./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 04:01:43,597 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 04:01:43,599 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 04:01:43,635 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 04:01:43,636 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 04:01:43,637 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 04:01:43,638 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 04:01:43,640 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 04:01:43,642 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 04:01:43,643 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 04:01:43,644 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 04:01:43,645 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 04:01:43,645 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 04:01:43,646 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 04:01:43,648 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 04:01:43,649 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 04:01:43,650 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 04:01:43,651 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 04:01:43,652 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 04:01:43,654 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 04:01:43,656 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 04:01:43,657 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 04:01:43,658 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 04:01:43,659 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 04:01:43,662 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 04:01:43,663 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 04:01:43,663 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 04:01:43,664 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 04:01:43,665 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 04:01:43,665 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 04:01:43,666 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 04:01:43,667 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 04:01:43,667 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 04:01:43,668 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 04:01:43,669 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 04:01:43,669 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 04:01:43,670 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 04:01:43,670 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 04:01:43,671 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 04:01:43,672 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 04:01:43,672 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 04:01:43,673 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-64bit-Taipan_Default.epf [2022-11-03 04:01:43,696 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 04:01:43,696 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 04:01:43,696 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 04:01:43,696 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 04:01:43,697 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 04:01:43,697 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 04:01:43,698 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 04:01:43,698 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 04:01:43,698 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 04:01:43,698 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 04:01:43,699 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 04:01:43,699 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 04:01:43,699 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 04:01:43,699 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 04:01:43,699 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 04:01:43,700 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 04:01:43,700 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 04:01:43,700 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 04:01:43,701 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 04:01:43,701 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 04:01:43,701 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 04:01:43,702 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 04:01:43,702 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 04:01:43,702 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 04:01:43,702 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 04:01:43,703 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 04:01:43,703 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 04:01:43,703 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 04:01:43,703 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 04:01:43,703 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 04:01:43,704 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 04:01:43,704 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 04:01:43,704 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 04:01:43,704 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 04:01:43,704 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 04:01:43,705 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 04:01:43,705 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 04:01:43,705 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 04:01:43,705 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 [2022-11-03 04:01:43,977 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 04:01:44,016 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 04:01:44,028 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 04:01:44,030 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 04:01:44,031 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 04:01:44,032 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2022-11-03 04:01:44,113 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/data/0a830cd0d/519ab525c0014a539c6b2feebfb5fad1/FLAG383714b26 [2022-11-03 04:01:45,040 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 04:01:45,042 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2022-11-03 04:01:45,090 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/data/0a830cd0d/519ab525c0014a539c6b2feebfb5fad1/FLAG383714b26 [2022-11-03 04:01:45,581 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/data/0a830cd0d/519ab525c0014a539c6b2feebfb5fad1 [2022-11-03 04:01:45,583 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 04:01:45,585 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 04:01:45,590 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 04:01:45,590 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 04:01:45,594 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 04:01:45,595 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 04:01:45" (1/1) ... [2022-11-03 04:01:45,596 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4242d084 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:45, skipping insertion in model container [2022-11-03 04:01:45,596 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 04:01:45" (1/1) ... [2022-11-03 04:01:45,604 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 04:01:45,773 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 04:01:46,860 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2022-11-03 04:01:47,775 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 04:01:47,813 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 04:01:47,996 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2022-11-03 04:01:48,210 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 04:01:48,417 INFO L208 MainTranslator]: Completed translation [2022-11-03 04:01:48,418 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48 WrapperNode [2022-11-03 04:01:48,418 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 04:01:48,419 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 04:01:48,419 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 04:01:48,419 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 04:01:48,427 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:48,503 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:48,707 INFO L138 Inliner]: procedures = 188, calls = 2240, calls flagged for inlining = 91, calls inlined = 86, statements flattened = 4876 [2022-11-03 04:01:48,707 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 04:01:48,708 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 04:01:48,708 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 04:01:48,709 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 04:01:48,719 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:48,719 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:48,749 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:48,749 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:48,908 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:48,941 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:48,974 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:48,995 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:49,027 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 04:01:49,029 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 04:01:49,029 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 04:01:49,029 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 04:01:49,031 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (1/1) ... [2022-11-03 04:01:49,038 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 04:01:49,049 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 04:01:49,072 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 04:01:49,102 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 04:01:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2022-11-03 04:01:49,126 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2022-11-03 04:01:49,126 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-11-03 04:01:49,127 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-11-03 04:01:49,127 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-03 04:01:49,127 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_host [2022-11-03 04:01:49,127 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_host [2022-11-03 04:01:49,127 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_to_card [2022-11-03 04:01:49,128 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_to_card [2022-11-03 04:01:49,128 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-03 04:01:49,128 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-03 04:01:49,129 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-03 04:01:49,129 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-03 04:01:49,129 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-03 04:01:49,129 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_get_host_pm_caps [2022-11-03 04:01:49,130 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_get_host_pm_caps [2022-11-03 04:01:49,130 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_sync [2022-11-03 04:01:49,130 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_sync [2022-11-03 04:01:49,130 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-03 04:01:49,130 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-03 04:01:49,131 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_card_to_host [2022-11-03 04:01:49,131 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_card_to_host [2022-11-03 04:01:49,131 INFO L130 BoogieDeclarations]: Found specification of procedure mp_tx_aggr_port_limit_reached [2022-11-03 04:01:49,131 INFO L138 BoogieDeclarations]: Found implementation of procedure mp_tx_aggr_port_limit_reached [2022-11-03 04:01:49,131 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-03 04:01:49,131 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-03 04:01:49,132 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2022-11-03 04:01:49,132 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2022-11-03 04:01:49,132 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-03 04:01:49,133 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-03 04:01:49,133 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-11-03 04:01:49,133 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-11-03 04:01:49,133 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-03 04:01:49,134 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-03 04:01:49,134 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2022-11-03 04:01:49,134 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2022-11-03 04:01:49,135 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2022-11-03 04:01:49,135 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2022-11-03 04:01:49,135 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-03 04:01:49,135 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2022-11-03 04:01:49,136 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2022-11-03 04:01:49,136 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-03 04:01:49,136 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-03 04:01:49,136 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_data_sync [2022-11-03 04:01:49,136 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_data_sync [2022-11-03 04:01:49,137 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-03 04:01:49,137 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-03 04:01:49,138 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2022-11-03 04:01:49,138 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-03 04:01:49,139 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-03 04:01:49,139 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-03 04:01:49,140 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-11-03 04:01:49,140 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-11-03 04:01:49,140 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-03 04:01:49,140 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-03 04:01:49,141 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 04:01:49,141 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_irq [2022-11-03 04:01:49,141 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_irq [2022-11-03 04:01:49,141 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_disable_func [2022-11-03 04:01:49,141 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_disable_func [2022-11-03 04:01:49,142 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-03 04:01:49,142 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-03 04:01:49,142 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_claim_host [2022-11-03 04:01:49,142 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_claim_host [2022-11-03 04:01:49,142 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg_locked [2022-11-03 04:01:49,142 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg_locked [2022-11-03 04:01:49,143 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_cmdrsp_complete [2022-11-03 04:01:49,143 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_cmdrsp_complete [2022-11-03 04:01:49,143 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-03 04:01:49,143 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-11-03 04:01:49,143 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-11-03 04:01:49,144 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-11-03 04:01:49,144 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-03 04:01:49,144 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2022-11-03 04:01:49,144 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_set_drvdata [2022-11-03 04:01:49,144 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-03 04:01:49,144 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-11-03 04:01:49,145 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-11-03 04:01:49,145 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-11-03 04:01:49,145 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-11-03 04:01:49,146 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memmove [2022-11-03 04:01:49,150 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memmove [2022-11-03 04:01:49,150 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-11-03 04:01:49,151 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-11-03 04:01:49,151 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2022-11-03 04:01:49,151 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2022-11-03 04:01:49,151 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 04:01:49,151 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_host_to_card_mp_aggr [2022-11-03 04:01:49,151 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_host_to_card_mp_aggr [2022-11-03 04:01:49,151 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_resume [2022-11-03 04:01:49,152 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_resume [2022-11-03 04:01:49,152 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-03 04:01:49,152 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-03 04:01:49,152 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-03 04:01:49,152 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-03 04:01:49,152 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_decode_rx_packet [2022-11-03 04:01:49,152 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_decode_rx_packet [2022-11-03 04:01:49,153 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 04:01:49,153 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 04:01:49,859 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 04:01:49,862 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 04:01:49,976 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-03 04:02:00,257 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 04:02:01,542 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 04:02:01,542 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 04:02:01,546 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 04:02:01 BoogieIcfgContainer [2022-11-03 04:02:01,546 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 04:02:01,548 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 04:02:01,549 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 04:02:01,552 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 04:02:01,552 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 04:01:45" (1/3) ... [2022-11-03 04:02:01,553 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@9e94ba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 04:02:01, skipping insertion in model container [2022-11-03 04:02:01,553 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:01:48" (2/3) ... [2022-11-03 04:02:01,554 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@9e94ba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 04:02:01, skipping insertion in model container [2022-11-03 04:02:01,554 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 04:02:01" (3/3) ... [2022-11-03 04:02:01,555 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2022-11-03 04:02:01,575 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 04:02:01,575 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 04:02:01,639 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 04:02:01,645 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@36dff9e2, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 04:02:01,645 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 04:02:01,652 INFO L276 IsEmpty]: Start isEmpty. Operand has 749 states, 516 states have (on average 1.426356589147287) internal successors, (736), 529 states have internal predecessors, (736), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) [2022-11-03 04:02:01,662 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-03 04:02:01,663 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:02:01,663 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:02:01,664 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:02:01,669 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:02:01,669 INFO L85 PathProgramCache]: Analyzing trace with hash -1994556386, now seen corresponding path program 1 times [2022-11-03 04:02:01,679 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:02:01,679 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [531726536] [2022-11-03 04:02:01,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:02:01,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:02:02,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:02:02,408 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-03 04:02:02,410 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:02:02,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [531726536] [2022-11-03 04:02:02,411 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [531726536] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:02:02,412 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:02:02,412 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 04:02:02,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [474173495] [2022-11-03 04:02:02,415 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:02:02,421 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 04:02:02,421 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:02:02,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 04:02:02,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:02:02,459 INFO L87 Difference]: Start difference. First operand has 749 states, 516 states have (on average 1.426356589147287) internal successors, (736), 529 states have internal predecessors, (736), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-03 04:02:04,900 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:10,121 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:11,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:02:11,956 INFO L93 Difference]: Finished difference Result 2208 states and 3295 transitions. [2022-11-03 04:02:11,957 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 04:02:11,958 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 36 [2022-11-03 04:02:11,959 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:02:11,981 INFO L225 Difference]: With dead ends: 2208 [2022-11-03 04:02:11,982 INFO L226 Difference]: Without dead ends: 1452 [2022-11-03 04:02:11,990 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:02:11,993 INFO L413 NwaCegarLoop]: 1118 mSDtfsCounter, 1061 mSDsluCounter, 1099 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 4 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1061 SdHoareTripleChecker+Valid, 2051 SdHoareTripleChecker+Invalid, 353 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.3s IncrementalHoareTripleChecker+Time [2022-11-03 04:02:11,994 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1061 Valid, 2051 Invalid, 353 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 347 Invalid, 2 Unknown, 0 Unchecked, 9.3s Time] [2022-11-03 04:02:12,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1452 states. [2022-11-03 04:02:12,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1452 to 1452. [2022-11-03 04:02:12,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1452 states, 1013 states have (on average 1.4096742349457059) internal successors, (1428), 1023 states have internal predecessors, (1428), 362 states have call successors, (362), 77 states have call predecessors, (362), 76 states have return successors, (361), 359 states have call predecessors, (361), 361 states have call successors, (361) [2022-11-03 04:02:12,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1452 states to 1452 states and 2151 transitions. [2022-11-03 04:02:12,169 INFO L78 Accepts]: Start accepts. Automaton has 1452 states and 2151 transitions. Word has length 36 [2022-11-03 04:02:12,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:02:12,171 INFO L495 AbstractCegarLoop]: Abstraction has 1452 states and 2151 transitions. [2022-11-03 04:02:12,171 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-03 04:02:12,171 INFO L276 IsEmpty]: Start isEmpty. Operand 1452 states and 2151 transitions. [2022-11-03 04:02:12,179 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-03 04:02:12,180 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:02:12,180 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:02:12,180 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 04:02:12,180 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:02:12,181 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:02:12,182 INFO L85 PathProgramCache]: Analyzing trace with hash 947929817, now seen corresponding path program 1 times [2022-11-03 04:02:12,182 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:02:12,182 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1296506667] [2022-11-03 04:02:12,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:02:12,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:02:12,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:02:12,959 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-03 04:02:12,960 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:02:12,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1296506667] [2022-11-03 04:02:12,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1296506667] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:02:12,961 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:02:12,961 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 04:02:12,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1769417141] [2022-11-03 04:02:12,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:02:12,963 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 04:02:12,963 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:02:12,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 04:02:12,964 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 04:02:12,964 INFO L87 Difference]: Start difference. First operand 1452 states and 2151 transitions. Second operand has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-03 04:02:15,540 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:20,536 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.95s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:24,163 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:25,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:02:25,475 INFO L93 Difference]: Finished difference Result 2891 states and 4289 transitions. [2022-11-03 04:02:25,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 04:02:25,475 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 38 [2022-11-03 04:02:25,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:02:25,492 INFO L225 Difference]: With dead ends: 2891 [2022-11-03 04:02:25,493 INFO L226 Difference]: Without dead ends: 2886 [2022-11-03 04:02:25,495 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:02:25,496 INFO L413 NwaCegarLoop]: 1205 mSDtfsCounter, 1076 mSDsluCounter, 2469 mSDsCounter, 0 mSdLazyCounter, 548 mSolverCounterSat, 1 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1076 SdHoareTripleChecker+Valid, 3325 SdHoareTripleChecker+Invalid, 551 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 548 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.3s IncrementalHoareTripleChecker+Time [2022-11-03 04:02:25,497 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1076 Valid, 3325 Invalid, 551 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 548 Invalid, 2 Unknown, 0 Unchecked, 12.3s Time] [2022-11-03 04:02:25,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2886 states. [2022-11-03 04:02:25,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2886 to 2884. [2022-11-03 04:02:25,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2884 states, 2014 states have (on average 1.4111221449851044) internal successors, (2842), 2034 states have internal predecessors, (2842), 717 states have call successors, (717), 153 states have call predecessors, (717), 152 states have return successors, (722), 712 states have call predecessors, (722), 716 states have call successors, (722) [2022-11-03 04:02:25,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2884 states to 2884 states and 4281 transitions. [2022-11-03 04:02:25,645 INFO L78 Accepts]: Start accepts. Automaton has 2884 states and 4281 transitions. Word has length 38 [2022-11-03 04:02:25,646 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:02:25,646 INFO L495 AbstractCegarLoop]: Abstraction has 2884 states and 4281 transitions. [2022-11-03 04:02:25,646 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.0) internal successors, (20), 4 states have internal predecessors, (20), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-03 04:02:25,647 INFO L276 IsEmpty]: Start isEmpty. Operand 2884 states and 4281 transitions. [2022-11-03 04:02:25,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-11-03 04:02:25,654 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:02:25,655 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:02:25,655 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 04:02:25,655 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:02:25,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:02:25,656 INFO L85 PathProgramCache]: Analyzing trace with hash 2080557567, now seen corresponding path program 1 times [2022-11-03 04:02:25,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:02:25,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709273067] [2022-11-03 04:02:25,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:02:25,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:02:25,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:02:25,964 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-03 04:02:25,964 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:02:25,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1709273067] [2022-11-03 04:02:25,965 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1709273067] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:02:25,965 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:02:25,965 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 04:02:25,966 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [275863669] [2022-11-03 04:02:25,966 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:02:25,966 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 04:02:25,966 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:02:25,967 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 04:02:25,967 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:02:25,968 INFO L87 Difference]: Start difference. First operand 2884 states and 4281 transitions. Second operand has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-03 04:02:28,117 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:30,154 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.37s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:34,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:02:34,088 INFO L93 Difference]: Finished difference Result 4785 states and 7069 transitions. [2022-11-03 04:02:34,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 04:02:34,089 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 88 [2022-11-03 04:02:34,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:02:34,100 INFO L225 Difference]: With dead ends: 4785 [2022-11-03 04:02:34,100 INFO L226 Difference]: Without dead ends: 1910 [2022-11-03 04:02:34,110 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:02:34,111 INFO L413 NwaCegarLoop]: 955 mSDtfsCounter, 225 mSDsluCounter, 1031 mSDsCounter, 0 mSdLazyCounter, 384 mSolverCounterSat, 2 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 1827 SdHoareTripleChecker+Invalid, 387 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 384 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.0s IncrementalHoareTripleChecker+Time [2022-11-03 04:02:34,112 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 1827 Invalid, 387 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 384 Invalid, 1 Unknown, 0 Unchecked, 8.0s Time] [2022-11-03 04:02:34,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1910 states. [2022-11-03 04:02:34,204 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1910 to 1905. [2022-11-03 04:02:34,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1905 states, 1346 states have (on average 1.4175334323922735) internal successors, (1908), 1356 states have internal predecessors, (1908), 442 states have call successors, (442), 117 states have call predecessors, (442), 116 states have return successors, (444), 439 states have call predecessors, (444), 441 states have call successors, (444) [2022-11-03 04:02:34,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1905 states to 1905 states and 2794 transitions. [2022-11-03 04:02:34,223 INFO L78 Accepts]: Start accepts. Automaton has 1905 states and 2794 transitions. Word has length 88 [2022-11-03 04:02:34,225 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:02:34,225 INFO L495 AbstractCegarLoop]: Abstraction has 1905 states and 2794 transitions. [2022-11-03 04:02:34,226 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-03 04:02:34,226 INFO L276 IsEmpty]: Start isEmpty. Operand 1905 states and 2794 transitions. [2022-11-03 04:02:34,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-03 04:02:34,232 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:02:34,232 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:02:34,233 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 04:02:34,233 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:02:34,234 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:02:34,234 INFO L85 PathProgramCache]: Analyzing trace with hash -587404253, now seen corresponding path program 1 times [2022-11-03 04:02:34,235 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:02:34,235 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [362248078] [2022-11-03 04:02:34,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:02:34,235 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:02:34,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:02:34,655 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2022-11-03 04:02:34,656 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:02:34,656 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [362248078] [2022-11-03 04:02:34,656 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [362248078] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:02:34,656 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:02:34,656 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 04:02:34,657 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677218411] [2022-11-03 04:02:34,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:02:34,657 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 04:02:34,658 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:02:34,658 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 04:02:34,658 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:02:34,658 INFO L87 Difference]: Start difference. First operand 1905 states and 2794 transitions. Second operand has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-03 04:02:36,734 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:38,222 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.43s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:40,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:02:40,404 INFO L93 Difference]: Finished difference Result 3654 states and 5368 transitions. [2022-11-03 04:02:40,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 04:02:40,404 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 96 [2022-11-03 04:02:40,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:02:40,415 INFO L225 Difference]: With dead ends: 3654 [2022-11-03 04:02:40,415 INFO L226 Difference]: Without dead ends: 1910 [2022-11-03 04:02:40,420 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:02:40,424 INFO L413 NwaCegarLoop]: 923 mSDtfsCounter, 1090 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 172 mSolverCounterSat, 1 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1090 SdHoareTripleChecker+Valid, 926 SdHoareTripleChecker+Invalid, 174 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 172 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.6s IncrementalHoareTripleChecker+Time [2022-11-03 04:02:40,426 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1090 Valid, 926 Invalid, 174 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 172 Invalid, 1 Unknown, 0 Unchecked, 5.6s Time] [2022-11-03 04:02:40,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1910 states. [2022-11-03 04:02:40,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1910 to 1905. [2022-11-03 04:02:40,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1905 states, 1346 states have (on average 1.4160475482912334) internal successors, (1906), 1356 states have internal predecessors, (1906), 442 states have call successors, (442), 117 states have call predecessors, (442), 116 states have return successors, (444), 439 states have call predecessors, (444), 441 states have call successors, (444) [2022-11-03 04:02:40,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1905 states to 1905 states and 2792 transitions. [2022-11-03 04:02:40,517 INFO L78 Accepts]: Start accepts. Automaton has 1905 states and 2792 transitions. Word has length 96 [2022-11-03 04:02:40,518 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:02:40,518 INFO L495 AbstractCegarLoop]: Abstraction has 1905 states and 2792 transitions. [2022-11-03 04:02:40,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-03 04:02:40,519 INFO L276 IsEmpty]: Start isEmpty. Operand 1905 states and 2792 transitions. [2022-11-03 04:02:40,523 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2022-11-03 04:02:40,524 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:02:40,524 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:02:40,524 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 04:02:40,524 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:02:40,525 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:02:40,525 INFO L85 PathProgramCache]: Analyzing trace with hash 1258785819, now seen corresponding path program 1 times [2022-11-03 04:02:40,525 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:02:40,525 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1880759597] [2022-11-03 04:02:40,525 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:02:40,526 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:02:40,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:02:41,517 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2022-11-03 04:02:41,517 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:02:41,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1880759597] [2022-11-03 04:02:41,518 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1880759597] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:02:41,518 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:02:41,518 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 04:02:41,518 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1323177207] [2022-11-03 04:02:41,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:02:41,519 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 04:02:41,519 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:02:41,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 04:02:41,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:02:41,520 INFO L87 Difference]: Start difference. First operand 1905 states and 2792 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2022-11-03 04:02:43,634 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:45,741 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:02:53,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:02:53,775 INFO L93 Difference]: Finished difference Result 3663 states and 5396 transitions. [2022-11-03 04:02:53,775 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 04:02:53,776 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) Word has length 120 [2022-11-03 04:02:53,776 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:02:53,786 INFO L225 Difference]: With dead ends: 3663 [2022-11-03 04:02:53,787 INFO L226 Difference]: Without dead ends: 1919 [2022-11-03 04:02:53,795 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:02:53,795 INFO L413 NwaCegarLoop]: 922 mSDtfsCounter, 2 mSDsluCounter, 3256 mSDsCounter, 0 mSdLazyCounter, 692 mSolverCounterSat, 1 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3674 SdHoareTripleChecker+Invalid, 695 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 692 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.2s IncrementalHoareTripleChecker+Time [2022-11-03 04:02:53,796 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 3674 Invalid, 695 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 692 Invalid, 2 Unknown, 0 Unchecked, 12.2s Time] [2022-11-03 04:02:53,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1919 states. [2022-11-03 04:02:53,880 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1919 to 1915. [2022-11-03 04:02:53,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1915 states, 1353 states have (on average 1.4138950480413894) internal successors, (1913), 1364 states have internal predecessors, (1913), 442 states have call successors, (442), 117 states have call predecessors, (442), 119 states have return successors, (455), 441 states have call predecessors, (455), 441 states have call successors, (455) [2022-11-03 04:02:53,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1915 states to 1915 states and 2810 transitions. [2022-11-03 04:02:53,893 INFO L78 Accepts]: Start accepts. Automaton has 1915 states and 2810 transitions. Word has length 120 [2022-11-03 04:02:53,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:02:53,895 INFO L495 AbstractCegarLoop]: Abstraction has 1915 states and 2810 transitions. [2022-11-03 04:02:53,896 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2022-11-03 04:02:53,896 INFO L276 IsEmpty]: Start isEmpty. Operand 1915 states and 2810 transitions. [2022-11-03 04:02:53,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2022-11-03 04:02:53,906 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:02:53,906 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:02:53,906 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 04:02:53,906 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:02:53,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:02:53,907 INFO L85 PathProgramCache]: Analyzing trace with hash -2011182754, now seen corresponding path program 1 times [2022-11-03 04:02:53,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:02:53,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1477980845] [2022-11-03 04:02:53,908 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:02:53,908 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:03:03,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:03:06,148 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2022-11-03 04:03:06,148 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:03:06,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1477980845] [2022-11-03 04:03:06,149 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1477980845] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:03:06,149 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:03:06,149 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-03 04:03:06,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [776668157] [2022-11-03 04:03:06,150 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:03:06,150 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 04:03:06,150 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:03:06,151 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 04:03:06,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2022-11-03 04:03:06,151 INFO L87 Difference]: Start difference. First operand 1915 states and 2810 transitions. Second operand has 13 states, 10 states have (on average 6.9) internal successors, (69), 9 states have internal predecessors, (69), 3 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-03 04:03:08,487 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:09,927 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.22s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:12,106 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.19s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:14,121 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:15,928 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.06s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:18,376 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.29s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:30,804 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.99s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:34,730 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.68s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:36,629 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.19s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:45,689 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.51s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:48,505 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:52,665 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.78s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:54,591 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.93s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:57,346 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:03:59,604 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.02s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:06,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:04:06,453 INFO L93 Difference]: Finished difference Result 4698 states and 7068 transitions. [2022-11-03 04:04:06,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 04:04:06,454 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 6.9) internal successors, (69), 9 states have internal predecessors, (69), 3 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) Word has length 124 [2022-11-03 04:04:06,454 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:04:06,468 INFO L225 Difference]: With dead ends: 4698 [2022-11-03 04:04:06,468 INFO L226 Difference]: Without dead ends: 2944 [2022-11-03 04:04:06,473 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2022-11-03 04:04:06,473 INFO L413 NwaCegarLoop]: 1500 mSDtfsCounter, 451 mSDsluCounter, 16818 mSDsCounter, 0 mSdLazyCounter, 2790 mSolverCounterSat, 1 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 57.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 562 SdHoareTripleChecker+Valid, 15951 SdHoareTripleChecker+Invalid, 2795 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2790 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 59.9s IncrementalHoareTripleChecker+Time [2022-11-03 04:04:06,474 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [562 Valid, 15951 Invalid, 2795 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1 Valid, 2790 Invalid, 4 Unknown, 0 Unchecked, 59.9s Time] [2022-11-03 04:04:06,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2944 states. [2022-11-03 04:04:06,640 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2944 to 1925. [2022-11-03 04:04:06,644 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1925 states, 1360 states have (on average 1.410294117647059) internal successors, (1918), 1370 states have internal predecessors, (1918), 442 states have call successors, (442), 117 states have call predecessors, (442), 122 states have return successors, (460), 445 states have call predecessors, (460), 441 states have call successors, (460) [2022-11-03 04:04:06,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1925 states to 1925 states and 2820 transitions. [2022-11-03 04:04:06,652 INFO L78 Accepts]: Start accepts. Automaton has 1925 states and 2820 transitions. Word has length 124 [2022-11-03 04:04:06,653 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:04:06,653 INFO L495 AbstractCegarLoop]: Abstraction has 1925 states and 2820 transitions. [2022-11-03 04:04:06,654 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 6.9) internal successors, (69), 9 states have internal predecessors, (69), 3 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-03 04:04:06,654 INFO L276 IsEmpty]: Start isEmpty. Operand 1925 states and 2820 transitions. [2022-11-03 04:04:06,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2022-11-03 04:04:06,659 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:04:06,659 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:04:06,659 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 04:04:06,659 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:04:06,660 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:04:06,660 INFO L85 PathProgramCache]: Analyzing trace with hash -785518697, now seen corresponding path program 1 times [2022-11-03 04:04:06,660 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:04:06,660 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1379505758] [2022-11-03 04:04:06,661 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:04:06,661 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:04:06,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:04:07,202 INFO L134 CoverageAnalysis]: Checked inductivity of 168 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 159 trivial. 0 not checked. [2022-11-03 04:04:07,203 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:04:07,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1379505758] [2022-11-03 04:04:07,203 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1379505758] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:04:07,203 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:04:07,203 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 04:04:07,204 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [276043650] [2022-11-03 04:04:07,204 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:04:07,205 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 04:04:07,205 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:04:07,206 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 04:04:07,206 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 04:04:07,206 INFO L87 Difference]: Start difference. First operand 1925 states and 2820 transitions. Second operand has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2022-11-03 04:04:09,297 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:10,458 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.09s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:17,325 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:19,962 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:25,522 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.16s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:26,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:04:26,003 INFO L93 Difference]: Finished difference Result 5601 states and 8509 transitions. [2022-11-03 04:04:26,003 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 04:04:26,003 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 148 [2022-11-03 04:04:26,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:04:26,023 INFO L225 Difference]: With dead ends: 5601 [2022-11-03 04:04:26,024 INFO L226 Difference]: Without dead ends: 3837 [2022-11-03 04:04:26,031 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:04:26,032 INFO L413 NwaCegarLoop]: 1589 mSDtfsCounter, 1215 mSDsluCounter, 2926 mSDsCounter, 0 mSdLazyCounter, 659 mSolverCounterSat, 184 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 17.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1323 SdHoareTripleChecker+Valid, 4110 SdHoareTripleChecker+Invalid, 846 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 184 IncrementalHoareTripleChecker+Valid, 659 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 18.4s IncrementalHoareTripleChecker+Time [2022-11-03 04:04:26,032 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1323 Valid, 4110 Invalid, 846 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [184 Valid, 659 Invalid, 3 Unknown, 0 Unchecked, 18.4s Time] [2022-11-03 04:04:26,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3837 states. [2022-11-03 04:04:26,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3837 to 1929. [2022-11-03 04:04:26,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1929 states, 1364 states have (on average 1.4090909090909092) internal successors, (1922), 1374 states have internal predecessors, (1922), 442 states have call successors, (442), 117 states have call predecessors, (442), 122 states have return successors, (460), 445 states have call predecessors, (460), 441 states have call successors, (460) [2022-11-03 04:04:26,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1929 states to 1929 states and 2824 transitions. [2022-11-03 04:04:26,244 INFO L78 Accepts]: Start accepts. Automaton has 1929 states and 2824 transitions. Word has length 148 [2022-11-03 04:04:26,246 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:04:26,246 INFO L495 AbstractCegarLoop]: Abstraction has 1929 states and 2824 transitions. [2022-11-03 04:04:26,246 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 20.25) internal successors, (81), 4 states have internal predecessors, (81), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2022-11-03 04:04:26,247 INFO L276 IsEmpty]: Start isEmpty. Operand 1929 states and 2824 transitions. [2022-11-03 04:04:26,252 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2022-11-03 04:04:26,252 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:04:26,252 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:04:26,252 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 04:04:26,253 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:04:26,253 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:04:26,253 INFO L85 PathProgramCache]: Analyzing trace with hash 221494535, now seen corresponding path program 1 times [2022-11-03 04:04:26,253 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:04:26,254 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [936314149] [2022-11-03 04:04:26,254 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:04:26,254 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:04:26,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:04:27,114 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2022-11-03 04:04:27,114 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:04:27,114 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [936314149] [2022-11-03 04:04:27,115 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [936314149] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:04:27,115 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:04:27,115 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 04:04:27,115 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [730376536] [2022-11-03 04:04:27,115 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:04:27,116 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 04:04:27,116 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:04:27,116 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 04:04:27,117 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 04:04:27,118 INFO L87 Difference]: Start difference. First operand 1929 states and 2824 transitions. Second operand has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 3 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-03 04:04:29,210 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:31,155 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.88s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:32,568 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.41s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:36,680 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:38,998 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.20s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:41,310 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:43,513 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:46,682 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:04:47,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:04:47,227 INFO L93 Difference]: Finished difference Result 3697 states and 5427 transitions. [2022-11-03 04:04:47,228 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 04:04:47,228 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 3 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 130 [2022-11-03 04:04:47,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:04:47,245 INFO L225 Difference]: With dead ends: 3697 [2022-11-03 04:04:47,246 INFO L226 Difference]: Without dead ends: 3692 [2022-11-03 04:04:47,248 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:04:47,249 INFO L413 NwaCegarLoop]: 1147 mSDtfsCounter, 1025 mSDsluCounter, 2400 mSDsCounter, 0 mSdLazyCounter, 526 mSolverCounterSat, 1 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 18.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1025 SdHoareTripleChecker+Valid, 3208 SdHoareTripleChecker+Invalid, 531 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 526 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 19.8s IncrementalHoareTripleChecker+Time [2022-11-03 04:04:47,249 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1025 Valid, 3208 Invalid, 531 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 526 Invalid, 4 Unknown, 0 Unchecked, 19.8s Time] [2022-11-03 04:04:47,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3692 states. [2022-11-03 04:04:47,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3692 to 3689. [2022-11-03 04:04:47,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3689 states, 2605 states have (on average 1.4092130518234165) internal successors, (3671), 2625 states have internal predecessors, (3671), 853 states have call successors, (853), 219 states have call predecessors, (853), 230 states have return successors, (893), 860 states have call predecessors, (893), 852 states have call successors, (893) [2022-11-03 04:04:47,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3689 states to 3689 states and 5417 transitions. [2022-11-03 04:04:47,607 INFO L78 Accepts]: Start accepts. Automaton has 3689 states and 5417 transitions. Word has length 130 [2022-11-03 04:04:47,607 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:04:47,607 INFO L495 AbstractCegarLoop]: Abstraction has 3689 states and 5417 transitions. [2022-11-03 04:04:47,608 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 3 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-03 04:04:47,609 INFO L276 IsEmpty]: Start isEmpty. Operand 3689 states and 5417 transitions. [2022-11-03 04:04:47,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 155 [2022-11-03 04:04:47,615 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:04:47,615 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:04:47,615 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 04:04:47,615 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:04:47,616 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:04:47,616 INFO L85 PathProgramCache]: Analyzing trace with hash 391584416, now seen corresponding path program 1 times [2022-11-03 04:04:47,616 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:04:47,616 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [44226445] [2022-11-03 04:04:47,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:04:47,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:06:37,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:06:40,133 INFO L134 CoverageAnalysis]: Checked inductivity of 176 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 151 trivial. 0 not checked. [2022-11-03 04:06:40,134 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:06:40,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [44226445] [2022-11-03 04:06:40,134 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [44226445] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:06:40,134 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:06:40,134 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-03 04:06:40,134 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [711442129] [2022-11-03 04:06:40,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:06:40,135 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 04:06:40,135 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:06:40,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 04:06:40,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2022-11-03 04:06:40,136 INFO L87 Difference]: Start difference. First operand 3689 states and 5417 transitions. Second operand has 13 states, 10 states have (on average 8.5) internal successors, (85), 9 states have internal predecessors, (85), 3 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) [2022-11-03 04:06:42,532 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:06:44,573 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.13s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:06:45,629 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.06s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:06:46,695 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.07s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:06:48,716 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:06:50,750 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:06:52,153 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.40s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:06:53,861 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.71s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:06:55,904 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:06:58,629 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:00,194 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.57s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:13,726 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.27s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:15,816 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.37s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:17,814 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:27,751 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.26s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:29,785 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:34,235 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.15s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:40,446 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.58s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:44,233 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.43s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:46,996 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:48,503 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.51s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:49,919 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.42s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:52,114 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.40s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:07:53,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:07:53,305 INFO L93 Difference]: Finished difference Result 9460 states and 14223 transitions. [2022-11-03 04:07:53,305 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 04:07:53,306 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 8.5) internal successors, (85), 9 states have internal predecessors, (85), 3 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) Word has length 154 [2022-11-03 04:07:53,306 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:07:53,336 INFO L225 Difference]: With dead ends: 9460 [2022-11-03 04:07:53,336 INFO L226 Difference]: Without dead ends: 5932 [2022-11-03 04:07:53,349 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2022-11-03 04:07:53,350 INFO L413 NwaCegarLoop]: 1587 mSDtfsCounter, 502 mSDsluCounter, 19553 mSDsCounter, 0 mSdLazyCounter, 3133 mSolverCounterSat, 0 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 69.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 624 SdHoareTripleChecker+Valid, 18439 SdHoareTripleChecker+Invalid, 3140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3133 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 72.6s IncrementalHoareTripleChecker+Time [2022-11-03 04:07:53,350 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [624 Valid, 18439 Invalid, 3140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3133 Invalid, 7 Unknown, 0 Unchecked, 72.6s Time] [2022-11-03 04:07:53,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5932 states. [2022-11-03 04:07:53,765 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5932 to 3697. [2022-11-03 04:07:53,771 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3697 states, 2613 states have (on average 1.407960199004975) internal successors, (3679), 2629 states have internal predecessors, (3679), 853 states have call successors, (853), 219 states have call predecessors, (853), 230 states have return successors, (893), 864 states have call predecessors, (893), 852 states have call successors, (893) [2022-11-03 04:07:53,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3697 states to 3697 states and 5425 transitions. [2022-11-03 04:07:53,784 INFO L78 Accepts]: Start accepts. Automaton has 3697 states and 5425 transitions. Word has length 154 [2022-11-03 04:07:53,785 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:07:53,785 INFO L495 AbstractCegarLoop]: Abstraction has 3697 states and 5425 transitions. [2022-11-03 04:07:53,785 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 8.5) internal successors, (85), 9 states have internal predecessors, (85), 3 states have call successors, (21), 2 states have call predecessors, (21), 5 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) [2022-11-03 04:07:53,786 INFO L276 IsEmpty]: Start isEmpty. Operand 3697 states and 5425 transitions. [2022-11-03 04:07:53,795 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 163 [2022-11-03 04:07:53,796 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:07:53,796 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:07:53,796 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-03 04:07:53,796 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:07:53,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:07:53,797 INFO L85 PathProgramCache]: Analyzing trace with hash -1170620834, now seen corresponding path program 1 times [2022-11-03 04:07:53,797 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:07:53,797 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1632781294] [2022-11-03 04:07:53,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:07:53,798 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:07:53,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:07:54,130 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2022-11-03 04:07:54,131 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:07:54,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1632781294] [2022-11-03 04:07:54,131 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1632781294] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:07:54,131 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:07:54,132 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 04:07:54,132 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [97864491] [2022-11-03 04:07:54,132 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:07:54,132 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 04:07:54,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:07:54,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 04:07:54,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:07:54,133 INFO L87 Difference]: Start difference. First operand 3697 states and 5425 transitions. Second operand has 3 states, 3 states have (on average 31.333333333333332) internal successors, (94), 3 states have internal predecessors, (94), 2 states have call successors, (22), 2 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2022-11-03 04:07:56,216 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:01,298 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.68s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:02,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:08:02,436 INFO L93 Difference]: Finished difference Result 7233 states and 10638 transitions. [2022-11-03 04:08:02,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 04:08:02,436 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 31.333333333333332) internal successors, (94), 3 states have internal predecessors, (94), 2 states have call successors, (22), 2 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) Word has length 162 [2022-11-03 04:08:02,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:08:02,450 INFO L225 Difference]: With dead ends: 7233 [2022-11-03 04:08:02,450 INFO L226 Difference]: Without dead ends: 3697 [2022-11-03 04:08:02,460 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:08:02,461 INFO L413 NwaCegarLoop]: 923 mSDtfsCounter, 12 mSDsluCounter, 1066 mSDsCounter, 0 mSdLazyCounter, 334 mSolverCounterSat, 3 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 1827 SdHoareTripleChecker+Invalid, 338 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 334 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.0s IncrementalHoareTripleChecker+Time [2022-11-03 04:08:02,461 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 1827 Invalid, 338 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 334 Invalid, 1 Unknown, 0 Unchecked, 8.0s Time] [2022-11-03 04:08:02,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3697 states. [2022-11-03 04:08:02,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3697 to 3697. [2022-11-03 04:08:02,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3697 states, 2613 states have (on average 1.4064293915040185) internal successors, (3675), 2629 states have internal predecessors, (3675), 853 states have call successors, (853), 219 states have call predecessors, (853), 230 states have return successors, (893), 864 states have call predecessors, (893), 852 states have call successors, (893) [2022-11-03 04:08:02,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3697 states to 3697 states and 5421 transitions. [2022-11-03 04:08:02,795 INFO L78 Accepts]: Start accepts. Automaton has 3697 states and 5421 transitions. Word has length 162 [2022-11-03 04:08:02,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:08:02,796 INFO L495 AbstractCegarLoop]: Abstraction has 3697 states and 5421 transitions. [2022-11-03 04:08:02,796 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 31.333333333333332) internal successors, (94), 3 states have internal predecessors, (94), 2 states have call successors, (22), 2 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2022-11-03 04:08:02,796 INFO L276 IsEmpty]: Start isEmpty. Operand 3697 states and 5421 transitions. [2022-11-03 04:08:02,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-11-03 04:08:02,804 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:08:02,805 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:08:02,805 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-03 04:08:02,805 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:08:02,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:08:02,806 INFO L85 PathProgramCache]: Analyzing trace with hash 447662084, now seen corresponding path program 1 times [2022-11-03 04:08:02,806 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:08:02,806 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [982028286] [2022-11-03 04:08:02,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:08:02,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:08:02,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:08:03,150 INFO L134 CoverageAnalysis]: Checked inductivity of 158 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 149 trivial. 0 not checked. [2022-11-03 04:08:03,151 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:08:03,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [982028286] [2022-11-03 04:08:03,151 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [982028286] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:08:03,151 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:08:03,151 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 04:08:03,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [197461577] [2022-11-03 04:08:03,152 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:08:03,152 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 04:08:03,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:08:03,153 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 04:08:03,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:08:03,153 INFO L87 Difference]: Start difference. First operand 3697 states and 5421 transitions. Second operand has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 3 states have internal predecessors, (92), 3 states have call successors, (23), 2 states have call predecessors, (23), 1 states have return successors, (22), 2 states have call predecessors, (22), 2 states have call successors, (22) [2022-11-03 04:08:05,244 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:08,046 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:14,526 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:15,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:08:15,668 INFO L93 Difference]: Finished difference Result 9252 states and 13877 transitions. [2022-11-03 04:08:15,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 04:08:15,668 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 3 states have internal predecessors, (92), 3 states have call successors, (23), 2 states have call predecessors, (23), 1 states have return successors, (22), 2 states have call predecessors, (22), 2 states have call successors, (22) Word has length 163 [2022-11-03 04:08:15,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:08:15,689 INFO L225 Difference]: With dead ends: 9252 [2022-11-03 04:08:15,689 INFO L226 Difference]: Without dead ends: 5716 [2022-11-03 04:08:15,701 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:08:15,702 INFO L413 NwaCegarLoop]: 1446 mSDtfsCounter, 507 mSDsluCounter, 1139 mSDsCounter, 0 mSdLazyCounter, 382 mSolverCounterSat, 0 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 632 SdHoareTripleChecker+Valid, 2427 SdHoareTripleChecker+Invalid, 385 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 382 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.1s IncrementalHoareTripleChecker+Time [2022-11-03 04:08:15,702 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [632 Valid, 2427 Invalid, 385 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 382 Invalid, 3 Unknown, 0 Unchecked, 12.1s Time] [2022-11-03 04:08:15,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5716 states. [2022-11-03 04:08:16,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5716 to 3697. [2022-11-03 04:08:16,196 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3697 states, 2613 states have (on average 1.4048985840030617) internal successors, (3671), 2629 states have internal predecessors, (3671), 853 states have call successors, (853), 219 states have call predecessors, (853), 230 states have return successors, (893), 864 states have call predecessors, (893), 852 states have call successors, (893) [2022-11-03 04:08:16,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3697 states to 3697 states and 5417 transitions. [2022-11-03 04:08:16,209 INFO L78 Accepts]: Start accepts. Automaton has 3697 states and 5417 transitions. Word has length 163 [2022-11-03 04:08:16,210 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:08:16,210 INFO L495 AbstractCegarLoop]: Abstraction has 3697 states and 5417 transitions. [2022-11-03 04:08:16,210 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 3 states have internal predecessors, (92), 3 states have call successors, (23), 2 states have call predecessors, (23), 1 states have return successors, (22), 2 states have call predecessors, (22), 2 states have call successors, (22) [2022-11-03 04:08:16,211 INFO L276 IsEmpty]: Start isEmpty. Operand 3697 states and 5417 transitions. [2022-11-03 04:08:16,220 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 186 [2022-11-03 04:08:16,221 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:08:16,221 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:08:16,221 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-03 04:08:16,222 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:08:16,222 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:08:16,222 INFO L85 PathProgramCache]: Analyzing trace with hash -2011120824, now seen corresponding path program 1 times [2022-11-03 04:08:16,223 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:08:16,223 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1863136799] [2022-11-03 04:08:16,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:08:16,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:08:16,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:08:16,881 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 216 trivial. 0 not checked. [2022-11-03 04:08:16,881 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:08:16,881 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1863136799] [2022-11-03 04:08:16,882 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1863136799] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 04:08:16,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [516078375] [2022-11-03 04:08:16,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:08:16,882 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 04:08:16,883 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 04:08:16,886 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 04:08:16,898 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 04:08:18,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:08:18,522 INFO L263 TraceCheckSpWp]: Trace formula consists of 4511 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-03 04:08:18,537 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:08:18,574 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 191 trivial. 0 not checked. [2022-11-03 04:08:18,574 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:08:18,574 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [516078375] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:08:18,574 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 04:08:18,575 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [4] total 5 [2022-11-03 04:08:18,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1490252831] [2022-11-03 04:08:18,575 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:08:18,576 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 04:08:18,576 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:08:18,576 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 04:08:18,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:08:18,577 INFO L87 Difference]: Start difference. First operand 3697 states and 5417 transitions. Second operand has 3 states, 3 states have (on average 34.0) internal successors, (102), 3 states have internal predecessors, (102), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2022-11-03 04:08:20,661 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:22,004 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.28s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:23,253 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.25s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:29,809 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:31,160 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:08:31,160 INFO L93 Difference]: Finished difference Result 9320 states and 13971 transitions. [2022-11-03 04:08:31,161 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 04:08:31,161 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 34.0) internal successors, (102), 3 states have internal predecessors, (102), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) Word has length 185 [2022-11-03 04:08:31,161 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:08:31,180 INFO L225 Difference]: With dead ends: 9320 [2022-11-03 04:08:31,180 INFO L226 Difference]: Without dead ends: 5784 [2022-11-03 04:08:31,188 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 186 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:08:31,189 INFO L413 NwaCegarLoop]: 1531 mSDtfsCounter, 465 mSDsluCounter, 1195 mSDsCounter, 0 mSdLazyCounter, 420 mSolverCounterSat, 2 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 579 SdHoareTripleChecker+Valid, 2563 SdHoareTripleChecker+Invalid, 424 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 420 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.1s IncrementalHoareTripleChecker+Time [2022-11-03 04:08:31,189 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [579 Valid, 2563 Invalid, 424 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 420 Invalid, 2 Unknown, 0 Unchecked, 12.1s Time] [2022-11-03 04:08:31,194 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5784 states. [2022-11-03 04:08:31,639 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5784 to 3749. [2022-11-03 04:08:31,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3749 states, 2653 states have (on average 1.4033169996230683) internal successors, (3723), 2669 states have internal predecessors, (3723), 865 states have call successors, (865), 219 states have call predecessors, (865), 230 states have return successors, (905), 876 states have call predecessors, (905), 864 states have call successors, (905) [2022-11-03 04:08:31,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3749 states to 3749 states and 5493 transitions. [2022-11-03 04:08:31,658 INFO L78 Accepts]: Start accepts. Automaton has 3749 states and 5493 transitions. Word has length 185 [2022-11-03 04:08:31,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:08:31,658 INFO L495 AbstractCegarLoop]: Abstraction has 3749 states and 5493 transitions. [2022-11-03 04:08:31,659 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 34.0) internal successors, (102), 3 states have internal predecessors, (102), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2022-11-03 04:08:31,659 INFO L276 IsEmpty]: Start isEmpty. Operand 3749 states and 5493 transitions. [2022-11-03 04:08:31,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2022-11-03 04:08:31,668 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:08:31,669 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:08:31,718 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 04:08:31,882 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 04:08:31,883 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:08:31,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:08:31,883 INFO L85 PathProgramCache]: Analyzing trace with hash 1440906394, now seen corresponding path program 1 times [2022-11-03 04:08:31,883 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:08:31,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [151130025] [2022-11-03 04:08:31,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:08:31,884 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:08:32,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:08:32,882 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 216 trivial. 0 not checked. [2022-11-03 04:08:32,882 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:08:32,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [151130025] [2022-11-03 04:08:32,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [151130025] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 04:08:32,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1043347680] [2022-11-03 04:08:32,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:08:32,883 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 04:08:32,883 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 04:08:32,899 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 04:08:32,906 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 04:08:34,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:08:34,521 INFO L263 TraceCheckSpWp]: Trace formula consists of 4522 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-03 04:08:34,544 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:08:34,793 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 04:08:34,794 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 80 treesize of output 80 [2022-11-03 04:08:34,988 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 191 trivial. 0 not checked. [2022-11-03 04:08:34,988 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:08:34,988 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1043347680] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:08:34,988 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 04:08:34,989 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5] total 8 [2022-11-03 04:08:34,989 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [80297518] [2022-11-03 04:08:34,989 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:08:34,989 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 04:08:34,989 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:08:34,990 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 04:08:34,990 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2022-11-03 04:08:34,990 INFO L87 Difference]: Start difference. First operand 3749 states and 5493 transitions. Second operand has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2022-11-03 04:08:37,101 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:39,170 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.91s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:40,531 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.36s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:42,558 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:49,029 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.71s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:08:56,714 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:02,568 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.19s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:03,781 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.21s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:05,845 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.07s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:13,833 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:16,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:09:16,544 INFO L93 Difference]: Finished difference Result 18578 states and 28863 transitions. [2022-11-03 04:09:16,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-03 04:09:16,545 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) Word has length 189 [2022-11-03 04:09:16,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:09:16,607 INFO L225 Difference]: With dead ends: 18578 [2022-11-03 04:09:16,607 INFO L226 Difference]: Without dead ends: 14990 [2022-11-03 04:09:16,622 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 198 GetRequests, 190 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=59, Unknown=0, NotChecked=0, Total=90 [2022-11-03 04:09:16,623 INFO L413 NwaCegarLoop]: 3282 mSDtfsCounter, 2143 mSDsluCounter, 5313 mSDsCounter, 0 mSdLazyCounter, 1423 mSolverCounterSat, 736 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 38.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2525 SdHoareTripleChecker+Valid, 7932 SdHoareTripleChecker+Invalid, 2163 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 736 IncrementalHoareTripleChecker+Valid, 1423 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 39.8s IncrementalHoareTripleChecker+Time [2022-11-03 04:09:16,624 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2525 Valid, 7932 Invalid, 2163 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [736 Valid, 1423 Invalid, 4 Unknown, 0 Unchecked, 39.8s Time] [2022-11-03 04:09:16,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14990 states. [2022-11-03 04:09:17,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14990 to 3757. [2022-11-03 04:09:17,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3757 states, 2661 states have (on average 1.403607666290868) internal successors, (3735), 2677 states have internal predecessors, (3735), 865 states have call successors, (865), 219 states have call predecessors, (865), 230 states have return successors, (905), 876 states have call predecessors, (905), 864 states have call successors, (905) [2022-11-03 04:09:17,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3757 states to 3757 states and 5505 transitions. [2022-11-03 04:09:17,479 INFO L78 Accepts]: Start accepts. Automaton has 3757 states and 5505 transitions. Word has length 189 [2022-11-03 04:09:17,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:09:17,479 INFO L495 AbstractCegarLoop]: Abstraction has 3757 states and 5505 transitions. [2022-11-03 04:09:17,480 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2022-11-03 04:09:17,480 INFO L276 IsEmpty]: Start isEmpty. Operand 3757 states and 5505 transitions. [2022-11-03 04:09:17,490 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2022-11-03 04:09:17,490 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:09:17,491 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:09:17,541 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 04:09:17,718 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-03 04:09:17,719 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:09:17,719 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:09:17,719 INFO L85 PathProgramCache]: Analyzing trace with hash -381021642, now seen corresponding path program 1 times [2022-11-03 04:09:17,719 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:09:17,719 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1993776403] [2022-11-03 04:09:17,719 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:09:17,720 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:09:17,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:09:18,695 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 216 trivial. 0 not checked. [2022-11-03 04:09:18,696 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 04:09:18,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1993776403] [2022-11-03 04:09:18,696 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1993776403] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 04:09:18,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2018752947] [2022-11-03 04:09:18,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:09:18,697 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 04:09:18,697 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 04:09:18,698 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 04:09:18,723 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 04:09:20,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:09:20,529 INFO L263 TraceCheckSpWp]: Trace formula consists of 4522 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-03 04:09:20,536 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:09:20,672 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 04:09:20,672 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 77 treesize of output 77 [2022-11-03 04:09:20,809 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 191 trivial. 0 not checked. [2022-11-03 04:09:20,809 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:09:20,809 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2018752947] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:09:20,809 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 04:09:20,809 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5] total 8 [2022-11-03 04:09:20,810 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [773598695] [2022-11-03 04:09:20,810 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:09:20,810 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 04:09:20,810 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 04:09:20,810 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 04:09:20,811 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2022-11-03 04:09:20,811 INFO L87 Difference]: Start difference. First operand 3757 states and 5505 transitions. Second operand has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2022-11-03 04:09:22,942 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:25,078 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:39,412 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:40,815 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.00s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:48,602 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:50,773 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:52,946 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2022-11-03 04:09:55,116 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2022-11-03 04:10:06,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:10:06,511 INFO L93 Difference]: Finished difference Result 18210 states and 28259 transitions. [2022-11-03 04:10:06,511 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-03 04:10:06,512 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) Word has length 189 [2022-11-03 04:10:06,512 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:10:06,561 INFO L225 Difference]: With dead ends: 18210 [2022-11-03 04:10:06,562 INFO L226 Difference]: Without dead ends: 14614 [2022-11-03 04:10:06,576 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 198 GetRequests, 190 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=59, Unknown=0, NotChecked=0, Total=90 [2022-11-03 04:10:06,576 INFO L413 NwaCegarLoop]: 3662 mSDtfsCounter, 1726 mSDsluCounter, 7764 mSDsCounter, 0 mSdLazyCounter, 1788 mSolverCounterSat, 478 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 41.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2088 SdHoareTripleChecker+Valid, 10492 SdHoareTripleChecker+Invalid, 2273 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 478 IncrementalHoareTripleChecker+Valid, 1788 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 43.6s IncrementalHoareTripleChecker+Time [2022-11-03 04:10:06,577 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2088 Valid, 10492 Invalid, 2273 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [478 Valid, 1788 Invalid, 7 Unknown, 0 Unchecked, 43.6s Time] [2022-11-03 04:10:06,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14614 states. [2022-11-03 04:10:07,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14614 to 3791. [2022-11-03 04:10:07,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3791 states, 2691 states have (on average 1.4065403195837978) internal successors, (3785), 2707 states have internal predecessors, (3785), 869 states have call successors, (869), 219 states have call predecessors, (869), 230 states have return successors, (909), 880 states have call predecessors, (909), 868 states have call successors, (909) [2022-11-03 04:10:07,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3791 states to 3791 states and 5563 transitions. [2022-11-03 04:10:07,592 INFO L78 Accepts]: Start accepts. Automaton has 3791 states and 5563 transitions. Word has length 189 [2022-11-03 04:10:07,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:10:07,592 INFO L495 AbstractCegarLoop]: Abstraction has 3791 states and 5563 transitions. [2022-11-03 04:10:07,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 5 states have internal predecessors, (106), 2 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 2 states have call predecessors, (25), 2 states have call successors, (25) [2022-11-03 04:10:07,593 INFO L276 IsEmpty]: Start isEmpty. Operand 3791 states and 5563 transitions. [2022-11-03 04:10:07,604 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2022-11-03 04:10:07,604 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:10:07,604 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:10:07,650 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 04:10:07,830 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-03 04:10:07,831 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:10:07,831 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:10:07,831 INFO L85 PathProgramCache]: Analyzing trace with hash 2004914900, now seen corresponding path program 1 times [2022-11-03 04:10:07,831 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 04:10:07,831 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [15715857] [2022-11-03 04:10:07,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:10:07,832 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 04:10:14,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-03 04:10:14,833 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-03 04:10:15,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-03 04:10:16,127 INFO L130 FreeRefinementEngine]: Strategy SIFA_TAIPAN found a feasible trace [2022-11-03 04:10:16,127 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-03 04:10:16,128 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 04:10:16,130 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-03 04:10:16,133 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:10:16,137 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 04:10:16,217 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 04:10:16,218 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 04:10:16,219 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 04:10:16,220 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 04:10:16,220 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 04:10:16,220 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 04:10:16,220 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 04:10:16,221 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-03 04:10:16,505 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 04:10:16 BoogieIcfgContainer [2022-11-03 04:10:16,505 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 04:10:16,506 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 04:10:16,506 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 04:10:16,506 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 04:10:16,507 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 04:02:01" (3/4) ... [2022-11-03 04:10:16,510 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-11-03 04:10:16,510 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 04:10:16,513 INFO L158 Benchmark]: Toolchain (without parser) took 510925.54ms. Allocated memory was 138.4MB in the beginning and 1.5GB in the end (delta: 1.4GB). Free memory was 87.1MB in the beginning and 807.4MB in the end (delta: -720.2MB). Peak memory consumption was 671.3MB. Max. memory is 16.1GB. [2022-11-03 04:10:16,514 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 138.4MB. Free memory is still 116.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 04:10:16,515 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2828.17ms. Allocated memory was 138.4MB in the beginning and 188.7MB in the end (delta: 50.3MB). Free memory was 86.9MB in the beginning and 77.0MB in the end (delta: 9.9MB). Peak memory consumption was 95.7MB. Max. memory is 16.1GB. [2022-11-03 04:10:16,515 INFO L158 Benchmark]: Boogie Procedure Inliner took 288.81ms. Allocated memory was 188.7MB in the beginning and 350.2MB in the end (delta: 161.5MB). Free memory was 77.0MB in the beginning and 260.8MB in the end (delta: -183.7MB). Peak memory consumption was 24.9MB. Max. memory is 16.1GB. [2022-11-03 04:10:16,515 INFO L158 Benchmark]: Boogie Preprocessor took 319.84ms. Allocated memory is still 350.2MB. Free memory was 260.8MB in the beginning and 230.4MB in the end (delta: 30.4MB). Peak memory consumption was 31.5MB. Max. memory is 16.1GB. [2022-11-03 04:10:16,517 INFO L158 Benchmark]: RCFGBuilder took 12517.45ms. Allocated memory was 350.2MB in the beginning and 557.8MB in the end (delta: 207.6MB). Free memory was 230.4MB in the beginning and 401.5MB in the end (delta: -171.1MB). Peak memory consumption was 318.9MB. Max. memory is 16.1GB. [2022-11-03 04:10:16,518 INFO L158 Benchmark]: TraceAbstraction took 494956.89ms. Allocated memory was 557.8MB in the beginning and 1.5GB in the end (delta: 973.1MB). Free memory was 400.4MB in the beginning and 807.4MB in the end (delta: -406.9MB). Peak memory consumption was 917.9MB. Max. memory is 16.1GB. [2022-11-03 04:10:16,522 INFO L158 Benchmark]: Witness Printer took 3.93ms. Allocated memory is still 1.5GB. Free memory is still 807.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 04:10:16,526 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 138.4MB. Free memory is still 116.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2828.17ms. Allocated memory was 138.4MB in the beginning and 188.7MB in the end (delta: 50.3MB). Free memory was 86.9MB in the beginning and 77.0MB in the end (delta: 9.9MB). Peak memory consumption was 95.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 288.81ms. Allocated memory was 188.7MB in the beginning and 350.2MB in the end (delta: 161.5MB). Free memory was 77.0MB in the beginning and 260.8MB in the end (delta: -183.7MB). Peak memory consumption was 24.9MB. Max. memory is 16.1GB. * Boogie Preprocessor took 319.84ms. Allocated memory is still 350.2MB. Free memory was 260.8MB in the beginning and 230.4MB in the end (delta: 30.4MB). Peak memory consumption was 31.5MB. Max. memory is 16.1GB. * RCFGBuilder took 12517.45ms. Allocated memory was 350.2MB in the beginning and 557.8MB in the end (delta: 207.6MB). Free memory was 230.4MB in the beginning and 401.5MB in the end (delta: -171.1MB). Peak memory consumption was 318.9MB. Max. memory is 16.1GB. * TraceAbstraction took 494956.89ms. Allocated memory was 557.8MB in the beginning and 1.5GB in the end (delta: 973.1MB). Free memory was 400.4MB in the beginning and 807.4MB in the end (delta: -406.9MB). Peak memory consumption was 917.9MB. Max. memory is 16.1GB. * Witness Printer took 3.93ms. Allocated memory is still 1.5GB. Free memory is still 807.4MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7417]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 7550, overapproximation of bitwiseOr at line 9385, overapproximation of bitwiseAnd at line 9183. Possible FailurePath: [L7440] int ldv_state_variable_3 ; [L7441] int LDV_IN_INTERRUPT = 1; [L7442] int ldv_state_variable_2 ; [L7443] struct sdio_func *mwifiex_sdio_group0 ; [L7444] int ref_cnt ; [L7445] struct mwifiex_adapter *sdio_ops_group0 ; [L7446] int ldv_state_variable_1 ; [L7447] struct device *mwifiex_sdio_pm_ops_group1 ; [L7448] int ldv_state_variable_4 ; [L7449] int ldv_state_variable_0 ; [L7450] struct sk_buff *sdio_ops_group1 ; [L7543-L7545] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd87xx = {1U, 1U, 64U, 65U, 48U, 3U, 96U, 97U, 63U, 65534U, 64U, 4U, 5U, (unsigned char)0, (unsigned char)0, 6U, 7U, (unsigned char)0, (unsigned char)0, 8U, 9U, 108U}; [L7546-L7548] static struct mwifiex_sdio_card_reg const mwifiex_reg_sd8897 = {0U, 0U, 96U, 97U, 80U, 195U, 192U, 193U, 255U, 4294967295U, 184U, 4U, 5U, 6U, 7U, 8U, 9U, 10U, 11U, 12U, 13U, 204U}; [L7549-L7551] static struct mwifiex_sdio_device const mwifiex_sdio_sd8786 = {"mrvl/sd8786_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7552-L7554] static struct mwifiex_sdio_device const mwifiex_sdio_sd8787 = {"mrvl/sd8787_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7555-L7557] static struct mwifiex_sdio_device const mwifiex_sdio_sd8797 = {"mrvl/sd8797_uapsta.bin", & mwifiex_reg_sd87xx, 16U, 8U, 0, 1, 2048U, 16384U, 16384U}; [L7558-L7560] static struct mwifiex_sdio_device const mwifiex_sdio_sd8897 = {"mrvl/sd8897_uapsta.bin", & mwifiex_reg_sd8897, 32U, 16U, 1, 0, 4096U, 32768U, 32768U}; [L7646] static u8 user_rmmod ; [L7648] static struct semaphore add_remove_card_sem ; [L7879-L7882] static struct sdio_device_id const mwifiex_ids[5U] = { {255U, 735U, 37142U, (unsigned long )(& mwifiex_sdio_sd8786)}, {255U, 735U, 37145U, (unsigned long )(& mwifiex_sdio_sd8787)}, {255U, 735U, 37161U, (unsigned long )(& mwifiex_sdio_sd8797)}, {255U, 735U, 37165U, (unsigned long )(& mwifiex_sdio_sd8897)}}; [L7883] struct sdio_device_id const __mod_sdio__mwifiex_ids_device_table ; [L7884-L7886] static struct dev_pm_ops const mwifiex_sdio_pm_ops = {0, 0, & mwifiex_sdio_suspend, & mwifiex_sdio_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7887-L7889] static struct sdio_driver mwifiex_sdio = {(char *)"mwifiex_sdio", (struct sdio_device_id const *)(& mwifiex_ids), & mwifiex_sdio_probe, & mwifiex_sdio_remove, {0, 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_sdio_pm_ops, 0}}; [L9929] static struct mmc_host *reset_host ; [L9954-L9955] static struct work_struct card_reset_work = {{137438953424L}, {& card_reset_work.entry, & card_reset_work.entry}, & sdio_card_reset_worker, {(struct lock_class_key *)(& card_reset_work), {0, 0}, "card_reset_work", 0, 0UL}}; [L9966-L9972] static struct mwifiex_if_ops sdio_ops = {& mwifiex_init_sdio, & mwifiex_cleanup_sdio, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_sdio_enable_host_int, & mwifiex_sdio_disable_host_int, & mwifiex_process_int_status, & mwifiex_sdio_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, & mwifiex_update_mp_end_port, & mwifiex_cleanup_mpa_buf, & mwifiex_sdio_cmdrsp_complete, & mwifiex_sdio_cmdrsp_complete, 0, 0, 0, & mwifiex_sdio_card_reset, 0, 0}; [L9999] int ldv_retval_2 ; [L10000] int ldv_retval_5 ; [L10001] int ldv_retval_0 ; [L10002] int ldv_retval_6 ; [L10003] int ldv_retval_1 ; [L10010] int ldv_retval_4 ; [L10012] int ldv_retval_8 ; [L10013] int ldv_retval_3 ; [L10014] int ldv_retval_7 ; [L10462] Element set_impl[15] ; [L10463] int last_index = 0; [L10597] Set LDV_SKBS ; [L10047] u32 ldvarg1 ; [L10048] u32 tmp ; [L10049] u16 ldvarg4 ; [L10050] u16 tmp___0 ; [L10051] u8 ldvarg3 ; [L10052] u8 tmp___1 ; [L10053] struct mwifiex_fw_image *ldvarg0 ; [L10054] void *tmp___2 ; [L10055] struct mwifiex_tx_param *ldvarg2 ; [L10056] void *tmp___3 ; [L10057] struct sdio_device_id *ldvarg5 ; [L10058] void *tmp___4 ; [L10059] struct work_struct *ldvarg6 ; [L10060] void *tmp___5 ; [L10061] int tmp___6 ; [L10062] int tmp___7 ; [L10063] int tmp___8 ; [L10064] int tmp___9 ; [L10065] int tmp___10 ; [L10066] int tmp___11 ; [L10068] tmp = __VERIFIER_nondet_u32() [L10069] ldvarg1 = tmp [L10070] tmp___0 = __VERIFIER_nondet_u16() [L10071] ldvarg4 = tmp___0 [L10072] tmp___1 = __VERIFIER_nondet_u8() [L10073] ldvarg3 = tmp___1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg1=4294967291, ldvarg3=28, ldvarg4=65519, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, user_rmmod=0] [L10074] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=32, tmp___0=1, user_rmmod=0] [L10074] RET, EXPR ldv_zalloc(32UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg1=4294967291, ldvarg3=28, ldvarg4=65519, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, user_rmmod=0] [L10074] tmp___2 = ldv_zalloc(32UL) [L10075] ldvarg0 = (struct mwifiex_fw_image *)tmp___2 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg3=28, ldvarg4=65519, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, user_rmmod=0] [L10076] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=4, tmp___0=1, user_rmmod=0] [L10076] RET, EXPR ldv_zalloc(4UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg3=28, ldvarg4=65519, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, user_rmmod=0] [L10076] tmp___3 = ldv_zalloc(4UL) [L10077] ldvarg2 = (struct mwifiex_tx_param *)tmp___3 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, user_rmmod=0] [L10078] CALL, EXPR ldv_zalloc(16UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=16, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=16, tmp___0=1, user_rmmod=0] [L10078] RET, EXPR ldv_zalloc(16UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(16UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, user_rmmod=0] [L10078] tmp___4 = ldv_zalloc(16UL) [L10079] ldvarg5 = (struct sdio_device_id *)tmp___4 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, user_rmmod=0] [L10080] CALL, EXPR ldv_zalloc(80UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=80, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=80, tmp___0=1, user_rmmod=0] [L10080] RET, EXPR ldv_zalloc(80UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(80UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, user_rmmod=0] [L10080] tmp___5 = ldv_zalloc(80UL) [L10081] ldvarg6 = (struct work_struct *)tmp___5 [L10082] CALL ldv_initialize() [L10616] CALL ldv_set_init(LDV_SKBS) [L10468] set = set_impl [L10469] last_index = 0 [L10616] RET ldv_set_init(LDV_SKBS) [L10082] RET ldv_initialize() [L10083] ldv_state_variable_4 = 0 [L10084] ldv_state_variable_1 = 0 [L10085] ref_cnt = 0 [L10086] ldv_state_variable_0 = 1 [L10087] ldv_state_variable_3 = 0 [L10088] ldv_state_variable_2 = 0 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: [L10324] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___9=1, user_rmmod=0] [L10325] COND TRUE ldv_state_variable_0 == 1 [L10326] CALL, EXPR mwifiex_sdio_init_module() [L9975] int tmp ; [L9977] CALL sema_init(& add_remove_card_sem, 1) [L7459] struct lock_class_key __key ; [L7460] struct semaphore __constr_expr_0 ; [L7462] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7463] __constr_expr_0.lock.magic = 3735899821U [L7464] __constr_expr_0.lock.owner_cpu = 4294967295U [L7465] __constr_expr_0.lock.owner = (void *)-1 [L7466] __constr_expr_0.lock.dep_map.key = 0 [L7467] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7468] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7469] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7470] __constr_expr_0.lock.dep_map.cpu = 0 [L7471] __constr_expr_0.lock.dep_map.ip = 0UL [L7472] __constr_expr_0.count = (unsigned int )val [L7473] __constr_expr_0.wait_list.next = & sem->wait_list [L7474] __constr_expr_0.wait_list.prev = & sem->wait_list [L7475] *sem = __constr_expr_0 [L7476] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7477] return; [L7477] return; [L9977] RET sema_init(& add_remove_card_sem, 1) [L9978] user_rmmod = 0U [L9979] CALL, EXPR sdio_register_driver(& mwifiex_sdio) [L10826] return __VERIFIER_nondet_int(); [L9979] RET, EXPR sdio_register_driver(& mwifiex_sdio) [L9979] tmp = sdio_register_driver(& mwifiex_sdio) [L9980] return (tmp); [L10326] RET, EXPR mwifiex_sdio_init_module() [L10326] ldv_retval_7 = mwifiex_sdio_init_module() [L10327] COND FALSE !(ldv_retval_7 != 0) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___9=1, user_rmmod=0] [L10332] COND TRUE ldv_retval_7 == 0 [L10333] ldv_state_variable_0 = 2 [L10334] ldv_state_variable_2 = 1 [L10335] ldv_state_variable_3 = 1 [L10336] CALL ldv_initialize_sdio_driver_3() [L10029] void *tmp ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10031] CALL, EXPR ldv_zalloc(1488UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=1488, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=1488, tmp___0=1, user_rmmod=0] [L10031] RET, EXPR ldv_zalloc(1488UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(1488UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10031] tmp = ldv_zalloc(1488UL) [L10032] mwifiex_sdio_group0 = (struct sdio_func *)tmp [L10336] RET ldv_initialize_sdio_driver_3() [L10337] ldv_state_variable_1 = 1 [L10338] CALL ldv_initialize_mwifiex_if_ops_1() [L10017] void *tmp ; [L10018] void *tmp___0 ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10020] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=6864, tmp___0=1, user_rmmod=0] [L10020] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(6864UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10020] tmp = ldv_zalloc(6864UL) [L10021] sdio_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10022] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=232, tmp___0=1, user_rmmod=0] [L10022] RET, EXPR ldv_zalloc(232UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(232UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:0}, user_rmmod=0] [L10022] tmp___0 = ldv_zalloc(232UL) [L10023] sdio_ops_group1 = (struct sk_buff *)tmp___0 [L10338] RET ldv_initialize_mwifiex_if_ops_1() [L10339] ldv_state_variable_4 = 1 [L10340] CALL ldv_dev_pm_ops_4() [L10038] void *tmp ; VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10040] CALL, EXPR ldv_zalloc(1416UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND TRUE tmp___0 != 0 [L7388] return ((void *)0); VAL [\old(size)=1416, \result={0:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=1416, tmp___0=1, user_rmmod=0] [L10040] RET, EXPR ldv_zalloc(1416UL) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1416UL)={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10040] tmp = ldv_zalloc(1416UL) [L10041] mwifiex_sdio_pm_ops_group1 = (struct device *)tmp [L10340] RET ldv_dev_pm_ops_4() [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___9=1, user_rmmod=0] [L10183] COND TRUE ldv_state_variable_1 != 0 [L10184] tmp___8 = __VERIFIER_nondet_int() [L10186] case 0: [L10193] case 1: [L10200] case 2: [L10207] case 3: [L10214] case 4: [L10221] case 5: [L10228] case 6: [L10235] case 7: [L10242] case 8: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___8=8, tmp___9=1, user_rmmod=0] [L10243] COND TRUE ldv_state_variable_1 == 1 [L10244] CALL mwifiex_process_int_status(sdio_ops_group0) [L9125] struct sdio_mmc_card *card ; [L9126] struct mwifiex_sdio_card_reg const *reg ; [L9127] int ret ; [L9128] u8 sdio_ireg ; [L9129] struct sk_buff *skb ; [L9130] u8 port ; [L9131] u32 len_reg_l ; [L9132] u32 len_reg_u ; [L9133] u32 rx_blocks ; [L9134] u16 rx_len ; [L9135] unsigned long flags ; [L9136] u32 bitmap ; [L9137] u8 cr ; [L9138] raw_spinlock_t *tmp ; [L9139] u32 pkt_type ; [L9140] int tmp___0 ; [L9141] struct _ddebug descriptor ; [L9142] long tmp___1 ; [L9143] struct _ddebug descriptor___0 ; [L9144] long tmp___2 ; [L9145] struct _ddebug descriptor___1 ; [L9146] long tmp___3 ; [L9147] struct _ddebug descriptor___2 ; [L9148] long tmp___4 ; [L9149] struct _ddebug descriptor___3 ; [L9150] long tmp___5 ; [L9151] struct _ddebug descriptor___4 ; [L9152] long tmp___6 ; [L9153] struct _ddebug descriptor___5 ; [L9154] long tmp___7 ; [L9155] int tmp___8 ; [L9156] struct _ddebug descriptor___6 ; [L9157] long tmp___9 ; [L9158] int tmp___10 ; [L9159] struct _ddebug descriptor___7 ; [L9160] long tmp___11 ; [L9161] int tmp___12 ; [L9162] struct _ddebug descriptor___8 ; [L9163] long tmp___13 ; [L9164] int tmp___14 ; [L9166] EXPR adapter->card [L9166] card = (struct sdio_mmc_card *)adapter->card [L9167] EXPR card->reg [L9167] reg = card->reg [L9168] ret = 0 [L9169] port = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L9170] CALL, EXPR spinlock_check(& adapter->int_lock) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, lock={0:891}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7253] return (& lock->ldv_6338.rlock); [L9170] RET, EXPR spinlock_check(& adapter->int_lock) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, spinlock_check(& adapter->int_lock)={0:891}, user_rmmod=0] [L9170] tmp = spinlock_check(& adapter->int_lock) [L9171] CALL, EXPR _raw_spin_lock_irqsave(tmp) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, arg0={0:891}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10693] return __VERIFIER_nondet_ulong(); [L9171] RET, EXPR _raw_spin_lock_irqsave(tmp) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, _raw_spin_lock_irqsave(tmp)=137438953465, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9171] flags = _raw_spin_lock_irqsave(tmp) [L9172] EXPR adapter->int_status [L9172] sdio_ireg = adapter->int_status [L9173] adapter->int_status = 0U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9174] CALL spin_unlock_irqrestore(& adapter->int_lock, flags) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7259] FCALL _raw_spin_unlock_irqrestore(& lock->ldv_6338.rlock, flags) [L9174] RET spin_unlock_irqrestore(& adapter->int_lock, flags) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9175] COND FALSE !((unsigned int )sdio_ireg == 0U) [L9179] (int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U [L9179] COND FALSE !((int )((signed char )sdio_ireg) < 0 && (unsigned int )adapter->cmd_sent != 0U) [L9183] COND TRUE ((unsigned int )sdio_ireg & 64U) != 0U [L9184] EXPR card->mp_regs [L9184] EXPR card->mp_regs + 181UL [L9184] rx_len = (int )((u16 )*(card->mp_regs + 181UL)) << 8U [L9185] EXPR card->mp_regs [L9185] EXPR card->mp_regs + 180UL [L9185] rx_len = (int )((u16 )*(card->mp_regs + 180UL)) | (int )rx_len [L9186] rx_blocks = (u32 )(((int )rx_len + 255) / 256) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9187] COND FALSE !((unsigned int )rx_len <= 4U || rx_blocks * 256U > 4096U) [L9191] rx_len = (unsigned int )((unsigned short )rx_blocks) * 256U VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9192] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )rx_len) VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10455] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=256, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10457] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10600] void *skb ; [L10601] void *tmp___7 ; VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10603] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7382] void *p ; [L7383] void *tmp ; [L7384] int tmp___0 ; [L7386] tmp___0 = __VERIFIER_nondet_int() [L7387] COND FALSE !(tmp___0 != 0) [L7390] EXPR, FCALL calloc(1UL, size) [L7390] tmp = calloc(1UL, size) [L7391] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, calloc(1UL, size)={-18446744073709551617:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={-18446744073709551617:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, user_rmmod=0] [L7392] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7361] COND FALSE !(!cond) [L7392] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, calloc(1UL, size)={-18446744073709551617:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={-18446744073709551617:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, user_rmmod=0] [L7393] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551617:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, calloc(1UL, size)={-18446744073709551617:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, p={-18446744073709551617:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, user_rmmod=0] [L10603] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551617:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10603] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L10604] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, user_rmmod=0] [L10605] COND FALSE !(! skb) [L10608] CALL ldv_set_add(LDV_SKBS, skb) [L10476] int i ; [L10478] i = 0 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10479] COND TRUE 1 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10480] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10490] COND TRUE last_index < 15 [L10491] set_impl[last_index] = e [L10492] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set={0:0}, set={0:0}, set_impl={315:0}, user_rmmod=0] [L10608] RET ldv_set_add(LDV_SKBS, skb) [L10609] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551617:0}, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, user_rmmod=0] [L10457] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_skb_alloc()={-18446744073709551617:0}, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=256, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10457] tmp = ldv_skb_alloc() [L10458] return (tmp); [L9192] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )rx_len) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, ldv_dev_alloc_skb_14((unsigned int )rx_len)={-18446744073709551617:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp={0:891}, user_rmmod=0] [L9192] skb = ldv_dev_alloc_skb_14((unsigned int )rx_len) [L9193] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, user_rmmod=0] [L9197] CALL skb_put(skb, (unsigned int )rx_len) VAL [\old(arg1)=256, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, arg0={-18446744073709551617:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L10857] EXPR arg0->data [L10857] EXPR arg0->tail [L10857] unsigned char *ret_val = arg0->data + arg0->tail; [L10858] EXPR arg0->tail [L10858] arg0->tail += arg1 [L10859] return ret_val; [L9197] RET skb_put(skb, (unsigned int )rx_len) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, skb_put(skb, (unsigned int )rx_len)={0:0}, tmp={0:891}, user_rmmod=0] [L9198] EXPR skb->data [L9198] EXPR skb->len [L9199] EXPR adapter->ioport VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, adapter->ioport=137438953435, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, skb->data={0:0}, skb->len=0, tmp={0:891}, user_rmmod=0] [L9198-L9199] CALL, EXPR mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) VAL [\old(npayload)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={0:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={323:0}, user_rmmod=0] [L8505] int ret ; [L8506] u32 nb ; VAL [\old(ioport)=1, \old(npayload)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={0:0}, buffer={0:0}, card_reset_work={313:0}, ioport=1, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, npayload=0, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={323:0}, type={323:0}, user_rmmod=0] [L8508] COND TRUE (unsigned long )buffer == (unsigned long )((u8 *)0U) [L8509] adapter->dev [L8510] return (-1); VAL [\old(ioport)=1, \old(npayload)=0, \result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, buffer={0:0}, buffer={0:0}, card_reset_work={313:0}, ioport=1, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, npayload=0, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, type={323:0}, type={323:0}, user_rmmod=0] [L9198-L9199] RET, EXPR mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, adapter->ioport=137438953435, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U)=-1, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, skb->data={0:0}, skb->len=0, tmp={0:891}, user_rmmod=0] [L9198-L9199] tmp___0 = mwifiex_sdio_card_to_host(adapter, & pkt_type, skb->data, skb->len, adapter->ioport | 32768U) [L9200] COND TRUE tmp___0 != 0 [L9201] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9203] CALL dev_kfree_skb_any(skb) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7486] FCALL __dev_kfree_skb_any(skb, 1) [L9203] RET dev_kfree_skb_any(skb) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9368] CALL, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7913] struct sdio_mmc_card *card ; [L7914] int ret ; [L7915] u8 val ; [L7917] EXPR adapter->card [L7917] card = (struct sdio_mmc_card *)adapter->card [L7918] ret = -1 [L7919] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953481:137438953439}, card_reset_work={313:0}, data={326:0}, data={326:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={331:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7919] FCALL sdio_claim_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953481:137438953439}, card_reset_work={313:0}, data={326:0}, data={326:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={331:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7920] EXPR card->func [L7920] CALL, EXPR sdio_readb(card->func, reg, & ret) [L10818] return __VERIFIER_nondet_uchar(); [L7920] RET, EXPR sdio_readb(card->func, reg, & ret) [L7920] val = sdio_readb(card->func, reg, & ret) [L7921] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953481:137438953439}, card_reset_work={313:0}, data={326:0}, data={326:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={331:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=222] [L7921] FCALL sdio_release_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953481:137438953439}, card_reset_work={313:0}, data={326:0}, data={326:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={331:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=222] [L7922] *data = val [L7923] EXPR \read(ret) [L7923] return (ret); [L7923] return (ret); [L9368] RET, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_read_reg(adapter, 0U, & cr)=-1, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, tmp___0=-1, user_rmmod=0] [L9368] tmp___10 = mwifiex_read_reg(adapter, 0U, & cr) [L9369] COND TRUE tmp___10 != 0 [L9370] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] EXPR \read(cr) VAL [\read(cr)=137438953438, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] CALL, EXPR mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7901] struct sdio_mmc_card *card ; [L7902] int ret ; [L7904] EXPR adapter->card [L7904] card = (struct sdio_mmc_card *)adapter->card [L7905] EXPR card->func VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953481:137438953439}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7905] FCALL sdio_claim_host(card->func) VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953481:137438953439}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] EXPR card->func VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953481:137438953439}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] CALL, EXPR mwifiex_write_reg_locked(card->func, reg, (int )data) VAL [\old(data)=0, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, func={137438953481:137438953439}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7892] int ret ; [L7894] ret = -1 [L7895] FCALL sdio_writeb(func, (int )data, reg, & ret) [L7896] EXPR \read(ret) [L7896] return (ret); [L7896] return (ret); [L7906] RET, EXPR mwifiex_write_reg_locked(card->func, reg, (int )data) VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953481:137438953439}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, mwifiex_write_reg_locked(card->func, reg, (int )data)=-1, ref_cnt=0, reg=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7906] ret = mwifiex_write_reg_locked(card->func, reg, (int )data) [L7907] EXPR card->func VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953443:137438953426}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret=-1, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7907] FCALL sdio_release_host(card->func) VAL [\old(data)=512, \old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953443:137438953426}, card_reset_work={313:0}, data=512, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret=-1, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7908] return (ret); [L9385] RET, EXPR mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) VAL [\read(cr)=137438953438, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U))=-1, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, user_rmmod=0] [L9385] tmp___12 = mwifiex_write_reg(adapter, 0U, (int )((unsigned int )cr | 4U)) [L9386] COND TRUE tmp___12 != 0 [L9387] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, user_rmmod=0] [L9401] CALL, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7913] struct sdio_mmc_card *card ; [L7914] int ret ; [L7915] u8 val ; [L7917] EXPR adapter->card [L7917] card = (struct sdio_mmc_card *)adapter->card [L7918] ret = -1 [L7919] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953466:137438953492}, card_reset_work={313:0}, data={326:0}, data={326:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={332:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7919] FCALL sdio_claim_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953466:137438953492}, card_reset_work={313:0}, data={326:0}, data={326:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={332:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0] [L7920] EXPR card->func [L7920] CALL, EXPR sdio_readb(card->func, reg, & ret) [L10818] return __VERIFIER_nondet_uchar(); [L7920] RET, EXPR sdio_readb(card->func, reg, & ret) [L7920] val = sdio_readb(card->func, reg, & ret) [L7921] EXPR card->func VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953466:137438953492}, card_reset_work={313:0}, data={326:0}, data={326:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={332:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=235] [L7921] FCALL sdio_release_host(card->func) VAL [\old(reg)=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card->func={137438953466:137438953492}, card_reset_work={313:0}, data={326:0}, data={326:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg=0, reset_host={0:0}, ret={332:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=0, val=235] [L7922] *data = val [L7923] EXPR \read(ret) [L7923] return (ret); [L7923] return (ret); [L9401] RET, EXPR mwifiex_read_reg(adapter, 0U, & cr) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_read_reg(adapter, 0U, & cr)=-1, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, user_rmmod=0] [L9401] tmp___14 = mwifiex_read_reg(adapter, 0U, & cr) [L9402] COND TRUE tmp___14 != 0 [L9403] adapter->dev VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, cr={326:0}, descriptor={327:0}, descriptor___0={318:0}, descriptor___1={324:0}, descriptor___2={320:0}, descriptor___3={319:0}, descriptor___4={330:0}, descriptor___5={328:0}, descriptor___6={325:0}, descriptor___7={321:0}, descriptor___8={322:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, pkt_type={323:0}, port={329:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, tmp___14=-1, user_rmmod=0] [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); [L9418] return (-1); VAL [\result=-1, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={309:0}, card={332:0}, card_reset_work={313:0}, flags=137438953465, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reg={137438953498:137438953476}, reset_host={0:0}, ret=0, rx_blocks=1, rx_len=256, sdio_ireg=2, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, skb={-18446744073709551617:0}, tmp={0:891}, tmp___0=-1, tmp___10=-1, tmp___12=-1, tmp___14=-1, user_rmmod=0] [L10244] RET mwifiex_process_int_status(sdio_ops_group0) [L10245] ldv_state_variable_1 = 1 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___8=8, tmp___9=1, user_rmmod=0] [L10090] tmp___6 = __VERIFIER_nondet_int() [L10092] case 0: [L10182] case 1: [L10312] case 2: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=1, user_rmmod=0] [L10313] COND TRUE ldv_state_variable_0 != 0 [L10314] tmp___9 = __VERIFIER_nondet_int() [L10316] case 0: VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=0, user_rmmod=0] [L10317] COND TRUE ldv_state_variable_0 == 2 && ref_cnt == 0 [L10318] CALL mwifiex_sdio_cleanup_module() [L9985] int tmp ; [L9987] CALL, EXPR down_interruptible(& add_remove_card_sem) [L10712] return __VERIFIER_nondet_int(); [L9987] RET, EXPR down_interruptible(& add_remove_card_sem) [L9987] tmp = down_interruptible(& add_remove_card_sem) [L9988] COND FALSE !(tmp == 0) [L9992] user_rmmod = 1U [L9993] CALL cancel_work_sync(& card_reset_work) [L10700] return __VERIFIER_nondet_bool(); [L9993] RET cancel_work_sync(& card_reset_work) [L9994] FCALL sdio_unregister_driver(& mwifiex_sdio) [L10318] RET mwifiex_sdio_cleanup_module() [L10319] ldv_state_variable_0 = 3 VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1=4294967291, ldvarg2={0:0}, ldvarg3=28, ldvarg4=65519, ldvarg5={0:0}, ldvarg6={0:0}, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp=4294967291, tmp___0=65519, tmp___1=28, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=2, tmp___8=8, tmp___9=0, user_rmmod=1] [L10407] CALL ldv_check_final_state() [L10667] int tmp___7 ; [L10669] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L10558] return (last_index == 0); [L10669] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L10669] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L10670] COND FALSE !(\read(tmp___7)) VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, tmp___7=0, user_rmmod=1] [L10672] CALL ldv_error() VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=1] [L7417] reach_error() VAL [__mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __mod_sdio__mwifiex_ids_device_table=0, __this_module={137438953460:137438953479}, add_remove_card_sem={309:0}, card_reset_work={313:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={310:0}, mwifiex_reg_sd87xx={303:0}, mwifiex_reg_sd8897={304:0}, mwifiex_sdio={312:0}, mwifiex_sdio_group0={0:0}, mwifiex_sdio_pm_ops={311:0}, mwifiex_sdio_pm_ops_group1={0:0}, mwifiex_sdio_sd8786={305:0}, mwifiex_sdio_sd8787={306:0}, mwifiex_sdio_sd8797={307:0}, mwifiex_sdio_sd8897={308:0}, ref_cnt=0, reset_host={0:0}, sdio_ops={314:0}, sdio_ops_group0={0:0}, sdio_ops_group1={0:0}, set_impl={315:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 41 procedures, 750 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 494.5s, OverallIterations: 15, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 341.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 43 mSolverCounterUnknown, 12831 SdHoareTripleChecker+Valid, 333.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 11500 mSDsluCounter, 78752 SdHoareTripleChecker+Invalid, 319.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 66033 mSDsCounter, 1414 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 13598 IncrementalHoareTripleChecker+Invalid, 15055 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1414 mSolverCounterUnsat, 21790 mSDtfsCounter, 13598 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 654 GetRequests, 591 SyntacticMatches, 0 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=3791occurred in iteration=14, InterpolantAutomatonStates: 76, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.0s AutomataMinimizationTime, 14 MinimizatonAttempts, 31291 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.8s SsaConstructionTime, 128.5s SatisfiabilityAnalysisTime, 12.2s InterpolantComputationTime, 2568 NumberOfCodeBlocks, 2568 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 2368 ConstructedInterpolants, 0 QuantifiedInterpolants, 3250 SizeOfPredicates, 18 NumberOfNonLiveVariables, 13555 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 17 InterpolantComputations, 14 PerfectInterpolantSequences, 2658/2667 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-11-03 04:10:16,774 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2022-11-03 04:10:16,825 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-64bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 04:10:18,928 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 04:10:18,930 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 04:10:18,975 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 04:10:18,975 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 04:10:18,979 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 04:10:18,981 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 04:10:18,986 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 04:10:18,992 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 04:10:18,993 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 04:10:18,995 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 04:10:18,997 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 04:10:18,997 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 04:10:19,002 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 04:10:19,004 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 04:10:19,006 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 04:10:19,007 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 04:10:19,009 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 04:10:19,012 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 04:10:19,015 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 04:10:19,021 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 04:10:19,023 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 04:10:19,024 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 04:10:19,025 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 04:10:19,028 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 04:10:19,034 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 04:10:19,035 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 04:10:19,036 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 04:10:19,038 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 04:10:19,039 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 04:10:19,040 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 04:10:19,040 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 04:10:19,042 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 04:10:19,043 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 04:10:19,044 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 04:10:19,044 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 04:10:19,045 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 04:10:19,045 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 04:10:19,046 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 04:10:19,048 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 04:10:19,048 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 04:10:19,049 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-64bit-Taipan_Bitvector.epf [2022-11-03 04:10:19,105 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 04:10:19,105 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 04:10:19,106 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 04:10:19,106 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 04:10:19,107 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 04:10:19,107 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 04:10:19,107 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 04:10:19,107 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 04:10:19,107 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 04:10:19,108 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 04:10:19,108 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 04:10:19,108 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 04:10:19,109 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 04:10:19,109 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 04:10:19,109 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 04:10:19,110 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 04:10:19,110 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 04:10:19,110 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-03 04:10:19,110 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-11-03 04:10:19,110 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-11-03 04:10:19,111 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 04:10:19,111 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 04:10:19,111 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 04:10:19,111 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 04:10:19,111 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-03 04:10:19,112 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 04:10:19,112 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 04:10:19,112 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 04:10:19,112 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 04:10:19,112 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 04:10:19,113 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2022-11-03 04:10:19,113 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-11-03 04:10:19,113 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 04:10:19,113 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 04:10:19,114 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-03 04:10:19,114 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4e928bce7a5eba940349fe986fce1ee6d952316584823caa32f480aa4c9f0c38 [2022-11-03 04:10:19,488 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 04:10:19,510 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 04:10:19,512 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 04:10:19,514 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 04:10:19,515 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 04:10:19,516 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2022-11-03 04:10:19,590 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/data/d860f8f90/92827d41f7924b908ecc26346c2d6e17/FLAG3c3c8a8be [2022-11-03 04:10:20,534 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 04:10:20,535 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2022-11-03 04:10:20,593 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/data/d860f8f90/92827d41f7924b908ecc26346c2d6e17/FLAG3c3c8a8be [2022-11-03 04:10:20,935 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/data/d860f8f90/92827d41f7924b908ecc26346c2d6e17 [2022-11-03 04:10:20,938 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 04:10:20,940 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 04:10:20,943 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 04:10:20,943 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 04:10:20,947 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 04:10:20,948 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 04:10:20" (1/1) ... [2022-11-03 04:10:20,951 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@59f0090a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:20, skipping insertion in model container [2022-11-03 04:10:20,951 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 04:10:20" (1/1) ... [2022-11-03 04:10:20,959 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 04:10:21,158 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 04:10:22,134 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2022-11-03 04:10:23,078 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 04:10:23,117 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-11-03 04:10:23,198 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 04:10:23,370 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2022-11-03 04:10:23,613 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 04:10:23,643 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 04:10:23,857 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i[209352,209365] [2022-11-03 04:10:24,037 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 04:10:24,178 INFO L208 MainTranslator]: Completed translation [2022-11-03 04:10:24,178 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24 WrapperNode [2022-11-03 04:10:24,179 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 04:10:24,180 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 04:10:24,180 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 04:10:24,180 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 04:10:24,187 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,327 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,550 INFO L138 Inliner]: procedures = 203, calls = 2240, calls flagged for inlining = 91, calls inlined = 86, statements flattened = 4723 [2022-11-03 04:10:24,551 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 04:10:24,552 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 04:10:24,552 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 04:10:24,553 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 04:10:24,562 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,562 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,622 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,623 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,760 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,789 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,815 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,827 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,860 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 04:10:24,862 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 04:10:24,862 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 04:10:24,862 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 04:10:24,863 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (1/1) ... [2022-11-03 04:10:24,870 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 04:10:24,881 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 04:10:24,893 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 04:10:24,900 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 04:10:24,937 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-11-03 04:10:24,938 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-11-03 04:10:24,938 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-11-03 04:10:24,938 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_host [2022-11-03 04:10:24,938 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_host [2022-11-03 04:10:24,938 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-11-03 04:10:24,939 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-11-03 04:10:24,939 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-03 04:10:24,939 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-11-03 04:10:24,939 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-03 04:10:24,939 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-03 04:10:24,939 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-03 04:10:24,940 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_card_to_host [2022-11-03 04:10:24,940 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_card_to_host [2022-11-03 04:10:24,940 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-03 04:10:24,940 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-03 04:10:24,940 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-03 04:10:24,940 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-03 04:10:24,941 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-11-03 04:10:24,941 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-11-03 04:10:24,941 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2022-11-03 04:10:24,941 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2022-11-03 04:10:24,941 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2022-11-03 04:10:24,942 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2022-11-03 04:10:24,942 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2022-11-03 04:10:24,942 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2022-11-03 04:10:24,942 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-03 04:10:24,942 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-03 04:10:24,942 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_data_sync [2022-11-03 04:10:24,943 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_data_sync [2022-11-03 04:10:24,943 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-03 04:10:24,943 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-03 04:10:24,944 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-11-03 04:10:24,944 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-11-03 04:10:24,944 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_disable_func [2022-11-03 04:10:24,944 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_disable_func [2022-11-03 04:10:24,944 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-03 04:10:24,944 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg_locked [2022-11-03 04:10:24,945 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg_locked [2022-11-03 04:10:24,945 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_cmdrsp_complete [2022-11-03 04:10:24,945 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_cmdrsp_complete [2022-11-03 04:10:24,945 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-03 04:10:24,945 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-11-03 04:10:24,946 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-11-03 04:10:24,946 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-11-03 04:10:24,946 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-11-03 04:10:24,947 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-11-03 04:10:24,947 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-11-03 04:10:24,948 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-03 04:10:24,949 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-11-03 04:10:24,949 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2022-11-03 04:10:24,949 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_set_drvdata [2022-11-03 04:10:24,949 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-03 04:10:24,949 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2022-11-03 04:10:24,949 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-11-03 04:10:24,950 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-11-03 04:10:24,950 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-11-03 04:10:24,950 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-11-03 04:10:24,951 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-11-03 04:10:24,951 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memmove [2022-11-03 04:10:24,952 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memmove [2022-11-03 04:10:24,952 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-11-03 04:10:24,952 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-11-03 04:10:24,952 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_host_to_card_mp_aggr [2022-11-03 04:10:24,952 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_host_to_card_mp_aggr [2022-11-03 04:10:24,953 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_sdio_resume [2022-11-03 04:10:24,953 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_sdio_resume [2022-11-03 04:10:24,953 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-03 04:10:24,953 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-03 04:10:24,953 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_decode_rx_packet [2022-11-03 04:10:24,953 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_decode_rx_packet [2022-11-03 04:10:24,954 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2022-11-03 04:10:24,954 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2022-11-03 04:10:24,955 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_to_card [2022-11-03 04:10:24,955 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_to_card [2022-11-03 04:10:24,955 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_get_host_pm_caps [2022-11-03 04:10:24,955 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_get_host_pm_caps [2022-11-03 04:10:24,955 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_sync [2022-11-03 04:10:24,956 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_sync [2022-11-03 04:10:24,956 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-03 04:10:24,956 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-03 04:10:24,957 INFO L130 BoogieDeclarations]: Found specification of procedure mp_tx_aggr_port_limit_reached [2022-11-03 04:10:24,957 INFO L138 BoogieDeclarations]: Found implementation of procedure mp_tx_aggr_port_limit_reached [2022-11-03 04:10:24,957 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2022-11-03 04:10:24,957 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2022-11-03 04:10:24,957 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-03 04:10:24,958 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-03 04:10:24,959 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2022-11-03 04:10:24,959 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2022-11-03 04:10:24,959 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2022-11-03 04:10:24,960 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2022-11-03 04:10:24,960 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-03 04:10:24,960 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-03 04:10:24,961 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2022-11-03 04:10:24,961 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-03 04:10:24,961 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-03 04:10:24,961 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-03 04:10:24,961 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 04:10:24,961 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_release_irq [2022-11-03 04:10:24,962 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_release_irq [2022-11-03 04:10:24,962 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-03 04:10:24,962 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2022-11-03 04:10:24,962 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2022-11-03 04:10:24,963 INFO L130 BoogieDeclarations]: Found specification of procedure sdio_claim_host [2022-11-03 04:10:24,963 INFO L138 BoogieDeclarations]: Found implementation of procedure sdio_claim_host [2022-11-03 04:10:24,963 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2022-11-03 04:10:24,963 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-11-03 04:10:24,963 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-11-03 04:10:24,964 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2022-11-03 04:10:24,965 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2022-11-03 04:10:24,967 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2022-11-03 04:10:24,968 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-03 04:10:24,968 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 04:10:24,968 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 04:10:25,922 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 04:10:25,927 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 04:10:26,132 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-03 04:11:14,511 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 04:11:14,527 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 04:11:14,527 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-03 04:11:14,530 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 04:11:14 BoogieIcfgContainer [2022-11-03 04:11:14,531 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 04:11:14,533 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 04:11:14,533 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 04:11:14,536 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 04:11:14,537 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 04:10:20" (1/3) ... [2022-11-03 04:11:14,537 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7ba6cc83 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 04:11:14, skipping insertion in model container [2022-11-03 04:11:14,538 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 04:10:24" (2/3) ... [2022-11-03 04:11:14,538 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7ba6cc83 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 04:11:14, skipping insertion in model container [2022-11-03 04:11:14,538 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 04:11:14" (3/3) ... [2022-11-03 04:11:14,539 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_sdio.ko-entry_point.cil.out.i [2022-11-03 04:11:14,558 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 04:11:14,559 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 04:11:14,630 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 04:11:14,636 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@502be570, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 04:11:14,636 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 04:11:14,644 INFO L276 IsEmpty]: Start isEmpty. Operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) [2022-11-03 04:11:14,657 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-03 04:11:14,658 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:11:14,658 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:11:14,659 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:11:14,664 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:11:14,664 INFO L85 PathProgramCache]: Analyzing trace with hash -601957003, now seen corresponding path program 1 times [2022-11-03 04:11:14,681 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:11:14,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [849005536] [2022-11-03 04:11:14,682 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:11:14,682 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:11:14,682 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:11:14,686 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:11:14,696 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-11-03 04:11:15,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:11:15,987 INFO L263 TraceCheckSpWp]: Trace formula consists of 1188 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-03 04:11:15,993 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:11:16,195 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-03 04:11:16,196 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:11:16,196 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:11:16,197 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [849005536] [2022-11-03 04:11:16,197 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [849005536] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:11:16,197 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:11:16,198 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 04:11:16,199 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [957504871] [2022-11-03 04:11:16,200 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:11:16,204 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 04:11:16,205 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:11:16,255 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 04:11:16,256 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:11:16,270 INFO L87 Difference]: Start difference. First operand has 1067 states, 834 states have (on average 1.4388489208633093) internal successors, (1200), 847 states have internal predecessors, (1200), 192 states have call successors, (192), 40 states have call predecessors, (192), 39 states have return successors, (186), 185 states have call predecessors, (186), 186 states have call successors, (186) Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-03 04:11:18,605 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.10s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:11:18,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:11:18,845 INFO L93 Difference]: Finished difference Result 3148 states and 4714 transitions. [2022-11-03 04:11:18,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 04:11:18,848 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2022-11-03 04:11:18,849 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:11:18,888 INFO L225 Difference]: With dead ends: 3148 [2022-11-03 04:11:18,888 INFO L226 Difference]: Without dead ends: 2066 [2022-11-03 04:11:18,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:11:18,910 INFO L413 NwaCegarLoop]: 1770 mSDtfsCounter, 1505 mSDsluCounter, 1560 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 2 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1505 SdHoareTripleChecker+Valid, 3330 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-03 04:11:18,914 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1505 Valid, 3330 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 11 Invalid, 1 Unknown, 0 Unchecked, 2.4s Time] [2022-11-03 04:11:18,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2066 states. [2022-11-03 04:11:19,198 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2066 to 2066. [2022-11-03 04:11:19,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2066 states, 1626 states have (on average 1.4317343173431734) internal successors, (2328), 1636 states have internal predecessors, (2328), 363 states have call successors, (363), 77 states have call predecessors, (363), 76 states have return successors, (362), 360 states have call predecessors, (362), 362 states have call successors, (362) [2022-11-03 04:11:19,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2066 states to 2066 states and 3053 transitions. [2022-11-03 04:11:19,225 INFO L78 Accepts]: Start accepts. Automaton has 2066 states and 3053 transitions. Word has length 46 [2022-11-03 04:11:19,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:11:19,227 INFO L495 AbstractCegarLoop]: Abstraction has 2066 states and 3053 transitions. [2022-11-03 04:11:19,228 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-03 04:11:19,228 INFO L276 IsEmpty]: Start isEmpty. Operand 2066 states and 3053 transitions. [2022-11-03 04:11:19,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-03 04:11:19,236 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:11:19,236 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:11:19,272 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2022-11-03 04:11:19,454 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:11:19,455 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:11:19,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:11:19,456 INFO L85 PathProgramCache]: Analyzing trace with hash -1981556391, now seen corresponding path program 1 times [2022-11-03 04:11:19,462 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:11:19,462 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1908874436] [2022-11-03 04:11:19,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:11:19,463 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:11:19,463 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:11:19,464 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:11:19,471 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-11-03 04:11:21,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:11:21,209 INFO L263 TraceCheckSpWp]: Trace formula consists of 1538 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 04:11:21,212 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:11:21,505 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-03 04:11:21,505 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:11:21,505 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:11:21,505 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1908874436] [2022-11-03 04:11:21,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1908874436] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:11:21,506 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:11:21,506 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 04:11:21,506 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1918077285] [2022-11-03 04:11:21,506 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:11:21,507 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 04:11:21,508 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:11:21,508 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 04:11:21,508 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:11:21,508 INFO L87 Difference]: Start difference. First operand 2066 states and 3053 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-03 04:11:22,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:11:22,096 INFO L93 Difference]: Finished difference Result 6171 states and 9137 transitions. [2022-11-03 04:11:22,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 04:11:22,096 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 46 [2022-11-03 04:11:22,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:11:22,119 INFO L225 Difference]: With dead ends: 6171 [2022-11-03 04:11:22,119 INFO L226 Difference]: Without dead ends: 4107 [2022-11-03 04:11:22,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-03 04:11:22,128 INFO L413 NwaCegarLoop]: 1941 mSDtfsCounter, 1533 mSDsluCounter, 5417 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1533 SdHoareTripleChecker+Valid, 7358 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 04:11:22,129 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1533 Valid, 7358 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 04:11:22,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4107 states. [2022-11-03 04:11:22,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4107 to 4107. [2022-11-03 04:11:22,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4107 states, 3233 states have (on average 1.4327250231982678) internal successors, (4632), 3253 states have internal predecessors, (4632), 721 states have call successors, (721), 153 states have call predecessors, (721), 152 states have return successors, (726), 716 states have call predecessors, (726), 720 states have call successors, (726) [2022-11-03 04:11:22,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4107 states to 4107 states and 6079 transitions. [2022-11-03 04:11:22,449 INFO L78 Accepts]: Start accepts. Automaton has 4107 states and 6079 transitions. Word has length 46 [2022-11-03 04:11:22,450 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:11:22,450 INFO L495 AbstractCegarLoop]: Abstraction has 4107 states and 6079 transitions. [2022-11-03 04:11:22,451 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-03 04:11:22,455 INFO L276 IsEmpty]: Start isEmpty. Operand 4107 states and 6079 transitions. [2022-11-03 04:11:22,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-11-03 04:11:22,471 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:11:22,471 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:11:22,523 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-11-03 04:11:22,694 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:11:22,695 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:11:22,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:11:22,695 INFO L85 PathProgramCache]: Analyzing trace with hash -642422905, now seen corresponding path program 1 times [2022-11-03 04:11:22,698 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:11:22,698 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1568254136] [2022-11-03 04:11:22,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:11:22,707 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:11:22,707 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:11:22,708 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:11:22,754 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-11-03 04:11:24,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:11:24,482 INFO L263 TraceCheckSpWp]: Trace formula consists of 1912 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-03 04:11:24,487 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:11:24,554 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-03 04:11:24,554 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:11:24,554 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:11:24,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1568254136] [2022-11-03 04:11:24,555 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1568254136] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:11:24,555 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:11:24,555 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 04:11:24,555 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [824435838] [2022-11-03 04:11:24,555 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:11:24,556 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 04:11:24,556 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:11:24,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 04:11:24,557 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:11:24,557 INFO L87 Difference]: Start difference. First operand 4107 states and 6079 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-03 04:11:27,656 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:11:29,245 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.54s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:11:30,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:11:30,851 INFO L93 Difference]: Finished difference Result 6853 states and 10078 transitions. [2022-11-03 04:11:30,852 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 04:11:30,852 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 103 [2022-11-03 04:11:30,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:11:30,866 INFO L225 Difference]: With dead ends: 6853 [2022-11-03 04:11:30,866 INFO L226 Difference]: Without dead ends: 2758 [2022-11-03 04:11:30,877 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 101 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:11:30,882 INFO L413 NwaCegarLoop]: 1595 mSDtfsCounter, 338 mSDsluCounter, 1484 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 2 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 338 SdHoareTripleChecker+Valid, 3079 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-11-03 04:11:30,883 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [338 Valid, 3079 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 53 Invalid, 1 Unknown, 0 Unchecked, 6.1s Time] [2022-11-03 04:11:30,888 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2758 states. [2022-11-03 04:11:31,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2758 to 2741. [2022-11-03 04:11:31,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2741 states, 2177 states have (on average 1.4244372990353698) internal successors, (3101), 2189 states have internal predecessors, (3101), 446 states have call successors, (446), 118 states have call predecessors, (446), 117 states have return successors, (448), 441 states have call predecessors, (448), 445 states have call successors, (448) [2022-11-03 04:11:31,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2741 states to 2741 states and 3995 transitions. [2022-11-03 04:11:31,019 INFO L78 Accepts]: Start accepts. Automaton has 2741 states and 3995 transitions. Word has length 103 [2022-11-03 04:11:31,022 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:11:31,022 INFO L495 AbstractCegarLoop]: Abstraction has 2741 states and 3995 transitions. [2022-11-03 04:11:31,022 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-03 04:11:31,023 INFO L276 IsEmpty]: Start isEmpty. Operand 2741 states and 3995 transitions. [2022-11-03 04:11:31,060 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2022-11-03 04:11:31,061 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:11:31,061 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:11:31,119 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-11-03 04:11:31,261 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:11:31,262 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:11:31,262 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:11:31,262 INFO L85 PathProgramCache]: Analyzing trace with hash 96929181, now seen corresponding path program 1 times [2022-11-03 04:11:31,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:11:31,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [121150626] [2022-11-03 04:11:31,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:11:31,265 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:11:31,265 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:11:31,267 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:11:31,313 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-11-03 04:11:33,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:11:33,269 INFO L263 TraceCheckSpWp]: Trace formula consists of 2024 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-03 04:11:33,275 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:11:33,571 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2022-11-03 04:11:33,571 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:11:33,571 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:11:33,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [121150626] [2022-11-03 04:11:33,572 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [121150626] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:11:33,572 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:11:33,572 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 04:11:33,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1254846303] [2022-11-03 04:11:33,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:11:33,573 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 04:11:33,573 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:11:33,573 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 04:11:33,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:11:33,573 INFO L87 Difference]: Start difference. First operand 2741 states and 3995 transitions. Second operand has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2022-11-03 04:11:33,827 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:11:33,828 INFO L93 Difference]: Finished difference Result 5276 states and 7721 transitions. [2022-11-03 04:11:33,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 04:11:33,829 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) Word has length 144 [2022-11-03 04:11:33,830 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:11:33,843 INFO L225 Difference]: With dead ends: 5276 [2022-11-03 04:11:33,844 INFO L226 Difference]: Without dead ends: 2757 [2022-11-03 04:11:33,851 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:11:33,853 INFO L413 NwaCegarLoop]: 1552 mSDtfsCounter, 2 mSDsluCounter, 4642 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 6194 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 04:11:33,855 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 6194 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 04:11:33,859 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2757 states. [2022-11-03 04:11:33,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2757 to 2751. [2022-11-03 04:11:33,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2751 states, 2184 states have (on average 1.4230769230769231) internal successors, (3108), 2197 states have internal predecessors, (3108), 446 states have call successors, (446), 118 states have call predecessors, (446), 120 states have return successors, (459), 443 states have call predecessors, (459), 445 states have call successors, (459) [2022-11-03 04:11:33,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2751 states to 2751 states and 4013 transitions. [2022-11-03 04:11:33,975 INFO L78 Accepts]: Start accepts. Automaton has 2751 states and 4013 transitions. Word has length 144 [2022-11-03 04:11:33,977 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:11:33,977 INFO L495 AbstractCegarLoop]: Abstraction has 2751 states and 4013 transitions. [2022-11-03 04:11:33,978 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 4 states have internal predecessors, (91), 2 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2022-11-03 04:11:33,978 INFO L276 IsEmpty]: Start isEmpty. Operand 2751 states and 4013 transitions. [2022-11-03 04:11:33,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2022-11-03 04:11:33,984 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:11:33,985 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:11:34,046 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-11-03 04:11:34,198 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:11:34,199 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:11:34,199 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:11:34,199 INFO L85 PathProgramCache]: Analyzing trace with hash 36910958, now seen corresponding path program 1 times [2022-11-03 04:11:34,201 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:11:34,201 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [316935236] [2022-11-03 04:11:34,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:11:34,202 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:11:34,202 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:11:34,203 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:11:34,247 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-11-03 04:11:36,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:11:36,387 INFO L263 TraceCheckSpWp]: Trace formula consists of 2050 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-03 04:11:36,393 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:11:37,780 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 131 trivial. 0 not checked. [2022-11-03 04:11:37,780 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:11:37,780 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:11:37,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [316935236] [2022-11-03 04:11:37,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [316935236] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:11:37,781 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:11:37,781 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-03 04:11:37,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [394087872] [2022-11-03 04:11:37,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:11:37,782 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 04:11:37,782 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:11:37,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 04:11:37,783 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2022-11-03 04:11:37,783 INFO L87 Difference]: Start difference. First operand 2751 states and 4013 transitions. Second operand has 13 states, 13 states have (on average 7.384615384615385) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) [2022-11-03 04:11:42,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:11:42,305 INFO L93 Difference]: Finished difference Result 6653 states and 9907 transitions. [2022-11-03 04:11:42,308 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 04:11:42,308 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 7.384615384615385) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) Word has length 151 [2022-11-03 04:11:42,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:11:42,329 INFO L225 Difference]: With dead ends: 6653 [2022-11-03 04:11:42,329 INFO L226 Difference]: Without dead ends: 4124 [2022-11-03 04:11:42,337 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 154 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2022-11-03 04:11:42,338 INFO L413 NwaCegarLoop]: 2399 mSDtfsCounter, 815 mSDsluCounter, 25356 mSDsCounter, 0 mSdLazyCounter, 217 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 950 SdHoareTripleChecker+Valid, 27755 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 217 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2022-11-03 04:11:42,339 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [950 Valid, 27755 Invalid, 220 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3 Valid, 217 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2022-11-03 04:11:42,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4124 states. [2022-11-03 04:11:42,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4124 to 2763. [2022-11-03 04:11:42,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4204286365709073) internal successors, (3115), 2205 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2022-11-03 04:11:42,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4025 transitions. [2022-11-03 04:11:42,514 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4025 transitions. Word has length 151 [2022-11-03 04:11:42,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:11:42,515 INFO L495 AbstractCegarLoop]: Abstraction has 2763 states and 4025 transitions. [2022-11-03 04:11:42,515 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 7.384615384615385) internal successors, (96), 9 states have internal predecessors, (96), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (15), 5 states have call predecessors, (15), 1 states have call successors, (15) [2022-11-03 04:11:42,515 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4025 transitions. [2022-11-03 04:11:42,522 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2022-11-03 04:11:42,522 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:11:42,523 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:11:42,581 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-11-03 04:11:42,737 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:11:42,738 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:11:42,738 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:11:42,738 INFO L85 PathProgramCache]: Analyzing trace with hash 1511771000, now seen corresponding path program 1 times [2022-11-03 04:11:42,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:11:42,741 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1136570294] [2022-11-03 04:11:42,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:11:42,741 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:11:42,741 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:11:42,746 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:11:42,752 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-11-03 04:11:45,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:11:45,170 INFO L263 TraceCheckSpWp]: Trace formula consists of 2361 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-03 04:11:45,176 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:11:45,381 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 124 trivial. 0 not checked. [2022-11-03 04:11:45,381 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:11:45,382 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:11:45,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1136570294] [2022-11-03 04:11:45,382 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1136570294] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:11:45,382 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:11:45,382 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 04:11:45,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1887830664] [2022-11-03 04:11:45,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:11:45,389 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 04:11:45,389 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:11:45,389 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 04:11:45,389 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 04:11:45,390 INFO L87 Difference]: Start difference. First operand 2763 states and 4025 transitions. Second operand has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2022-11-03 04:11:48,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:11:48,899 INFO L93 Difference]: Finished difference Result 6577 states and 9760 transitions. [2022-11-03 04:11:48,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 04:11:48,900 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2022-11-03 04:11:48,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:11:48,920 INFO L225 Difference]: With dead ends: 6577 [2022-11-03 04:11:48,920 INFO L226 Difference]: Without dead ends: 4036 [2022-11-03 04:11:48,928 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 185 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-03 04:11:48,929 INFO L413 NwaCegarLoop]: 2259 mSDtfsCounter, 770 mSDsluCounter, 8116 mSDsCounter, 0 mSdLazyCounter, 333 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 897 SdHoareTripleChecker+Valid, 10375 SdHoareTripleChecker+Invalid, 333 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 333 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.3s IncrementalHoareTripleChecker+Time [2022-11-03 04:11:48,929 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [897 Valid, 10375 Invalid, 333 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 333 Invalid, 0 Unknown, 0 Unchecked, 3.3s Time] [2022-11-03 04:11:48,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4036 states. [2022-11-03 04:11:49,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4036 to 2763. [2022-11-03 04:11:49,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4195166438668492) internal successors, (3113), 2205 states have internal predecessors, (3113), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2022-11-03 04:11:49,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4023 transitions. [2022-11-03 04:11:49,159 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4023 transitions. Word has length 190 [2022-11-03 04:11:49,159 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:11:49,160 INFO L495 AbstractCegarLoop]: Abstraction has 2763 states and 4023 transitions. [2022-11-03 04:11:49,160 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 24.8) internal successors, (124), 5 states have internal predecessors, (124), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2022-11-03 04:11:49,161 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4023 transitions. [2022-11-03 04:11:49,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2022-11-03 04:11:49,168 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:11:49,168 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:11:49,232 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-11-03 04:11:49,390 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:11:49,391 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:11:49,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:11:49,391 INFO L85 PathProgramCache]: Analyzing trace with hash -1944162634, now seen corresponding path program 1 times [2022-11-03 04:11:49,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:11:49,393 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [838414725] [2022-11-03 04:11:49,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:11:49,394 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:11:49,394 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:11:49,395 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:11:49,442 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-11-03 04:11:51,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:11:51,908 INFO L263 TraceCheckSpWp]: Trace formula consists of 2361 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-03 04:11:51,924 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:11:52,151 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2022-11-03 04:11:52,151 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:11:52,151 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:11:52,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [838414725] [2022-11-03 04:11:52,152 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [838414725] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:11:52,152 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:11:52,152 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 04:11:52,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [59555055] [2022-11-03 04:11:52,152 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:11:52,153 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 04:11:52,153 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:11:52,153 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 04:11:52,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 04:11:52,153 INFO L87 Difference]: Start difference. First operand 2763 states and 4023 transitions. Second operand has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2022-11-03 04:11:55,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:11:55,581 INFO L93 Difference]: Finished difference Result 6579 states and 9758 transitions. [2022-11-03 04:11:55,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 04:11:55,583 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2022-11-03 04:11:55,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:11:55,601 INFO L225 Difference]: With dead ends: 6579 [2022-11-03 04:11:55,601 INFO L226 Difference]: Without dead ends: 4038 [2022-11-03 04:11:55,608 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 185 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-03 04:11:55,609 INFO L413 NwaCegarLoop]: 2275 mSDtfsCounter, 762 mSDsluCounter, 8173 mSDsCounter, 0 mSdLazyCounter, 334 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 888 SdHoareTripleChecker+Valid, 10448 SdHoareTripleChecker+Invalid, 334 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 334 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-03 04:11:55,609 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [888 Valid, 10448 Invalid, 334 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 334 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-03 04:11:55,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4038 states. [2022-11-03 04:11:55,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4038 to 2763. [2022-11-03 04:11:55,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4186046511627908) internal successors, (3111), 2205 states have internal predecessors, (3111), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2022-11-03 04:11:55,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4021 transitions. [2022-11-03 04:11:55,799 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4021 transitions. Word has length 190 [2022-11-03 04:11:55,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:11:55,800 INFO L495 AbstractCegarLoop]: Abstraction has 2763 states and 4021 transitions. [2022-11-03 04:11:55,800 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2022-11-03 04:11:55,800 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4021 transitions. [2022-11-03 04:11:55,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2022-11-03 04:11:55,811 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:11:55,811 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:11:55,877 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-11-03 04:11:56,026 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:11:56,027 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:11:56,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:11:56,027 INFO L85 PathProgramCache]: Analyzing trace with hash 1858178488, now seen corresponding path program 1 times [2022-11-03 04:11:56,029 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:11:56,030 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1873295734] [2022-11-03 04:11:56,030 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:11:56,030 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:11:56,030 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:11:56,031 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:11:56,032 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-11-03 04:11:58,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:11:58,616 INFO L263 TraceCheckSpWp]: Trace formula consists of 2361 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-03 04:11:58,622 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:11:58,842 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 54 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2022-11-03 04:11:58,842 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:11:58,842 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:11:58,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1873295734] [2022-11-03 04:11:58,842 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1873295734] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:11:58,843 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:11:58,843 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 04:11:58,843 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2055472295] [2022-11-03 04:11:58,843 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:11:58,844 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 04:11:58,844 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:11:58,844 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 04:11:58,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 04:11:58,845 INFO L87 Difference]: Start difference. First operand 2763 states and 4021 transitions. Second operand has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2022-11-03 04:12:01,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:12:01,987 INFO L93 Difference]: Finished difference Result 6687 states and 9929 transitions. [2022-11-03 04:12:01,988 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 04:12:01,988 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) Word has length 190 [2022-11-03 04:12:01,988 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:12:02,009 INFO L225 Difference]: With dead ends: 6687 [2022-11-03 04:12:02,009 INFO L226 Difference]: Without dead ends: 4146 [2022-11-03 04:12:02,017 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 185 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-03 04:12:02,018 INFO L413 NwaCegarLoop]: 2354 mSDtfsCounter, 818 mSDsluCounter, 8422 mSDsCounter, 0 mSdLazyCounter, 353 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 955 SdHoareTripleChecker+Valid, 10776 SdHoareTripleChecker+Invalid, 353 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 353 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-11-03 04:12:02,018 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [955 Valid, 10776 Invalid, 353 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 353 Invalid, 0 Unknown, 0 Unchecked, 2.9s Time] [2022-11-03 04:12:02,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4146 states. [2022-11-03 04:12:02,204 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4146 to 2763. [2022-11-03 04:12:02,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2763 states, 2193 states have (on average 1.4176926584587324) internal successors, (3109), 2205 states have internal predecessors, (3109), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2022-11-03 04:12:02,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2763 states to 2763 states and 4019 transitions. [2022-11-03 04:12:02,217 INFO L78 Accepts]: Start accepts. Automaton has 2763 states and 4019 transitions. Word has length 190 [2022-11-03 04:12:02,218 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:12:02,218 INFO L495 AbstractCegarLoop]: Abstraction has 2763 states and 4019 transitions. [2022-11-03 04:12:02,218 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 25.2) internal successors, (126), 5 states have internal predecessors, (126), 3 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 3 states have call successors, (19) [2022-11-03 04:12:02,218 INFO L276 IsEmpty]: Start isEmpty. Operand 2763 states and 4019 transitions. [2022-11-03 04:12:02,226 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 191 [2022-11-03 04:12:02,226 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:12:02,226 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:12:02,287 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-11-03 04:12:02,442 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:12:02,443 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:12:02,443 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:12:02,443 INFO L85 PathProgramCache]: Analyzing trace with hash -1757516554, now seen corresponding path program 1 times [2022-11-03 04:12:02,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:12:02,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [826002997] [2022-11-03 04:12:02,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:12:02,445 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:12:02,445 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:12:02,446 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:12:02,447 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-11-03 04:12:04,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:12:05,079 INFO L263 TraceCheckSpWp]: Trace formula consists of 2361 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-03 04:12:05,084 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:12:05,166 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 50 proven. 0 refuted. 0 times theorem prover too weak. 124 trivial. 0 not checked. [2022-11-03 04:12:05,167 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:12:05,167 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:12:05,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [826002997] [2022-11-03 04:12:05,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [826002997] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:12:05,167 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:12:05,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 04:12:05,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1455963563] [2022-11-03 04:12:05,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:12:05,168 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 04:12:05,168 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:12:05,168 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 04:12:05,168 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 04:12:05,169 INFO L87 Difference]: Start difference. First operand 2763 states and 4019 transitions. Second operand has 4 states, 4 states have (on average 31.0) internal successors, (124), 4 states have internal predecessors, (124), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2022-11-03 04:12:07,800 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:12:07,801 INFO L93 Difference]: Finished difference Result 7932 states and 11897 transitions. [2022-11-03 04:12:07,802 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 04:12:07,802 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 31.0) internal successors, (124), 4 states have internal predecessors, (124), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 190 [2022-11-03 04:12:07,802 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:12:07,823 INFO L225 Difference]: With dead ends: 7932 [2022-11-03 04:12:07,823 INFO L226 Difference]: Without dead ends: 5391 [2022-11-03 04:12:07,830 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 188 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:12:07,831 INFO L413 NwaCegarLoop]: 2511 mSDtfsCounter, 1773 mSDsluCounter, 4068 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 192 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1885 SdHoareTripleChecker+Valid, 6579 SdHoareTripleChecker+Invalid, 206 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 192 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-03 04:12:07,831 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1885 Valid, 6579 Invalid, 206 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [192 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-11-03 04:12:07,838 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5391 states. [2022-11-03 04:12:08,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5391 to 2767. [2022-11-03 04:12:08,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2767 states, 2197 states have (on average 1.4169321802457897) internal successors, (3113), 2209 states have internal predecessors, (3113), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2022-11-03 04:12:08,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2767 states to 2767 states and 4023 transitions. [2022-11-03 04:12:08,123 INFO L78 Accepts]: Start accepts. Automaton has 2767 states and 4023 transitions. Word has length 190 [2022-11-03 04:12:08,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:12:08,124 INFO L495 AbstractCegarLoop]: Abstraction has 2767 states and 4023 transitions. [2022-11-03 04:12:08,124 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 31.0) internal successors, (124), 4 states have internal predecessors, (124), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2022-11-03 04:12:08,124 INFO L276 IsEmpty]: Start isEmpty. Operand 2767 states and 4023 transitions. [2022-11-03 04:12:08,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2022-11-03 04:12:08,132 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:12:08,133 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:12:08,189 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-11-03 04:12:08,346 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:12:08,347 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:12:08,347 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:12:08,347 INFO L85 PathProgramCache]: Analyzing trace with hash 632306147, now seen corresponding path program 1 times [2022-11-03 04:12:08,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:12:08,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1172642028] [2022-11-03 04:12:08,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:12:08,350 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:12:08,350 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:12:08,352 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:12:08,355 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-11-03 04:12:10,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:12:11,135 INFO L263 TraceCheckSpWp]: Trace formula consists of 2464 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-03 04:12:11,140 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:12:11,178 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 59 proven. 0 refuted. 0 times theorem prover too weak. 127 trivial. 0 not checked. [2022-11-03 04:12:11,179 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:12:11,179 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:12:11,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1172642028] [2022-11-03 04:12:11,179 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1172642028] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:12:11,179 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:12:11,179 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 04:12:11,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [550288540] [2022-11-03 04:12:11,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:12:11,180 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 04:12:11,180 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:12:11,181 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 04:12:11,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:12:11,181 INFO L87 Difference]: Start difference. First operand 2767 states and 4023 transitions. Second operand has 3 states, 3 states have (on average 43.333333333333336) internal successors, (130), 3 states have internal predecessors, (130), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2022-11-03 04:12:13,440 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-03 04:12:13,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:12:13,567 INFO L93 Difference]: Finished difference Result 5314 states and 7742 transitions. [2022-11-03 04:12:13,586 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 04:12:13,586 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 43.333333333333336) internal successors, (130), 3 states have internal predecessors, (130), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) Word has length 200 [2022-11-03 04:12:13,586 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:12:13,595 INFO L225 Difference]: With dead ends: 5314 [2022-11-03 04:12:13,595 INFO L226 Difference]: Without dead ends: 2769 [2022-11-03 04:12:13,600 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 198 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 04:12:13,601 INFO L413 NwaCegarLoop]: 1550 mSDtfsCounter, 0 mSDsluCounter, 1545 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 3095 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-03 04:12:13,601 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 3095 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 1 Unknown, 0 Unchecked, 2.2s Time] [2022-11-03 04:12:13,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2769 states. [2022-11-03 04:12:13,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2769 to 2769. [2022-11-03 04:12:13,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.4165529786266484) internal successors, (3115), 2211 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2022-11-03 04:12:13,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4025 transitions. [2022-11-03 04:12:13,806 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4025 transitions. Word has length 200 [2022-11-03 04:12:13,807 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:12:13,807 INFO L495 AbstractCegarLoop]: Abstraction has 2769 states and 4025 transitions. [2022-11-03 04:12:13,807 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 43.333333333333336) internal successors, (130), 3 states have internal predecessors, (130), 2 states have call successors, (21), 2 states have call predecessors, (21), 2 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20) [2022-11-03 04:12:13,807 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4025 transitions. [2022-11-03 04:12:13,816 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2022-11-03 04:12:13,816 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:12:13,816 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:12:13,892 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-11-03 04:12:14,038 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:12:14,039 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:12:14,039 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:12:14,039 INFO L85 PathProgramCache]: Analyzing trace with hash 1848459873, now seen corresponding path program 1 times [2022-11-03 04:12:14,042 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:12:14,042 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [500955672] [2022-11-03 04:12:14,042 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:12:14,042 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:12:14,042 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:12:14,044 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:12:14,074 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-11-03 04:12:16,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:12:16,887 INFO L263 TraceCheckSpWp]: Trace formula consists of 2466 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-03 04:12:16,893 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:12:17,106 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 59 proven. 0 refuted. 0 times theorem prover too weak. 127 trivial. 0 not checked. [2022-11-03 04:12:17,106 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:12:17,107 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:12:17,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [500955672] [2022-11-03 04:12:17,107 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [500955672] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:12:17,107 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:12:17,107 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 04:12:17,107 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [837084773] [2022-11-03 04:12:17,107 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:12:17,108 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 04:12:17,108 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:12:17,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 04:12:17,108 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 04:12:17,109 INFO L87 Difference]: Start difference. First operand 2769 states and 4025 transitions. Second operand has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2022-11-03 04:12:21,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:12:21,680 INFO L93 Difference]: Finished difference Result 6947 states and 10330 transitions. [2022-11-03 04:12:21,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 04:12:21,682 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) Word has length 200 [2022-11-03 04:12:21,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:12:21,720 INFO L225 Difference]: With dead ends: 6947 [2022-11-03 04:12:21,722 INFO L226 Difference]: Without dead ends: 4400 [2022-11-03 04:12:21,727 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 195 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-03 04:12:21,728 INFO L413 NwaCegarLoop]: 2463 mSDtfsCounter, 794 mSDsluCounter, 8936 mSDsCounter, 0 mSdLazyCounter, 418 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 929 SdHoareTripleChecker+Valid, 11399 SdHoareTripleChecker+Invalid, 418 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 418 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2022-11-03 04:12:21,728 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [929 Valid, 11399 Invalid, 418 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 418 Invalid, 0 Unknown, 0 Unchecked, 4.2s Time] [2022-11-03 04:12:21,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4400 states. [2022-11-03 04:12:21,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4400 to 2769. [2022-11-03 04:12:21,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.415643474306503) internal successors, (3113), 2211 states have internal predecessors, (3113), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2022-11-03 04:12:21,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4023 transitions. [2022-11-03 04:12:21,935 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4023 transitions. Word has length 200 [2022-11-03 04:12:21,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:12:21,936 INFO L495 AbstractCegarLoop]: Abstraction has 2769 states and 4023 transitions. [2022-11-03 04:12:21,936 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 26.4) internal successors, (132), 5 states have internal predecessors, (132), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2022-11-03 04:12:21,936 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4023 transitions. [2022-11-03 04:12:21,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2022-11-03 04:12:21,945 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:12:21,945 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:12:22,021 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-11-03 04:12:22,165 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:12:22,165 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:12:22,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:12:22,166 INFO L85 PathProgramCache]: Analyzing trace with hash 2050283807, now seen corresponding path program 1 times [2022-11-03 04:12:22,168 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:12:22,168 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1174769758] [2022-11-03 04:12:22,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:12:22,168 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:12:22,169 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:12:22,170 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:12:22,212 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2022-11-03 04:12:25,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:12:25,462 INFO L263 TraceCheckSpWp]: Trace formula consists of 2466 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-03 04:12:25,469 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:12:25,685 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2022-11-03 04:12:25,685 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:12:25,685 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:12:25,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1174769758] [2022-11-03 04:12:25,685 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1174769758] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:12:25,686 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:12:25,686 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 04:12:25,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [296543254] [2022-11-03 04:12:25,686 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:12:25,686 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 04:12:25,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:12:25,687 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 04:12:25,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 04:12:25,687 INFO L87 Difference]: Start difference. First operand 2769 states and 4023 transitions. Second operand has 6 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2022-11-03 04:12:29,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:12:29,462 INFO L93 Difference]: Finished difference Result 6655 states and 9852 transitions. [2022-11-03 04:12:29,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 04:12:29,462 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) Word has length 200 [2022-11-03 04:12:29,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:12:29,474 INFO L225 Difference]: With dead ends: 6655 [2022-11-03 04:12:29,474 INFO L226 Difference]: Without dead ends: 4108 [2022-11-03 04:12:29,480 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 202 GetRequests, 195 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2022-11-03 04:12:29,480 INFO L413 NwaCegarLoop]: 2310 mSDtfsCounter, 757 mSDsluCounter, 8309 mSDsCounter, 0 mSdLazyCounter, 369 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 882 SdHoareTripleChecker+Valid, 10619 SdHoareTripleChecker+Invalid, 371 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 369 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.3s IncrementalHoareTripleChecker+Time [2022-11-03 04:12:29,481 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [882 Valid, 10619 Invalid, 371 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 369 Invalid, 0 Unknown, 0 Unchecked, 3.3s Time] [2022-11-03 04:12:29,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4108 states. [2022-11-03 04:12:29,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4108 to 2769. [2022-11-03 04:12:29,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2769 states, 2199 states have (on average 1.4147339699863575) internal successors, (3111), 2211 states have internal predecessors, (3111), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 447 states have call predecessors, (464), 445 states have call successors, (464) [2022-11-03 04:12:29,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2769 states to 2769 states and 4021 transitions. [2022-11-03 04:12:29,734 INFO L78 Accepts]: Start accepts. Automaton has 2769 states and 4021 transitions. Word has length 200 [2022-11-03 04:12:29,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:12:29,735 INFO L495 AbstractCegarLoop]: Abstraction has 2769 states and 4021 transitions. [2022-11-03 04:12:29,735 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 26.0) internal successors, (130), 5 states have internal predecessors, (130), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 3 states have call predecessors, (20), 3 states have call successors, (20) [2022-11-03 04:12:29,735 INFO L276 IsEmpty]: Start isEmpty. Operand 2769 states and 4021 transitions. [2022-11-03 04:12:29,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 201 [2022-11-03 04:12:29,742 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:12:29,742 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:12:29,819 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2022-11-03 04:12:29,959 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:12:29,960 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:12:29,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:12:29,960 INFO L85 PathProgramCache]: Analyzing trace with hash 21697697, now seen corresponding path program 1 times [2022-11-03 04:12:29,962 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:12:29,962 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [390495638] [2022-11-03 04:12:29,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:12:29,962 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:12:29,962 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:12:29,963 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:12:29,982 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2022-11-03 04:12:33,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:12:33,163 INFO L263 TraceCheckSpWp]: Trace formula consists of 2466 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-03 04:12:33,169 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:12:34,461 INFO L134 CoverageAnalysis]: Checked inductivity of 186 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 161 trivial. 0 not checked. [2022-11-03 04:12:34,462 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:12:34,462 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:12:34,462 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [390495638] [2022-11-03 04:12:34,462 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [390495638] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:12:34,462 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:12:34,462 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-11-03 04:12:34,463 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2147099492] [2022-11-03 04:12:34,463 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:12:34,463 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-03 04:12:34,463 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:12:34,464 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-03 04:12:34,464 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2022-11-03 04:12:34,464 INFO L87 Difference]: Start difference. First operand 2769 states and 4021 transitions. Second operand has 12 states, 12 states have (on average 10.583333333333334) internal successors, (127), 9 states have internal predecessors, (127), 3 states have call successors, (21), 2 states have call predecessors, (21), 4 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) [2022-11-03 04:12:37,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:12:37,579 INFO L93 Difference]: Finished difference Result 6897 states and 10231 transitions. [2022-11-03 04:12:37,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 04:12:37,581 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 10.583333333333334) internal successors, (127), 9 states have internal predecessors, (127), 3 states have call successors, (21), 2 states have call predecessors, (21), 4 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) Word has length 200 [2022-11-03 04:12:37,582 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:12:37,595 INFO L225 Difference]: With dead ends: 6897 [2022-11-03 04:12:37,595 INFO L226 Difference]: Without dead ends: 4350 [2022-11-03 04:12:37,601 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 190 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-11-03 04:12:37,602 INFO L413 NwaCegarLoop]: 2453 mSDtfsCounter, 768 mSDsluCounter, 23671 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 894 SdHoareTripleChecker+Valid, 26124 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-03 04:12:37,602 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [894 Valid, 26124 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-03 04:12:37,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4350 states. [2022-11-03 04:12:37,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4350 to 2773. [2022-11-03 04:12:37,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2773 states, 2203 states have (on average 1.4139809350885157) internal successors, (3115), 2213 states have internal predecessors, (3115), 446 states have call successors, (446), 118 states have call predecessors, (446), 123 states have return successors, (464), 449 states have call predecessors, (464), 445 states have call successors, (464) [2022-11-03 04:12:37,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2773 states to 2773 states and 4025 transitions. [2022-11-03 04:12:37,939 INFO L78 Accepts]: Start accepts. Automaton has 2773 states and 4025 transitions. Word has length 200 [2022-11-03 04:12:37,940 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:12:37,940 INFO L495 AbstractCegarLoop]: Abstraction has 2773 states and 4025 transitions. [2022-11-03 04:12:37,940 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 10.583333333333334) internal successors, (127), 9 states have internal predecessors, (127), 3 states have call successors, (21), 2 states have call predecessors, (21), 4 states have return successors, (20), 5 states have call predecessors, (20), 2 states have call successors, (20) [2022-11-03 04:12:37,940 INFO L276 IsEmpty]: Start isEmpty. Operand 2773 states and 4025 transitions. [2022-11-03 04:12:37,947 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 203 [2022-11-03 04:12:37,948 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:12:37,948 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:12:38,022 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2022-11-03 04:12:38,162 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:12:38,163 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:12:38,163 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:12:38,163 INFO L85 PathProgramCache]: Analyzing trace with hash -1602293502, now seen corresponding path program 1 times [2022-11-03 04:12:38,165 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:12:38,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [950943025] [2022-11-03 04:12:38,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:12:38,165 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:12:38,166 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:12:38,167 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:12:38,210 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2022-11-03 04:12:40,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 04:12:40,670 INFO L263 TraceCheckSpWp]: Trace formula consists of 2285 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-03 04:12:40,673 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 04:12:40,813 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2022-11-03 04:12:40,813 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 04:12:40,813 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-03 04:12:40,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [950943025] [2022-11-03 04:12:40,813 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [950943025] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 04:12:40,814 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 04:12:40,814 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 04:12:40,814 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377059484] [2022-11-03 04:12:40,814 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 04:12:40,814 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 04:12:40,815 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-03 04:12:40,815 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 04:12:40,815 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:12:40,815 INFO L87 Difference]: Start difference. First operand 2773 states and 4025 transitions. Second operand has 5 states, 5 states have (on average 26.8) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2022-11-03 04:12:42,370 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 04:12:42,371 INFO L93 Difference]: Finished difference Result 6607 states and 9776 transitions. [2022-11-03 04:12:42,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 04:12:42,372 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 26.8) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) Word has length 202 [2022-11-03 04:12:42,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 04:12:42,384 INFO L225 Difference]: With dead ends: 6607 [2022-11-03 04:12:42,385 INFO L226 Difference]: Without dead ends: 4056 [2022-11-03 04:12:42,391 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 201 GetRequests, 198 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 04:12:42,392 INFO L413 NwaCegarLoop]: 2304 mSDtfsCounter, 581 mSDsluCounter, 6240 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 682 SdHoareTripleChecker+Valid, 8544 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-03 04:12:42,392 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [682 Valid, 8544 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-03 04:12:42,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4056 states. [2022-11-03 04:12:42,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4056 to 2781. [2022-11-03 04:12:42,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2781 states, 2209 states have (on average 1.412856496152105) internal successors, (3121), 2219 states have internal predecessors, (3121), 446 states have call successors, (446), 118 states have call predecessors, (446), 125 states have return successors, (468), 451 states have call predecessors, (468), 445 states have call successors, (468) [2022-11-03 04:12:42,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2781 states to 2781 states and 4035 transitions. [2022-11-03 04:12:42,733 INFO L78 Accepts]: Start accepts. Automaton has 2781 states and 4035 transitions. Word has length 202 [2022-11-03 04:12:42,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 04:12:42,733 INFO L495 AbstractCegarLoop]: Abstraction has 2781 states and 4035 transitions. [2022-11-03 04:12:42,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 26.8) internal successors, (134), 4 states have internal predecessors, (134), 2 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (21), 3 states have call predecessors, (21), 2 states have call successors, (21) [2022-11-03 04:12:42,733 INFO L276 IsEmpty]: Start isEmpty. Operand 2781 states and 4035 transitions. [2022-11-03 04:12:42,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 227 [2022-11-03 04:12:42,743 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 04:12:42,744 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 04:12:42,813 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2022-11-03 04:12:42,966 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 [2022-11-03 04:12:42,967 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 04:12:42,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 04:12:42,967 INFO L85 PathProgramCache]: Analyzing trace with hash 1917943735, now seen corresponding path program 1 times [2022-11-03 04:12:42,969 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-03 04:12:42,969 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [859418884] [2022-11-03 04:12:42,969 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 04:12:42,969 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-11-03 04:12:42,969 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat [2022-11-03 04:12:42,970 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-03 04:12:42,973 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de468f2f-9ecd-4bc2-a2df-0ed131196cbb/bin/utaipan-7li7fVZpFI/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process