdLazyCounter, 556 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1295 SdHoareTripleChecker+Valid, 16322 SdHoareTripleChecker+Invalid, 556 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 556 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:22,165 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1295 Valid, 16322 Invalid, 556 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 556 Invalid, 0 Unknown, 0 Unchecked, 3.5s Time] [2022-11-03 02:11:22,181 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11508 states. [2022-11-03 02:11:22,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11508 to 7430. [2022-11-03 02:11:22,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7430 states, 5770 states have (on average 1.4152512998266897) internal successors, (8166), 5821 states have internal predecessors, (8166), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2022-11-03 02:11:22,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7430 states to 7430 states and 10911 transitions. [2022-11-03 02:11:22,821 INFO L78 Accepts]: Start accepts. Automaton has 7430 states and 10911 transitions. Word has length 163 [2022-11-03 02:11:22,823 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:22,823 INFO L495 AbstractCegarLoop]: Abstraction has 7430 states and 10911 transitions. [2022-11-03 02:11:22,823 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-03 02:11:22,824 INFO L276 IsEmpty]: Start isEmpty. Operand 7430 states and 10911 transitions. [2022-11-03 02:11:22,839 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-11-03 02:11:22,839 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:22,840 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:22,913 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:23,055 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:11:23,056 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:23,056 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:23,056 INFO L85 PathProgramCache]: Analyzing trace with hash -1694171752, now seen corresponding path program 1 times [2022-11-03 02:11:23,058 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:11:23,058 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1995288773] [2022-11-03 02:11:23,058 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:23,058 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:11:23,059 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:11:23,059 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:11:23,061 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-11-03 02:11:25,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:25,988 INFO L263 TraceCheckSpWp]: Trace formula consists of 2299 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 02:11:25,991 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:26,135 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2022-11-03 02:11:26,135 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:11:26,136 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:11:26,136 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1995288773] [2022-11-03 02:11:26,136 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1995288773] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:26,136 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:26,137 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:11:26,137 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [307125142] [2022-11-03 02:11:26,137 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:26,138 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:11:26,138 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:11:26,138 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:11:26,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:11:26,140 INFO L87 Difference]: Start difference. First operand 7430 states and 10911 transitions. Second operand has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-03 02:11:26,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:26,767 INFO L93 Difference]: Finished difference Result 14923 states and 22009 transitions. [2022-11-03 02:11:26,768 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:11:26,768 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 163 [2022-11-03 02:11:26,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:26,865 INFO L225 Difference]: With dead ends: 14923 [2022-11-03 02:11:26,865 INFO L226 Difference]: Without dead ends: 7510 [2022-11-03 02:11:26,882 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:11:26,883 INFO L413 NwaCegarLoop]: 2269 mSDtfsCounter, 6 mSDsluCounter, 6788 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 9057 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:26,884 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 9057 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:11:26,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7510 states. [2022-11-03 02:11:27,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7510 to 7462. [2022-11-03 02:11:27,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7462 states, 5794 states have (on average 1.4135312392129789) internal successors, (8190), 5845 states have internal predecessors, (8190), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 300 states have return successors, (1442), 1371 states have call predecessors, (1442), 1366 states have call successors, (1442) [2022-11-03 02:11:27,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7462 states to 7462 states and 10999 transitions. [2022-11-03 02:11:27,417 INFO L78 Accepts]: Start accepts. Automaton has 7462 states and 10999 transitions. Word has length 163 [2022-11-03 02:11:27,417 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:27,417 INFO L495 AbstractCegarLoop]: Abstraction has 7462 states and 10999 transitions. [2022-11-03 02:11:27,418 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-03 02:11:27,418 INFO L276 IsEmpty]: Start isEmpty. Operand 7462 states and 10999 transitions. [2022-11-03 02:11:27,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 166 [2022-11-03 02:11:27,436 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:27,437 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:27,509 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:27,650 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:11:27,650 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:27,651 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:27,651 INFO L85 PathProgramCache]: Analyzing trace with hash -320678795, now seen corresponding path program 1 times [2022-11-03 02:11:27,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:11:27,653 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [7072770] [2022-11-03 02:11:27,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:27,654 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:11:27,654 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:11:27,656 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:11:27,700 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-11-03 02:11:30,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:30,908 INFO L263 TraceCheckSpWp]: Trace formula consists of 2302 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-03 02:11:30,913 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:31,199 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2022-11-03 02:11:31,199 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:11:31,200 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:11:31,200 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [7072770] [2022-11-03 02:11:31,200 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [7072770] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:31,200 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:31,201 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:11:31,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [726075340] [2022-11-03 02:11:31,201 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:31,202 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:11:31,202 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:11:31,202 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:11:31,203 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:11:31,203 INFO L87 Difference]: Start difference. First operand 7462 states and 10999 transitions. Second operand has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-03 02:11:31,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:31,719 INFO L93 Difference]: Finished difference Result 14933 states and 22053 transitions. [2022-11-03 02:11:31,720 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:11:31,720 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 165 [2022-11-03 02:11:31,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:31,757 INFO L225 Difference]: With dead ends: 14933 [2022-11-03 02:11:31,757 INFO L226 Difference]: Without dead ends: 7488 [2022-11-03 02:11:31,781 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 161 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:11:31,782 INFO L413 NwaCegarLoop]: 2267 mSDtfsCounter, 2 mSDsluCounter, 6788 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 9055 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:31,782 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 9055 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:31,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7488 states. [2022-11-03 02:11:32,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7488 to 7482. [2022-11-03 02:11:32,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7482 states, 5808 states have (on average 1.412534435261708) internal successors, (8204), 5861 states have internal predecessors, (8204), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 306 states have return successors, (1456), 1375 states have call predecessors, (1456), 1366 states have call successors, (1456) [2022-11-03 02:11:32,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7482 states to 7482 states and 11027 transitions. [2022-11-03 02:11:32,451 INFO L78 Accepts]: Start accepts. Automaton has 7482 states and 11027 transitions. Word has length 165 [2022-11-03 02:11:32,452 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:32,452 INFO L495 AbstractCegarLoop]: Abstraction has 7482 states and 11027 transitions. [2022-11-03 02:11:32,452 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-03 02:11:32,452 INFO L276 IsEmpty]: Start isEmpty. Operand 7482 states and 11027 transitions. [2022-11-03 02:11:32,468 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2022-11-03 02:11:32,469 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:32,469 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:32,544 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:32,694 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:11:32,695 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:32,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:32,695 INFO L85 PathProgramCache]: Analyzing trace with hash 1424768948, now seen corresponding path program 1 times [2022-11-03 02:11:32,697 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:11:32,697 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [291917323] [2022-11-03 02:11:32,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:32,697 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:11:32,697 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:11:32,699 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:11:32,707 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-11-03 02:11:35,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:35,718 INFO L263 TraceCheckSpWp]: Trace formula consists of 2328 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-03 02:11:35,723 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:37,242 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2022-11-03 02:11:37,242 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:11:37,243 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:11:37,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [291917323] [2022-11-03 02:11:37,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [291917323] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:37,243 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:37,243 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-03 02:11:37,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [426946996] [2022-11-03 02:11:37,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:37,244 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 02:11:37,245 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:11:37,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 02:11:37,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2022-11-03 02:11:37,246 INFO L87 Difference]: Start difference. First operand 7482 states and 11027 transitions. Second operand has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-03 02:11:40,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:40,865 INFO L93 Difference]: Finished difference Result 19059 states and 28694 transitions. [2022-11-03 02:11:40,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 02:11:40,867 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) Word has length 172 [2022-11-03 02:11:40,867 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:40,912 INFO L225 Difference]: With dead ends: 19059 [2022-11-03 02:11:40,912 INFO L226 Difference]: Without dead ends: 11594 [2022-11-03 02:11:40,934 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 175 GetRequests, 161 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2022-11-03 02:11:40,935 INFO L413 NwaCegarLoop]: 3645 mSDtfsCounter, 1089 mSDsluCounter, 38701 mSDsCounter, 0 mSdLazyCounter, 242 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1300 SdHoareTripleChecker+Valid, 42346 SdHoareTripleChecker+Invalid, 244 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 242 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:40,936 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1300 Valid, 42346 Invalid, 244 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 242 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-03 02:11:40,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11594 states. [2022-11-03 02:11:41,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11594 to 7506. [2022-11-03 02:11:41,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7506 states, 5826 states have (on average 1.4105732921386887) internal successors, (8218), 5877 states have internal predecessors, (8218), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-03 02:11:41,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7506 states to 7506 states and 11063 transitions. [2022-11-03 02:11:41,821 INFO L78 Accepts]: Start accepts. Automaton has 7506 states and 11063 transitions. Word has length 172 [2022-11-03 02:11:41,822 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:41,822 INFO L495 AbstractCegarLoop]: Abstraction has 7506 states and 11063 transitions. [2022-11-03 02:11:41,822 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-03 02:11:41,823 INFO L276 IsEmpty]: Start isEmpty. Operand 7506 states and 11063 transitions. [2022-11-03 02:11:41,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2022-11-03 02:11:41,849 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:41,850 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:41,928 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:42,066 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:11:42,067 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:42,067 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:42,067 INFO L85 PathProgramCache]: Analyzing trace with hash 1685717248, now seen corresponding path program 1 times [2022-11-03 02:11:42,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:11:42,072 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1427802097] [2022-11-03 02:11:42,072 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:42,073 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:11:42,073 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:11:42,074 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:11:42,102 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-11-03 02:11:45,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:45,493 INFO L263 TraceCheckSpWp]: Trace formula consists of 2353 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-03 02:11:45,499 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:45,547 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2022-11-03 02:11:45,547 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:11:45,547 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:11:45,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1427802097] [2022-11-03 02:11:45,548 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1427802097] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:45,548 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:45,548 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:11:45,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [47135620] [2022-11-03 02:11:45,549 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:45,549 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:11:45,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:11:45,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:11:45,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:45,551 INFO L87 Difference]: Start difference. First operand 7506 states and 11063 transitions. Second operand has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-03 02:11:46,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:46,333 INFO L93 Difference]: Finished difference Result 19365 states and 29130 transitions. [2022-11-03 02:11:46,339 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:11:46,339 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 178 [2022-11-03 02:11:46,339 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:46,386 INFO L225 Difference]: With dead ends: 19365 [2022-11-03 02:11:46,386 INFO L226 Difference]: Without dead ends: 11876 [2022-11-03 02:11:46,411 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 176 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:11:46,412 INFO L413 NwaCegarLoop]: 3676 mSDtfsCounter, 1075 mSDsluCounter, 2454 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1282 SdHoareTripleChecker+Valid, 6130 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:46,412 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1282 Valid, 6130 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:11:46,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11876 states. [2022-11-03 02:11:47,185 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11876 to 7510. [2022-11-03 02:11:47,196 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7510 states, 5830 states have (on average 1.4102915951972557) internal successors, (8222), 5881 states have internal predecessors, (8222), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-03 02:11:47,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7510 states to 7510 states and 11067 transitions. [2022-11-03 02:11:47,232 INFO L78 Accepts]: Start accepts. Automaton has 7510 states and 11067 transitions. Word has length 178 [2022-11-03 02:11:47,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:47,233 INFO L495 AbstractCegarLoop]: Abstraction has 7510 states and 11067 transitions. [2022-11-03 02:11:47,233 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-03 02:11:47,234 INFO L276 IsEmpty]: Start isEmpty. Operand 7510 states and 11067 transitions. [2022-11-03 02:11:47,249 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2022-11-03 02:11:47,249 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:47,250 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:47,323 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:47,474 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:11:47,475 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:47,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:47,475 INFO L85 PathProgramCache]: Analyzing trace with hash 711929151, now seen corresponding path program 1 times [2022-11-03 02:11:47,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:11:47,478 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [510583518] [2022-11-03 02:11:47,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:47,479 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:11:47,479 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:11:47,480 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:11:47,518 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2022-11-03 02:11:50,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:11:51,100 INFO L263 TraceCheckSpWp]: Trace formula consists of 2404 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-03 02:11:51,105 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:11:51,331 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2022-11-03 02:11:51,331 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:11:51,332 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:11:51,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [510583518] [2022-11-03 02:11:51,332 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [510583518] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:11:51,332 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:11:51,332 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:11:51,333 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1488643618] [2022-11-03 02:11:51,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:11:51,333 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:11:51,334 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:11:51,334 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:11:51,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:11:51,335 INFO L87 Difference]: Start difference. First operand 7510 states and 11067 transitions. Second operand has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-03 02:11:55,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:11:55,816 INFO L93 Difference]: Finished difference Result 19089 states and 28686 transitions. [2022-11-03 02:11:55,817 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:11:55,817 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 182 [2022-11-03 02:11:55,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:11:55,862 INFO L225 Difference]: With dead ends: 19089 [2022-11-03 02:11:55,862 INFO L226 Difference]: Without dead ends: 11596 [2022-11-03 02:11:55,888 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 182 GetRequests, 177 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:11:55,889 INFO L413 NwaCegarLoop]: 3536 mSDtfsCounter, 1005 mSDsluCounter, 12895 mSDsCounter, 0 mSdLazyCounter, 558 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1194 SdHoareTripleChecker+Valid, 16431 SdHoareTripleChecker+Invalid, 558 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 558 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:11:55,889 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1194 Valid, 16431 Invalid, 558 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 558 Invalid, 0 Unknown, 0 Unchecked, 3.6s Time] [2022-11-03 02:11:55,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11596 states. [2022-11-03 02:11:56,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11596 to 7510. [2022-11-03 02:11:56,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7510 states, 5830 states have (on average 1.4096054888507719) internal successors, (8218), 5881 states have internal predecessors, (8218), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-03 02:11:57,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7510 states to 7510 states and 11063 transitions. [2022-11-03 02:11:57,008 INFO L78 Accepts]: Start accepts. Automaton has 7510 states and 11063 transitions. Word has length 182 [2022-11-03 02:11:57,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:11:57,009 INFO L495 AbstractCegarLoop]: Abstraction has 7510 states and 11063 transitions. [2022-11-03 02:11:57,009 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-03 02:11:57,009 INFO L276 IsEmpty]: Start isEmpty. Operand 7510 states and 11063 transitions. [2022-11-03 02:11:57,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2022-11-03 02:11:57,030 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:11:57,030 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:11:57,100 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2022-11-03 02:11:57,254 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:11:57,255 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:11:57,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:11:57,255 INFO L85 PathProgramCache]: Analyzing trace with hash 773968765, now seen corresponding path program 1 times [2022-11-03 02:11:57,258 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:11:57,258 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1231819049] [2022-11-03 02:11:57,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:11:57,258 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:11:57,258 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:11:57,260 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:11:57,304 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2022-11-03 02:12:01,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:12:01,520 INFO L263 TraceCheckSpWp]: Trace formula consists of 2404 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-03 02:12:01,525 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:12:01,976 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2022-11-03 02:12:01,977 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:12:01,977 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:12:01,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1231819049] [2022-11-03 02:12:01,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1231819049] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:12:01,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:12:01,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:12:01,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [201737558] [2022-11-03 02:12:01,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:12:01,979 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:12:01,979 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:12:01,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:12:01,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:12:01,980 INFO L87 Difference]: Start difference. First operand 7510 states and 11063 transitions. Second operand has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-03 02:12:05,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:12:05,205 INFO L93 Difference]: Finished difference Result 23455 states and 35691 transitions. [2022-11-03 02:12:05,205 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:12:05,206 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 182 [2022-11-03 02:12:05,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:12:05,269 INFO L225 Difference]: With dead ends: 23455 [2022-11-03 02:12:05,269 INFO L226 Difference]: Without dead ends: 15962 [2022-11-03 02:12:05,292 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:12:05,293 INFO L413 NwaCegarLoop]: 4849 mSDtfsCounter, 2087 mSDsluCounter, 6100 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2481 SdHoareTripleChecker+Valid, 10949 SdHoareTripleChecker+Invalid, 211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:12:05,293 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2481 Valid, 10949 Invalid, 211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-11-03 02:12:05,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15962 states. [2022-11-03 02:12:06,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15962 to 7518. [2022-11-03 02:12:06,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7518 states, 5838 states have (on average 1.4090441932168551) internal successors, (8226), 5889 states have internal predecessors, (8226), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-03 02:12:06,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7518 states to 7518 states and 11071 transitions. [2022-11-03 02:12:06,422 INFO L78 Accepts]: Start accepts. Automaton has 7518 states and 11071 transitions. Word has length 182 [2022-11-03 02:12:06,423 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:12:06,423 INFO L495 AbstractCegarLoop]: Abstraction has 7518 states and 11071 transitions. [2022-11-03 02:12:06,424 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-03 02:12:06,424 INFO L276 IsEmpty]: Start isEmpty. Operand 7518 states and 11071 transitions. [2022-11-03 02:12:06,440 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2022-11-03 02:12:06,440 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:12:06,440 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:12:06,520 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2022-11-03 02:12:06,654 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:12:06,656 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:12:06,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:12:06,656 INFO L85 PathProgramCache]: Analyzing trace with hash 1073399476, now seen corresponding path program 1 times [2022-11-03 02:12:06,659 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:12:06,659 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [130607631] [2022-11-03 02:12:06,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:12:06,660 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:12:06,660 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:12:06,661 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:12:06,698 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2022-11-03 02:12:10,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:12:10,574 INFO L263 TraceCheckSpWp]: Trace formula consists of 2396 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 02:12:10,578 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:12:10,736 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2022-11-03 02:12:10,736 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:12:10,736 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 02:12:10,737 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [130607631] [2022-11-03 02:12:10,737 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [130607631] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:12:10,737 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:12:10,737 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:12:10,738 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2057809777] [2022-11-03 02:12:10,738 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:12:10,739 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:12:10,739 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 02:12:10,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:12:10,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:12:10,740 INFO L87 Difference]: Start difference. First operand 7518 states and 11071 transitions. Second operand has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-03 02:12:12,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:12:12,409 INFO L93 Difference]: Finished difference Result 19121 states and 28714 transitions. [2022-11-03 02:12:12,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:12:12,410 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 183 [2022-11-03 02:12:12,410 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:12:12,437 INFO L225 Difference]: With dead ends: 19121 [2022-11-03 02:12:12,437 INFO L226 Difference]: Without dead ends: 11620 [2022-11-03 02:12:12,452 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:12:12,453 INFO L413 NwaCegarLoop]: 3651 mSDtfsCounter, 1070 mSDsluCounter, 9643 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1277 SdHoareTripleChecker+Valid, 13294 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:12:12,453 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1277 Valid, 13294 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 02:12:12,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11620 states. [2022-11-03 02:12:13,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11620 to 7518. [2022-11-03 02:12:13,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7518 states, 5838 states have (on average 1.4083590270640631) internal successors, (8222), 5889 states have internal predecessors, (8222), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-03 02:12:13,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7518 states to 7518 states and 11067 transitions. [2022-11-03 02:12:13,229 INFO L78 Accepts]: Start accepts. Automaton has 7518 states and 11067 transitions. Word has length 183 [2022-11-03 02:12:13,230 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:12:13,230 INFO L495 AbstractCegarLoop]: Abstraction has 7518 states and 11067 transitions. [2022-11-03 02:12:13,231 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-03 02:12:13,231 INFO L276 IsEmpty]: Start isEmpty. Operand 7518 states and 11067 transitions. [2022-11-03 02:12:13,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2022-11-03 02:12:13,246 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:12:13,247 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:12:13,323 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2022-11-03 02:12:13,462 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 02:12:13,463 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:12:13,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:12:13,463 INFO L85 PathProgramCache]: Analyzing trace with hash -1941599003, now seen corresponding path program 1 times [2022-11-03 02:12:13,466 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 02:12:13,466 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1085087256] [2022-11-03 02:12:13,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:12:13,466 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 02:12:13,466 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 02:12:13,468 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 02:12:13,486 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bfe1ded4-9a80-48cc-980c-085d8111bf02/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process