./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 06:39:03,134 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 06:39:03,137 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 06:39:03,160 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 06:39:03,161 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 06:39:03,162 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 06:39:03,164 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 06:39:03,166 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 06:39:03,168 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 06:39:03,170 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 06:39:03,171 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 06:39:03,173 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 06:39:03,173 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 06:39:03,174 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 06:39:03,176 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 06:39:03,177 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 06:39:03,179 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 06:39:03,180 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 06:39:03,182 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 06:39:03,185 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 06:39:03,187 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 06:39:03,197 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 06:39:03,199 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 06:39:03,208 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 06:39:03,213 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 06:39:03,213 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 06:39:03,214 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 06:39:03,215 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 06:39:03,218 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 06:39:03,220 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 06:39:03,220 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 06:39:03,221 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 06:39:03,227 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 06:39:03,228 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 06:39:03,229 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 06:39:03,230 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 06:39:03,231 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 06:39:03,234 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 06:39:03,235 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 06:39:03,236 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 06:39:03,238 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 06:39:03,239 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-64bit-Taipan_Default.epf [2022-11-19 06:39:03,314 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 06:39:03,328 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 06:39:03,329 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 06:39:03,329 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 06:39:03,330 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 06:39:03,330 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 06:39:03,331 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 06:39:03,331 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 06:39:03,331 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 06:39:03,331 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 06:39:03,333 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 06:39:03,333 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 06:39:03,334 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 06:39:03,334 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 06:39:03,334 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 06:39:03,334 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 06:39:03,335 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 06:39:03,335 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 06:39:03,336 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 06:39:03,336 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 06:39:03,336 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 06:39:03,337 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 06:39:03,337 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 06:39:03,337 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 06:39:03,337 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 06:39:03,338 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 06:39:03,338 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 06:39:03,338 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 06:39:03,338 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 06:39:03,339 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:39:03,339 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 06:39:03,340 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 06:39:03,340 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 06:39:03,340 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 06:39:03,340 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 06:39:03,341 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 06:39:03,341 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 06:39:03,341 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 06:39:03,341 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2022-11-19 06:39:03,648 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 06:39:03,678 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 06:39:03,685 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 06:39:03,687 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 06:39:03,688 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 06:39:03,690 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-19 06:39:03,779 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/data/58088dfdf/6990abc383204da0bb2db0789deca629/FLAG473fe56fd [2022-11-19 06:39:04,874 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 06:39:04,874 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-19 06:39:04,945 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/data/58088dfdf/6990abc383204da0bb2db0789deca629/FLAG473fe56fd [2022-11-19 06:39:05,176 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/data/58088dfdf/6990abc383204da0bb2db0789deca629 [2022-11-19 06:39:05,180 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 06:39:05,183 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 06:39:05,186 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 06:39:05,186 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 06:39:05,190 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 06:39:05,192 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:39:05" (1/1) ... [2022-11-19 06:39:05,194 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@aeec3b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:05, skipping insertion in model container [2022-11-19 06:39:05,194 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:39:05" (1/1) ... [2022-11-19 06:39:05,203 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 06:39:05,385 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 06:39:06,568 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-19 06:39:07,872 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:39:07,917 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 06:39:08,180 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-19 06:39:08,517 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:39:08,741 INFO L208 MainTranslator]: Completed translation [2022-11-19 06:39:08,742 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08 WrapperNode [2022-11-19 06:39:08,742 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 06:39:08,744 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 06:39:08,744 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 06:39:08,744 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 06:39:08,754 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:08,917 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:09,129 INFO L138 Inliner]: procedures = 247, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6407 [2022-11-19 06:39:09,130 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 06:39:09,131 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 06:39:09,131 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 06:39:09,132 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 06:39:09,143 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:09,143 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:09,210 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:09,210 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:09,386 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:09,411 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:09,452 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:09,488 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:09,526 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 06:39:09,532 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 06:39:09,532 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 06:39:09,533 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 06:39:09,534 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (1/1) ... [2022-11-19 06:39:09,545 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:39:09,558 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:39:09,575 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 06:39:09,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 06:39:09,636 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-11-19 06:39:09,636 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-11-19 06:39:09,637 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2022-11-19 06:39:09,637 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2022-11-19 06:39:09,637 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-19 06:39:09,637 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-19 06:39:09,638 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-19 06:39:09,638 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-19 06:39:09,638 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-19 06:39:09,638 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-19 06:39:09,639 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-19 06:39:09,639 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-19 06:39:09,639 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-19 06:39:09,639 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-19 06:39:09,640 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2022-11-19 06:39:09,640 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2022-11-19 06:39:09,640 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-19 06:39:09,640 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-19 06:39:09,641 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-11-19 06:39:09,641 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-11-19 06:39:09,641 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2022-11-19 06:39:09,641 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2022-11-19 06:39:09,641 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2022-11-19 06:39:09,642 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2022-11-19 06:39:09,642 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2022-11-19 06:39:09,642 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2022-11-19 06:39:09,642 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2022-11-19 06:39:09,643 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2022-11-19 06:39:09,643 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-19 06:39:09,643 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-19 06:39:09,643 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2022-11-19 06:39:09,644 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2022-11-19 06:39:09,644 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-19 06:39:09,644 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-19 06:39:09,644 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-19 06:39:09,645 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-19 06:39:09,645 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2022-11-19 06:39:09,645 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2022-11-19 06:39:09,645 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-11-19 06:39:09,646 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-11-19 06:39:09,646 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2022-11-19 06:39:09,646 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2022-11-19 06:39:09,646 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-19 06:39:09,647 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-19 06:39:09,647 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2022-11-19 06:39:09,647 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2022-11-19 06:39:09,647 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-11-19 06:39:09,648 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-11-19 06:39:09,648 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-11-19 06:39:09,648 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2022-11-19 06:39:09,648 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2022-11-19 06:39:09,649 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-19 06:39:09,649 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-19 06:39:09,649 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2022-11-19 06:39:09,649 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2022-11-19 06:39:09,650 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-19 06:39:09,650 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-19 06:39:09,650 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2022-11-19 06:39:09,650 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2022-11-19 06:39:09,651 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-11-19 06:39:09,651 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-11-19 06:39:09,651 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-19 06:39:09,651 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-19 06:39:09,652 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-19 06:39:09,652 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-19 06:39:09,652 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-19 06:39:09,652 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2022-11-19 06:39:09,653 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2022-11-19 06:39:09,653 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2022-11-19 06:39:09,653 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2022-11-19 06:39:09,653 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2022-11-19 06:39:09,654 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2022-11-19 06:39:09,654 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-19 06:39:09,654 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2022-11-19 06:39:09,654 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2022-11-19 06:39:09,655 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-19 06:39:09,655 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2022-11-19 06:39:09,655 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2022-11-19 06:39:09,655 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-19 06:39:09,655 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-19 06:39:09,656 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2022-11-19 06:39:09,656 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2022-11-19 06:39:09,656 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2022-11-19 06:39:09,656 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2022-11-19 06:39:09,657 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2022-11-19 06:39:09,657 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2022-11-19 06:39:09,657 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2022-11-19 06:39:09,657 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2022-11-19 06:39:09,658 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-19 06:39:09,658 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-19 06:39:09,658 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-19 06:39:09,658 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-19 06:39:09,659 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2022-11-19 06:39:09,659 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2022-11-19 06:39:09,659 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2022-11-19 06:39:09,659 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2022-11-19 06:39:09,660 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-19 06:39:09,660 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2022-11-19 06:39:09,660 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2022-11-19 06:39:09,660 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-11-19 06:39:09,660 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-11-19 06:39:09,661 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2022-11-19 06:39:09,661 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2022-11-19 06:39:09,661 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-19 06:39:09,661 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-19 06:39:09,662 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-19 06:39:09,662 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-19 06:39:09,662 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-19 06:39:09,663 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2022-11-19 06:39:09,663 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2022-11-19 06:39:09,663 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 06:39:09,663 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2022-11-19 06:39:09,664 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2022-11-19 06:39:09,664 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-19 06:39:09,664 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-19 06:39:09,664 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-19 06:39:09,665 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2022-11-19 06:39:09,665 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2022-11-19 06:39:09,665 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2022-11-19 06:39:09,665 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2022-11-19 06:39:09,666 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2022-11-19 06:39:09,666 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2022-11-19 06:39:09,666 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-11-19 06:39:09,666 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-11-19 06:39:09,667 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 06:39:09,667 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-19 06:39:09,667 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 06:39:09,667 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 06:39:09,667 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2022-11-19 06:39:09,668 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2022-11-19 06:39:09,668 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2022-11-19 06:39:09,668 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2022-11-19 06:39:10,830 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 06:39:10,836 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 06:39:12,143 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-19 06:39:21,363 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 06:39:23,667 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 06:39:23,668 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-19 06:39:23,685 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:39:23 BoogieIcfgContainer [2022-11-19 06:39:23,688 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 06:39:23,693 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 06:39:23,693 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 06:39:23,698 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 06:39:23,698 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 06:39:05" (1/3) ... [2022-11-19 06:39:23,699 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@51dbb553 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:39:23, skipping insertion in model container [2022-11-19 06:39:23,699 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:39:08" (2/3) ... [2022-11-19 06:39:23,700 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@51dbb553 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:39:23, skipping insertion in model container [2022-11-19 06:39:23,700 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:39:23" (3/3) ... [2022-11-19 06:39:23,708 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-19 06:39:23,736 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 06:39:23,736 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 06:39:23,855 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 06:39:23,869 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@34f0e9c5, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 06:39:23,869 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 06:39:23,881 INFO L276 IsEmpty]: Start isEmpty. Operand has 1158 states, 785 states have (on average 1.4) internal successors, (1099), 806 states have internal predecessors, (1099), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2022-11-19 06:39:23,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-19 06:39:23,900 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:39:23,901 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:39:23,902 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:39:23,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:39:23,912 INFO L85 PathProgramCache]: Analyzing trace with hash 338173783, now seen corresponding path program 1 times [2022-11-19 06:39:23,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:39:23,925 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [347819842] [2022-11-19 06:39:23,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:39:23,928 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:39:24,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:39:25,254 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-19 06:39:25,255 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:39:25,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [347819842] [2022-11-19 06:39:25,257 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [347819842] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:39:25,257 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:39:25,257 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 06:39:25,259 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1163525270] [2022-11-19 06:39:25,260 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:39:25,267 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 06:39:25,272 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:39:25,325 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 06:39:25,328 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:39:25,334 INFO L87 Difference]: Start difference. First operand has 1158 states, 785 states have (on average 1.4) internal successors, (1099), 806 states have internal predecessors, (1099), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 6 states, 6 states have (on average 2.8333333333333335) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-19 06:39:27,782 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:39:42,932 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:39:46,317 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:39:49,278 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:39:49,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:39:49,786 INFO L93 Difference]: Finished difference Result 4669 states and 6976 transitions. [2022-11-19 06:39:49,787 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-19 06:39:49,789 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 2.8333333333333335) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 30 [2022-11-19 06:39:49,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:39:49,834 INFO L225 Difference]: With dead ends: 4669 [2022-11-19 06:39:49,834 INFO L226 Difference]: Without dead ends: 3483 [2022-11-19 06:39:49,846 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=42, Unknown=0, NotChecked=0, Total=72 [2022-11-19 06:39:49,850 INFO L413 NwaCegarLoop]: 1849 mSDtfsCounter, 5237 mSDsluCounter, 3798 mSDsCounter, 0 mSdLazyCounter, 3286 mSolverCounterSat, 1366 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 22.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5429 SdHoareTripleChecker+Valid, 5647 SdHoareTripleChecker+Invalid, 4656 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1366 IncrementalHoareTripleChecker+Valid, 3286 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 23.6s IncrementalHoareTripleChecker+Time [2022-11-19 06:39:49,851 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5429 Valid, 5647 Invalid, 4656 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1366 Valid, 3286 Invalid, 4 Unknown, 0 Unchecked, 23.6s Time] [2022-11-19 06:39:49,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3483 states. [2022-11-19 06:39:50,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3483 to 3307. [2022-11-19 06:39:50,275 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3307 states, 2261 states have (on average 1.3883237505528527) internal successors, (3139), 2302 states have internal predecessors, (3139), 880 states have call successors, (880), 166 states have call predecessors, (880), 165 states have return successors, (879), 874 states have call predecessors, (879), 879 states have call successors, (879) [2022-11-19 06:39:50,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3307 states to 3307 states and 4898 transitions. [2022-11-19 06:39:50,312 INFO L78 Accepts]: Start accepts. Automaton has 3307 states and 4898 transitions. Word has length 30 [2022-11-19 06:39:50,314 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:39:50,315 INFO L495 AbstractCegarLoop]: Abstraction has 3307 states and 4898 transitions. [2022-11-19 06:39:50,315 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 2.8333333333333335) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-19 06:39:50,315 INFO L276 IsEmpty]: Start isEmpty. Operand 3307 states and 4898 transitions. [2022-11-19 06:39:50,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-19 06:39:50,330 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:39:50,331 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:39:50,331 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 06:39:50,334 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:39:50,335 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:39:50,336 INFO L85 PathProgramCache]: Analyzing trace with hash 456142652, now seen corresponding path program 1 times [2022-11-19 06:39:50,336 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:39:50,336 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [653931856] [2022-11-19 06:39:50,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:39:50,339 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:39:50,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:39:51,165 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-19 06:39:51,165 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:39:51,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [653931856] [2022-11-19 06:39:51,166 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [653931856] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:39:51,166 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:39:51,166 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 06:39:51,166 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1921641191] [2022-11-19 06:39:51,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:39:51,169 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:39:51,169 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:39:51,170 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:39:51,170 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:39:51,171 INFO L87 Difference]: Start difference. First operand 3307 states and 4898 transitions. Second operand has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 3 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-19 06:39:53,288 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:39:57,950 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:01,662 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:03,851 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:05,877 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:06,070 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:40:06,070 INFO L93 Difference]: Finished difference Result 6285 states and 9302 transitions. [2022-11-19 06:40:06,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 06:40:06,073 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 3 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 38 [2022-11-19 06:40:06,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:40:06,129 INFO L225 Difference]: With dead ends: 6285 [2022-11-19 06:40:06,129 INFO L226 Difference]: Without dead ends: 6280 [2022-11-19 06:40:06,135 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:40:06,136 INFO L413 NwaCegarLoop]: 1791 mSDtfsCounter, 1475 mSDsluCounter, 3271 mSDsCounter, 0 mSdLazyCounter, 615 mSolverCounterSat, 1 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1475 SdHoareTripleChecker+Valid, 5062 SdHoareTripleChecker+Invalid, 621 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 615 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.3s IncrementalHoareTripleChecker+Time [2022-11-19 06:40:06,137 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1475 Valid, 5062 Invalid, 621 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 615 Invalid, 5 Unknown, 0 Unchecked, 14.3s Time] [2022-11-19 06:40:06,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6280 states. [2022-11-19 06:40:06,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6280 to 6272. [2022-11-19 06:40:06,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6272 states, 4299 states have (on average 1.3933472900674575) internal successors, (5990), 4385 states have internal predecessors, (5990), 1645 states have call successors, (1645), 328 states have call predecessors, (1645), 327 states have return successors, (1653), 1630 states have call predecessors, (1653), 1644 states have call successors, (1653) [2022-11-19 06:40:06,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6272 states to 6272 states and 9288 transitions. [2022-11-19 06:40:06,650 INFO L78 Accepts]: Start accepts. Automaton has 6272 states and 9288 transitions. Word has length 38 [2022-11-19 06:40:06,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:40:06,659 INFO L495 AbstractCegarLoop]: Abstraction has 6272 states and 9288 transitions. [2022-11-19 06:40:06,659 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 3 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-19 06:40:06,660 INFO L276 IsEmpty]: Start isEmpty. Operand 6272 states and 9288 transitions. [2022-11-19 06:40:06,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-11-19 06:40:06,685 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:40:06,686 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:40:06,686 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 06:40:06,687 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:40:06,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:40:06,699 INFO L85 PathProgramCache]: Analyzing trace with hash -2074507439, now seen corresponding path program 1 times [2022-11-19 06:40:06,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:40:06,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1152867778] [2022-11-19 06:40:06,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:40:06,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:40:06,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:40:07,138 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-11-19 06:40:07,139 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:40:07,139 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1152867778] [2022-11-19 06:40:07,139 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1152867778] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:40:07,139 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:40:07,140 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:40:07,140 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1916366338] [2022-11-19 06:40:07,140 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:40:07,141 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:40:07,141 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:40:07,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:40:07,142 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:40:07,142 INFO L87 Difference]: Start difference. First operand 6272 states and 9288 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-19 06:40:09,239 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:12,237 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.02s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:13,563 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.27s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:16,040 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:18,144 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:21,099 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:21,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:40:21,257 INFO L93 Difference]: Finished difference Result 11603 states and 17140 transitions. [2022-11-19 06:40:21,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:40:21,260 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 101 [2022-11-19 06:40:21,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:40:21,297 INFO L225 Difference]: With dead ends: 11603 [2022-11-19 06:40:21,297 INFO L226 Difference]: Without dead ends: 5338 [2022-11-19 06:40:21,324 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:40:21,325 INFO L413 NwaCegarLoop]: 1540 mSDtfsCounter, 337 mSDsluCounter, 1437 mSDsCounter, 0 mSdLazyCounter, 457 mSolverCounterSat, 2 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 337 SdHoareTripleChecker+Valid, 2977 SdHoareTripleChecker+Invalid, 463 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 457 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.8s IncrementalHoareTripleChecker+Time [2022-11-19 06:40:21,326 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [337 Valid, 2977 Invalid, 463 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 457 Invalid, 4 Unknown, 0 Unchecked, 13.8s Time] [2022-11-19 06:40:21,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5338 states. [2022-11-19 06:40:21,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5338 to 5328. [2022-11-19 06:40:21,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5328 states, 3728 states have (on average 1.4101394849785407) internal successors, (5257), 3786 states have internal predecessors, (5257), 1293 states have call successors, (1293), 307 states have call predecessors, (1293), 306 states have return successors, (1298), 1282 states have call predecessors, (1298), 1292 states have call successors, (1298) [2022-11-19 06:40:21,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5328 states to 5328 states and 7848 transitions. [2022-11-19 06:40:21,680 INFO L78 Accepts]: Start accepts. Automaton has 5328 states and 7848 transitions. Word has length 101 [2022-11-19 06:40:21,682 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:40:21,682 INFO L495 AbstractCegarLoop]: Abstraction has 5328 states and 7848 transitions. [2022-11-19 06:40:21,684 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-19 06:40:21,684 INFO L276 IsEmpty]: Start isEmpty. Operand 5328 states and 7848 transitions. [2022-11-19 06:40:21,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-11-19 06:40:21,699 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:40:21,699 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:40:21,700 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 06:40:21,700 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:40:21,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:40:21,702 INFO L85 PathProgramCache]: Analyzing trace with hash -1278574067, now seen corresponding path program 1 times [2022-11-19 06:40:21,702 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:40:21,702 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105386029] [2022-11-19 06:40:21,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:40:21,703 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:40:21,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:40:22,168 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-19 06:40:22,169 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:40:22,169 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2105386029] [2022-11-19 06:40:22,169 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2105386029] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:40:22,170 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:40:22,170 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:40:22,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [334037543] [2022-11-19 06:40:22,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:40:22,172 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:40:22,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:40:22,173 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:40:22,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:40:22,174 INFO L87 Difference]: Start difference. First operand 5328 states and 7848 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-19 06:40:24,264 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:27,100 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.21s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:29,153 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:33,776 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:35,813 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:35,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:40:35,960 INFO L93 Difference]: Finished difference Result 13043 states and 19221 transitions. [2022-11-19 06:40:35,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:40:35,962 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 109 [2022-11-19 06:40:35,962 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:40:36,018 INFO L225 Difference]: With dead ends: 13043 [2022-11-19 06:40:36,019 INFO L226 Difference]: Without dead ends: 7948 [2022-11-19 06:40:36,042 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:40:36,043 INFO L413 NwaCegarLoop]: 1775 mSDtfsCounter, 1631 mSDsluCounter, 1466 mSDsCounter, 0 mSdLazyCounter, 406 mSolverCounterSat, 1 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1631 SdHoareTripleChecker+Valid, 3241 SdHoareTripleChecker+Invalid, 411 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 406 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.3s IncrementalHoareTripleChecker+Time [2022-11-19 06:40:36,044 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1631 Valid, 3241 Invalid, 411 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 406 Invalid, 4 Unknown, 0 Unchecked, 13.3s Time] [2022-11-19 06:40:36,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7948 states. [2022-11-19 06:40:36,456 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7948 to 7492. [2022-11-19 06:40:36,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7492 states, 5209 states have (on average 1.4046842004223459) internal successors, (7317), 5297 states have internal predecessors, (7317), 1865 states have call successors, (1865), 418 states have call predecessors, (1865), 417 states have return successors, (1870), 1848 states have call predecessors, (1870), 1864 states have call successors, (1870) [2022-11-19 06:40:36,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7492 states to 7492 states and 11052 transitions. [2022-11-19 06:40:36,511 INFO L78 Accepts]: Start accepts. Automaton has 7492 states and 11052 transitions. Word has length 109 [2022-11-19 06:40:36,511 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:40:36,512 INFO L495 AbstractCegarLoop]: Abstraction has 7492 states and 11052 transitions. [2022-11-19 06:40:36,512 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-19 06:40:36,512 INFO L276 IsEmpty]: Start isEmpty. Operand 7492 states and 11052 transitions. [2022-11-19 06:40:36,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2022-11-19 06:40:36,533 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:40:36,533 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:40:36,534 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 06:40:36,534 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:40:36,534 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:40:36,535 INFO L85 PathProgramCache]: Analyzing trace with hash -172482884, now seen corresponding path program 1 times [2022-11-19 06:40:36,535 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:40:36,535 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [899569052] [2022-11-19 06:40:36,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:40:36,536 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:40:36,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:40:37,543 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2022-11-19 06:40:37,546 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:40:37,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [899569052] [2022-11-19 06:40:37,546 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [899569052] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:40:37,546 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:40:37,547 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:40:37,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288975469] [2022-11-19 06:40:37,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:40:37,548 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:40:37,548 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:40:37,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:40:37,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:40:37,549 INFO L87 Difference]: Start difference. First operand 7492 states and 11052 transitions. Second operand has 5 states, 5 states have (on average 15.8) internal successors, (79), 4 states have internal predecessors, (79), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-19 06:40:39,676 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:43,944 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:45,135 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:47,050 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:49,121 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:51,354 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:53,379 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:40:53,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:40:53,489 INFO L93 Difference]: Finished difference Result 14789 states and 21859 transitions. [2022-11-19 06:40:53,491 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:40:53,491 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.8) internal successors, (79), 4 states have internal predecessors, (79), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 133 [2022-11-19 06:40:53,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:40:53,532 INFO L225 Difference]: With dead ends: 14789 [2022-11-19 06:40:53,532 INFO L226 Difference]: Without dead ends: 7530 [2022-11-19 06:40:53,558 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:40:53,559 INFO L413 NwaCegarLoop]: 1484 mSDtfsCounter, 2 mSDsluCounter, 4439 mSDsCounter, 0 mSdLazyCounter, 831 mSolverCounterSat, 1 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 5923 SdHoareTripleChecker+Invalid, 837 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 831 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.6s IncrementalHoareTripleChecker+Time [2022-11-19 06:40:53,559 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 5923 Invalid, 837 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 831 Invalid, 5 Unknown, 0 Unchecked, 15.6s Time] [2022-11-19 06:40:53,569 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7530 states. [2022-11-19 06:40:53,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7530 to 7520. [2022-11-19 06:40:53,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7520 states, 5229 states have (on average 1.4031363549435838) internal successors, (7337), 5319 states have internal predecessors, (7337), 1865 states have call successors, (1865), 418 states have call predecessors, (1865), 425 states have return successors, (1886), 1854 states have call predecessors, (1886), 1864 states have call successors, (1886) [2022-11-19 06:40:54,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7520 states to 7520 states and 11088 transitions. [2022-11-19 06:40:54,011 INFO L78 Accepts]: Start accepts. Automaton has 7520 states and 11088 transitions. Word has length 133 [2022-11-19 06:40:54,011 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:40:54,011 INFO L495 AbstractCegarLoop]: Abstraction has 7520 states and 11088 transitions. [2022-11-19 06:40:54,012 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.8) internal successors, (79), 4 states have internal predecessors, (79), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-19 06:40:54,012 INFO L276 IsEmpty]: Start isEmpty. Operand 7520 states and 11088 transitions. [2022-11-19 06:40:54,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2022-11-19 06:40:54,031 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:40:54,031 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:40:54,031 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 06:40:54,032 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:40:54,032 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:40:54,032 INFO L85 PathProgramCache]: Analyzing trace with hash 896159805, now seen corresponding path program 1 times [2022-11-19 06:40:54,033 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:40:54,033 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2137556978] [2022-11-19 06:40:54,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:40:54,033 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:40:54,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:40:55,023 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2022-11-19 06:40:55,024 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:40:55,024 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2137556978] [2022-11-19 06:40:55,024 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2137556978] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:40:55,024 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:40:55,025 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:40:55,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [124386672] [2022-11-19 06:40:55,025 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:40:55,026 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:40:55,027 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:40:55,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:40:55,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:40:55,028 INFO L87 Difference]: Start difference. First operand 7520 states and 11088 transitions. Second operand has 5 states, 5 states have (on average 16.0) internal successors, (80), 4 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-19 06:40:57,144 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:01,770 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:03,057 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.22s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:04,520 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.46s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:07,083 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:08,721 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.47s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:10,424 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.70s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:11,768 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.34s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:14,789 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:14,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:14,965 INFO L93 Difference]: Finished difference Result 15137 states and 22451 transitions. [2022-11-19 06:41:14,967 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:41:14,967 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 4 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 137 [2022-11-19 06:41:14,968 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:15,010 INFO L225 Difference]: With dead ends: 15137 [2022-11-19 06:41:15,011 INFO L226 Difference]: Without dead ends: 7630 [2022-11-19 06:41:15,046 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:41:15,047 INFO L413 NwaCegarLoop]: 1485 mSDtfsCounter, 6 mSDsluCounter, 4436 mSDsCounter, 0 mSdLazyCounter, 840 mSolverCounterSat, 1 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 5921 SdHoareTripleChecker+Invalid, 845 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 840 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 19.6s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:15,048 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 5921 Invalid, 845 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 840 Invalid, 4 Unknown, 0 Unchecked, 19.6s Time] [2022-11-19 06:41:15,061 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7630 states. [2022-11-19 06:41:15,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7630 to 7564. [2022-11-19 06:41:15,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7564 states, 5262 states have (on average 1.4006081337894336) internal successors, (7370), 5352 states have internal predecessors, (7370), 1865 states have call successors, (1865), 418 states have call predecessors, (1865), 436 states have return successors, (1979), 1865 states have call predecessors, (1979), 1864 states have call successors, (1979) [2022-11-19 06:41:15,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7564 states to 7564 states and 11214 transitions. [2022-11-19 06:41:15,737 INFO L78 Accepts]: Start accepts. Automaton has 7564 states and 11214 transitions. Word has length 137 [2022-11-19 06:41:15,738 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:15,738 INFO L495 AbstractCegarLoop]: Abstraction has 7564 states and 11214 transitions. [2022-11-19 06:41:15,738 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 4 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-19 06:41:15,739 INFO L276 IsEmpty]: Start isEmpty. Operand 7564 states and 11214 transitions. [2022-11-19 06:41:15,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-11-19 06:41:15,759 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:15,759 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:15,759 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 06:41:15,760 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:15,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:15,760 INFO L85 PathProgramCache]: Analyzing trace with hash 1573515776, now seen corresponding path program 1 times [2022-11-19 06:41:15,761 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:15,761 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1345296836] [2022-11-19 06:41:15,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:15,761 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:16,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:17,490 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2022-11-19 06:41:17,491 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:17,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1345296836] [2022-11-19 06:41:17,491 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1345296836] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:17,491 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:41:17,492 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 06:41:17,492 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1648493540] [2022-11-19 06:41:17,492 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:17,493 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:41:17,493 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:17,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:41:17,494 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:41:17,494 INFO L87 Difference]: Start difference. First operand 7564 states and 11214 transitions. Second operand has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-19 06:41:19,631 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:25,179 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.20s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:28,214 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:30,326 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:32,344 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:32,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:41:32,573 INFO L93 Difference]: Finished difference Result 14903 states and 22099 transitions. [2022-11-19 06:41:32,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:41:32,573 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 139 [2022-11-19 06:41:32,573 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:41:32,604 INFO L225 Difference]: With dead ends: 14903 [2022-11-19 06:41:32,604 INFO L226 Difference]: Without dead ends: 7574 [2022-11-19 06:41:32,630 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:41:32,631 INFO L413 NwaCegarLoop]: 1485 mSDtfsCounter, 11 mSDsluCounter, 2966 mSDsCounter, 0 mSdLazyCounter, 617 mSolverCounterSat, 2 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 4451 SdHoareTripleChecker+Invalid, 623 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 617 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.7s IncrementalHoareTripleChecker+Time [2022-11-19 06:41:32,631 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 4451 Invalid, 623 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 617 Invalid, 4 Unknown, 0 Unchecked, 14.7s Time] [2022-11-19 06:41:32,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7574 states. [2022-11-19 06:41:32,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7574 to 7566. [2022-11-19 06:41:32,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7566 states, 5264 states have (on average 1.4002659574468086) internal successors, (7371), 5354 states have internal predecessors, (7371), 1865 states have call successors, (1865), 418 states have call predecessors, (1865), 436 states have return successors, (1979), 1865 states have call predecessors, (1979), 1864 states have call successors, (1979) [2022-11-19 06:41:33,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7566 states to 7566 states and 11215 transitions. [2022-11-19 06:41:33,028 INFO L78 Accepts]: Start accepts. Automaton has 7566 states and 11215 transitions. Word has length 139 [2022-11-19 06:41:33,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:41:33,030 INFO L495 AbstractCegarLoop]: Abstraction has 7566 states and 11215 transitions. [2022-11-19 06:41:33,031 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-19 06:41:33,031 INFO L276 IsEmpty]: Start isEmpty. Operand 7566 states and 11215 transitions. [2022-11-19 06:41:33,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2022-11-19 06:41:33,043 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:41:33,043 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:41:33,044 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-19 06:41:33,044 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:41:33,044 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:41:33,044 INFO L85 PathProgramCache]: Analyzing trace with hash -1685663251, now seen corresponding path program 1 times [2022-11-19 06:41:33,045 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:41:33,045 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [226856164] [2022-11-19 06:41:33,045 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:41:33,045 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:41:34,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:41:37,110 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2022-11-19 06:41:37,110 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:41:37,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [226856164] [2022-11-19 06:41:37,110 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [226856164] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:41:37,111 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:41:37,111 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-19 06:41:37,111 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1165131973] [2022-11-19 06:41:37,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:41:37,111 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-19 06:41:37,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:41:37,112 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-19 06:41:37,112 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2022-11-19 06:41:37,112 INFO L87 Difference]: Start difference. First operand 7566 states and 11215 transitions. Second operand has 13 states, 10 states have (on average 8.4) internal successors, (84), 9 states have internal predecessors, (84), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2022-11-19 06:41:39,452 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:50,046 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:41:59,685 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:01,275 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.17s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:03,287 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:05,297 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:07,302 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:09,308 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:11,316 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:12,367 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:14,376 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:16,381 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:18,390 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:21,288 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:21,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:42:21,835 INFO L93 Difference]: Finished difference Result 18683 states and 28345 transitions. [2022-11-19 06:42:21,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-19 06:42:21,836 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 8.4) internal successors, (84), 9 states have internal predecessors, (84), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) Word has length 143 [2022-11-19 06:42:21,837 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:42:21,890 INFO L225 Difference]: With dead ends: 18683 [2022-11-19 06:42:21,890 INFO L226 Difference]: Without dead ends: 11354 [2022-11-19 06:42:21,918 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2022-11-19 06:42:21,918 INFO L413 NwaCegarLoop]: 2272 mSDtfsCounter, 601 mSDsluCounter, 24248 mSDsCounter, 0 mSdLazyCounter, 3592 mSolverCounterSat, 1 mSolverCounterUnsat, 12 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 43.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 761 SdHoareTripleChecker+Valid, 26520 SdHoareTripleChecker+Invalid, 3605 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3592 IncrementalHoareTripleChecker+Invalid, 12 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 43.9s IncrementalHoareTripleChecker+Time [2022-11-19 06:42:21,919 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [761 Valid, 26520 Invalid, 3605 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1 Valid, 3592 Invalid, 12 Unknown, 0 Unchecked, 43.9s Time] [2022-11-19 06:42:21,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11354 states. [2022-11-19 06:42:22,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11354 to 7598. [2022-11-19 06:42:22,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7598 states, 5286 states have (on average 1.3974650018917896) internal successors, (7387), 5374 states have internal predecessors, (7387), 1865 states have call successors, (1865), 418 states have call predecessors, (1865), 446 states have return successors, (2007), 1877 states have call predecessors, (2007), 1864 states have call successors, (2007) [2022-11-19 06:42:22,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7598 states to 7598 states and 11259 transitions. [2022-11-19 06:42:22,754 INFO L78 Accepts]: Start accepts. Automaton has 7598 states and 11259 transitions. Word has length 143 [2022-11-19 06:42:22,755 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:42:22,755 INFO L495 AbstractCegarLoop]: Abstraction has 7598 states and 11259 transitions. [2022-11-19 06:42:22,755 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 8.4) internal successors, (84), 9 states have internal predecessors, (84), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2022-11-19 06:42:22,755 INFO L276 IsEmpty]: Start isEmpty. Operand 7598 states and 11259 transitions. [2022-11-19 06:42:22,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-11-19 06:42:22,770 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:42:22,770 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:42:22,770 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-19 06:42:22,771 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:42:22,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:42:22,771 INFO L85 PathProgramCache]: Analyzing trace with hash -780787798, now seen corresponding path program 1 times [2022-11-19 06:42:22,771 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:42:22,772 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [86459562] [2022-11-19 06:42:22,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:42:22,772 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:42:23,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:42:24,164 INFO L134 CoverageAnalysis]: Checked inductivity of 138 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2022-11-19 06:42:24,164 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:42:24,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [86459562] [2022-11-19 06:42:24,164 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [86459562] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:42:24,164 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:42:24,165 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 06:42:24,165 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1354149990] [2022-11-19 06:42:24,165 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:42:24,166 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:42:24,166 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:42:24,167 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:42:24,167 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:42:24,167 INFO L87 Difference]: Start difference. First operand 7598 states and 11259 transitions. Second operand has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-19 06:42:26,293 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:32,443 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:34,449 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:36,143 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.54s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:42,211 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:46,074 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.70s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:47,251 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.18s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:48,948 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.70s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:51,013 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:53,070 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:54,195 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.13s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:56,309 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:42:56,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:42:56,475 INFO L93 Difference]: Finished difference Result 22821 states and 35049 transitions. [2022-11-19 06:42:56,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 06:42:56,477 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 150 [2022-11-19 06:42:56,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:42:56,548 INFO L225 Difference]: With dead ends: 22821 [2022-11-19 06:42:56,548 INFO L226 Difference]: Without dead ends: 15460 [2022-11-19 06:42:56,572 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:42:56,573 INFO L413 NwaCegarLoop]: 3172 mSDtfsCounter, 1292 mSDsluCounter, 4087 mSDsCounter, 0 mSdLazyCounter, 1064 mSolverCounterSat, 3 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 30.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1652 SdHoareTripleChecker+Valid, 7259 SdHoareTripleChecker+Invalid, 1074 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 1064 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 31.2s IncrementalHoareTripleChecker+Time [2022-11-19 06:42:56,573 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1652 Valid, 7259 Invalid, 1074 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 1064 Invalid, 7 Unknown, 0 Unchecked, 31.2s Time] [2022-11-19 06:42:56,588 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15460 states. [2022-11-19 06:42:57,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15460 to 7610. [2022-11-19 06:42:57,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7610 states, 5298 states have (on average 1.3965647414118536) internal successors, (7399), 5386 states have internal predecessors, (7399), 1865 states have call successors, (1865), 418 states have call predecessors, (1865), 446 states have return successors, (2007), 1877 states have call predecessors, (2007), 1864 states have call successors, (2007) [2022-11-19 06:42:57,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7610 states to 7610 states and 11271 transitions. [2022-11-19 06:42:57,505 INFO L78 Accepts]: Start accepts. Automaton has 7610 states and 11271 transitions. Word has length 150 [2022-11-19 06:42:57,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:42:57,506 INFO L495 AbstractCegarLoop]: Abstraction has 7610 states and 11271 transitions. [2022-11-19 06:42:57,506 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-19 06:42:57,507 INFO L276 IsEmpty]: Start isEmpty. Operand 7610 states and 11271 transitions. [2022-11-19 06:42:57,524 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 150 [2022-11-19 06:42:57,524 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:42:57,525 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:42:57,525 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-19 06:42:57,525 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:42:57,525 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:42:57,526 INFO L85 PathProgramCache]: Analyzing trace with hash -132581031, now seen corresponding path program 1 times [2022-11-19 06:42:57,526 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:42:57,526 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1936866281] [2022-11-19 06:42:57,526 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:42:57,526 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:42:57,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:42:58,047 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 122 trivial. 0 not checked. [2022-11-19 06:42:58,047 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:42:58,047 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1936866281] [2022-11-19 06:42:58,047 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1936866281] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:42:58,048 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:42:58,048 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:42:58,048 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1955688465] [2022-11-19 06:42:58,048 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:42:58,049 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:42:58,049 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:42:58,049 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:42:58,049 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:42:58,049 INFO L87 Difference]: Start difference. First operand 7610 states and 11271 transitions. Second operand has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-19 06:43:00,136 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:02,902 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.21s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:06,759 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:08,699 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.93s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:11,757 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:14,595 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:16,733 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:16,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:43:16,811 INFO L93 Difference]: Finished difference Result 19106 states and 28946 transitions. [2022-11-19 06:43:16,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:43:16,814 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 149 [2022-11-19 06:43:16,814 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:43:16,865 INFO L225 Difference]: With dead ends: 19106 [2022-11-19 06:43:16,866 INFO L226 Difference]: Without dead ends: 11733 [2022-11-19 06:43:16,891 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:43:16,892 INFO L413 NwaCegarLoop]: 2368 mSDtfsCounter, 670 mSDsluCounter, 1654 mSDsCounter, 0 mSdLazyCounter, 511 mSolverCounterSat, 0 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 17.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 860 SdHoareTripleChecker+Valid, 4022 SdHoareTripleChecker+Invalid, 516 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 511 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.9s IncrementalHoareTripleChecker+Time [2022-11-19 06:43:16,893 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [860 Valid, 4022 Invalid, 516 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 511 Invalid, 5 Unknown, 0 Unchecked, 17.9s Time] [2022-11-19 06:43:16,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11733 states. [2022-11-19 06:43:17,838 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11733 to 7616. [2022-11-19 06:43:17,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7616 states, 5304 states have (on average 1.3961161387631975) internal successors, (7405), 5392 states have internal predecessors, (7405), 1865 states have call successors, (1865), 418 states have call predecessors, (1865), 446 states have return successors, (2007), 1877 states have call predecessors, (2007), 1864 states have call successors, (2007) [2022-11-19 06:43:17,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7616 states to 7616 states and 11277 transitions. [2022-11-19 06:43:17,882 INFO L78 Accepts]: Start accepts. Automaton has 7616 states and 11277 transitions. Word has length 149 [2022-11-19 06:43:17,883 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:43:17,883 INFO L495 AbstractCegarLoop]: Abstraction has 7616 states and 11277 transitions. [2022-11-19 06:43:17,883 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-19 06:43:17,884 INFO L276 IsEmpty]: Start isEmpty. Operand 7616 states and 11277 transitions. [2022-11-19 06:43:17,897 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2022-11-19 06:43:17,897 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:43:17,897 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:43:17,897 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-19 06:43:17,898 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:43:17,898 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:43:17,899 INFO L85 PathProgramCache]: Analyzing trace with hash 1757859220, now seen corresponding path program 1 times [2022-11-19 06:43:17,899 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:43:17,899 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [508892539] [2022-11-19 06:43:17,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:43:17,899 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:43:18,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:43:18,478 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 122 trivial. 0 not checked. [2022-11-19 06:43:18,479 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:43:18,479 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [508892539] [2022-11-19 06:43:18,479 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [508892539] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:43:18,479 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:43:18,479 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:43:18,480 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1456767390] [2022-11-19 06:43:18,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:43:18,480 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:43:18,480 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:43:18,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:43:18,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:43:18,482 INFO L87 Difference]: Start difference. First operand 7616 states and 11277 transitions. Second operand has 5 states, 4 states have (on average 22.25) internal successors, (89), 4 states have internal predecessors, (89), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-19 06:43:20,582 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:24,713 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.65s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:31,926 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:34,133 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:36,139 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:37,661 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.52s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:41,155 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:43,144 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.46s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:44,615 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.47s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:46,523 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.91s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:48,470 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.69s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:50,495 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:43:51,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:43:51,407 INFO L93 Difference]: Finished difference Result 18764 states and 28382 transitions. [2022-11-19 06:43:51,409 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 06:43:51,409 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 22.25) internal successors, (89), 4 states have internal predecessors, (89), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 151 [2022-11-19 06:43:51,410 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:43:51,452 INFO L225 Difference]: With dead ends: 18764 [2022-11-19 06:43:51,452 INFO L226 Difference]: Without dead ends: 11385 [2022-11-19 06:43:51,475 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:43:51,476 INFO L413 NwaCegarLoop]: 2345 mSDtfsCounter, 667 mSDsluCounter, 6251 mSDsCounter, 0 mSdLazyCounter, 1146 mSolverCounterSat, 1 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 31.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 857 SdHoareTripleChecker+Valid, 8596 SdHoareTripleChecker+Invalid, 1153 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1146 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 32.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:43:51,477 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [857 Valid, 8596 Invalid, 1153 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1146 Invalid, 6 Unknown, 0 Unchecked, 32.0s Time] [2022-11-19 06:43:51,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11385 states. [2022-11-19 06:43:52,343 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11385 to 7616. [2022-11-19 06:43:52,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7616 states, 5304 states have (on average 1.3949849170437405) internal successors, (7399), 5392 states have internal predecessors, (7399), 1865 states have call successors, (1865), 418 states have call predecessors, (1865), 446 states have return successors, (2007), 1877 states have call predecessors, (2007), 1864 states have call successors, (2007) [2022-11-19 06:43:52,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7616 states to 7616 states and 11271 transitions. [2022-11-19 06:43:52,381 INFO L78 Accepts]: Start accepts. Automaton has 7616 states and 11271 transitions. Word has length 151 [2022-11-19 06:43:52,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:43:52,381 INFO L495 AbstractCegarLoop]: Abstraction has 7616 states and 11271 transitions. [2022-11-19 06:43:52,382 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 22.25) internal successors, (89), 4 states have internal predecessors, (89), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-19 06:43:52,382 INFO L276 IsEmpty]: Start isEmpty. Operand 7616 states and 11271 transitions. [2022-11-19 06:43:52,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 156 [2022-11-19 06:43:52,396 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:43:52,396 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:43:52,396 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-19 06:43:52,397 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:43:52,397 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:43:52,397 INFO L85 PathProgramCache]: Analyzing trace with hash -1373444091, now seen corresponding path program 1 times [2022-11-19 06:43:52,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:43:52,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [505082233] [2022-11-19 06:43:52,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:43:52,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:43:54,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-19 06:43:54,224 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-19 06:43:57,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-19 06:43:57,317 INFO L130 FreeRefinementEngine]: Strategy SIFA_TAIPAN found a feasible trace [2022-11-19 06:43:57,318 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-19 06:43:57,319 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 06:43:57,321 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-19 06:43:57,324 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:43:57,329 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 06:43:57,426 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 06:43:57,427 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 06:43:57,428 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 06:43:57,428 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 06:43:57,428 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 06:43:57,428 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 06:43:57,429 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 06:43:57,429 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-19 06:43:57,737 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 06:43:57 BoogieIcfgContainer [2022-11-19 06:43:57,737 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 06:43:57,738 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 06:43:57,738 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 06:43:57,738 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 06:43:57,739 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:39:23" (3/4) ... [2022-11-19 06:43:57,742 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-11-19 06:43:57,742 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 06:43:57,743 INFO L158 Benchmark]: Toolchain (without parser) took 292560.15ms. Allocated memory was 111.1MB in the beginning and 929.0MB in the end (delta: 817.9MB). Free memory was 75.9MB in the beginning and 363.0MB in the end (delta: -287.1MB). Peak memory consumption was 530.4MB. Max. memory is 16.1GB. [2022-11-19 06:43:57,744 INFO L158 Benchmark]: CDTParser took 0.37ms. Allocated memory is still 111.1MB. Free memory is still 81.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 06:43:57,744 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3557.46ms. Allocated memory was 111.1MB in the beginning and 268.4MB in the end (delta: 157.3MB). Free memory was 75.6MB in the beginning and 129.8MB in the end (delta: -54.2MB). Peak memory consumption was 105.0MB. Max. memory is 16.1GB. [2022-11-19 06:43:57,745 INFO L158 Benchmark]: Boogie Procedure Inliner took 386.05ms. Allocated memory is still 268.4MB. Free memory was 129.8MB in the beginning and 161.2MB in the end (delta: -31.4MB). Peak memory consumption was 9.5MB. Max. memory is 16.1GB. [2022-11-19 06:43:57,745 INFO L158 Benchmark]: Boogie Preprocessor took 400.17ms. Allocated memory is still 268.4MB. Free memory was 161.2MB in the beginning and 123.4MB in the end (delta: 37.7MB). Peak memory consumption was 37.7MB. Max. memory is 16.1GB. [2022-11-19 06:43:57,750 INFO L158 Benchmark]: RCFGBuilder took 14156.14ms. Allocated memory was 268.4MB in the beginning and 599.8MB in the end (delta: 331.4MB). Free memory was 123.4MB in the beginning and 342.1MB in the end (delta: -218.7MB). Peak memory consumption was 261.6MB. Max. memory is 16.1GB. [2022-11-19 06:43:57,751 INFO L158 Benchmark]: TraceAbstraction took 274044.66ms. Allocated memory was 599.8MB in the beginning and 929.0MB in the end (delta: 329.3MB). Free memory was 341.1MB in the beginning and 363.0MB in the end (delta: -21.9MB). Peak memory consumption was 511.8MB. Max. memory is 16.1GB. [2022-11-19 06:43:57,751 INFO L158 Benchmark]: Witness Printer took 4.61ms. Allocated memory is still 929.0MB. Free memory is still 363.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 06:43:57,760 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.37ms. Allocated memory is still 111.1MB. Free memory is still 81.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3557.46ms. Allocated memory was 111.1MB in the beginning and 268.4MB in the end (delta: 157.3MB). Free memory was 75.6MB in the beginning and 129.8MB in the end (delta: -54.2MB). Peak memory consumption was 105.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 386.05ms. Allocated memory is still 268.4MB. Free memory was 129.8MB in the beginning and 161.2MB in the end (delta: -31.4MB). Peak memory consumption was 9.5MB. Max. memory is 16.1GB. * Boogie Preprocessor took 400.17ms. Allocated memory is still 268.4MB. Free memory was 161.2MB in the beginning and 123.4MB in the end (delta: 37.7MB). Peak memory consumption was 37.7MB. Max. memory is 16.1GB. * RCFGBuilder took 14156.14ms. Allocated memory was 268.4MB in the beginning and 599.8MB in the end (delta: 331.4MB). Free memory was 123.4MB in the beginning and 342.1MB in the end (delta: -218.7MB). Peak memory consumption was 261.6MB. Max. memory is 16.1GB. * TraceAbstraction took 274044.66ms. Allocated memory was 599.8MB in the beginning and 929.0MB in the end (delta: 329.3MB). Free memory was 341.1MB in the beginning and 363.0MB in the end (delta: -21.9MB). Peak memory consumption was 511.8MB. Max. memory is 16.1GB. * Witness Printer took 4.61ms. Allocated memory is still 929.0MB. Free memory is still 363.0MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7474]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 10722, overapproximation of bitwiseAnd at line 9945. Possible FailurePath: [L10762] int ldv_retval_11 ; [L10779] int ldv_retval_12 ; [L10786] int ldv_retval_10 ; [L11484] Element set_impl[15] ; [L7509] int LDV_IN_INTERRUPT = 1; [L7511] int ldv_irq_line_1_3 ; [L7517] int ldv_irq_line_1_2 ; [L7694] static struct mwifiex_pcie_device const mwifiex_pcie8766 = {"mrvl/pcie8766_uapsta.bin", & mwifiex_reg_8766, 256U, 2048U}; [L7515] int ldv_irq_line_1_1 ; [L11485] int last_index = 0; [L7513] int ldv_irq_line_1_0 ; [L7514] int ref_cnt ; [L8018-L8034] static struct pci_driver mwifiex_pcie = {{0, 0}, "mwifiex_pcie", (struct pci_device_id const *)(& mwifiex_ids), & mwifiex_pcie_probe, & mwifiex_pcie_remove, 0, 0, 0, 0, & mwifiex_pcie_shutdown, 0, 0, {0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_pcie_pm_ops, 0}, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}; [L10755] int ldv_retval_20 ; [L7695] static struct mwifiex_pcie_device const mwifiex_pcie8897 = {"mrvl/pcie8897_uapsta.bin", & mwifiex_reg_8897, 256U, 4096U}; [L7510] int ldv_irq_1_1 = 0; [L7499] int ldv_irq_1_0 = 0; [L7497] int ldv_irq_1_3 = 0; [L7508] int ldv_irq_1_2 = 0; [L7779] static u8 user_rmmod ; [L10694-L10700] static struct mwifiex_if_ops pcie_ops = {& mwifiex_pcie_init, & mwifiex_pcie_cleanup, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_pcie_enable_host_int, 0, & mwifiex_process_int_status, & mwifiex_pcie_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, (void (*)(struct mwifiex_adapter * , u16 ))0, (void (*)(struct mwifiex_adapter * ))0, & mwifiex_pcie_cmdrsp_complete, & mwifiex_pcie_event_complete, 0, & mwifiex_pcie_init_fw_port, 0, 0, 0, & mwifiex_clean_pcie_ring_buf}; [L7781] static struct semaphore add_remove_card_sem ; [L7502] int ldv_state_variable_2 ; [L10773] int ldv_retval_19 ; [L7512] int ldv_state_variable_3 ; [L7501] int ldv_state_variable_0 ; [L10776] int ldv_retval_17 ; [L7516] int ldv_state_variable_1 ; [L10757] int ldv_retval_18 ; [L7504] struct sk_buff *pcie_ops_group1 ; [L10765] int ldv_retval_15 ; [L7507] struct mwifiex_adapter *pcie_ops_group0 ; [L10766] int ldv_retval_16 ; [L10784] int ldv_retval_13 ; [L10775] int ldv_retval_14 ; [L8014-L8017] static struct dev_pm_ops const mwifiex_pcie_pm_ops = {0, 0, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7518] int ldv_state_variable_4 ; [L11619] Set LDV_SKBS ; [L7505] struct device *mwifiex_pcie_pm_ops_group1 ; [L7690-L7693] static struct mwifiex_pcie_card_reg const mwifiex_reg_8897 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 49292U, 49244U, 49244U, 49292U, 3304U, 3308U, 3312U, 16U, 67043328U, 134152192U, 1023U, 2047U, 67108864U, 1024U, 128U, 1U, 2U, 4U, 8U, 65536U, 1U, 0U}; [L7500] void *ldv_irq_data_1_0 ; [L7506] void *ldv_irq_data_1_2 ; [L7498] void *ldv_irq_data_1_1 ; [L7503] void *ldv_irq_data_1_3 ; [L7519] struct pci_dev *mwifiex_pcie_group0 ; [L8010-L8012] static struct pci_device_id const mwifiex_ids[3U] = { {4523U, 11056U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8766)}, {4523U, 11064U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8897)}}; [L10760] int ldv_retval_0 ; [L10763] int ldv_retval_1 ; [L10758] int ldv_retval_2 ; [L10790] int ldv_retval_3 ; [L10788] int ldv_retval_4 ; [L7687-L7689] static struct mwifiex_pcie_card_reg const mwifiex_reg_8766 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 3288U, 3292U, 3296U, 3300U, 3304U, 3308U, 3312U, 0U, 63U, 0U, 63U, 0U, 128U, 128U, 128U, 0U, 0U, 0U, 0U, 0U, 0U, 1U}; [L10759] int ldv_retval_5 ; [L10781] int ldv_retval_6 ; [L10772] int ldv_retval_7 ; [L10771] int ldv_retval_8 ; [L10785] int ldv_retval_9 ; [L8013] struct pci_device_id const __mod_pci__mwifiex_ids_device_table ; [L10945] struct pci_device_id *ldvarg0 ; [L10946] void *tmp ; [L10947] struct mwifiex_tx_param *ldvarg1 ; [L10948] void *tmp___0 ; [L10949] u32 ldvarg4 ; [L10950] u32 tmp___1 ; [L10951] struct mwifiex_fw_image *ldvarg3 ; [L10952] void *tmp___2 ; [L10953] u8 ldvarg2 ; [L10954] u8 tmp___3 ; [L10955] int tmp___4 ; [L10956] int tmp___5 ; [L10957] int tmp___6 ; [L10958] int tmp___7 ; [L10959] int tmp___8 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L10961] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, size=32, tmp___0=1, user_rmmod=0] [L10961] RET, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L10961] tmp = ldv_zalloc(32UL) [L10962] ldvarg0 = (struct pci_device_id *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, user_rmmod=0] [L10963] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, size=4, tmp___0=1, user_rmmod=0] [L10963] RET, EXPR ldv_zalloc(4UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, user_rmmod=0] [L10963] tmp___0 = ldv_zalloc(4UL) [L10964] ldvarg1 = (struct mwifiex_tx_param *)tmp___0 [L10965] tmp___1 = __VERIFIER_nondet_u32() [L10966] ldvarg4 = tmp___1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, user_rmmod=0] [L10967] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, size=32, tmp___0=1, user_rmmod=0] [L10967] RET, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, user_rmmod=0] [L10967] tmp___2 = ldv_zalloc(32UL) [L10968] ldvarg3 = (struct mwifiex_fw_image *)tmp___2 [L10969] tmp___3 = __VERIFIER_nondet_u8() [L10970] ldvarg2 = tmp___3 [L10971] CALL ldv_initialize() [L11638] CALL ldv_set_init(LDV_SKBS) [L11490] set = set_impl [L11491] last_index = 0 [L11638] RET ldv_set_init(LDV_SKBS) [L10971] RET ldv_initialize() [L10972] ldv_state_variable_4 = 0 [L10973] ldv_state_variable_1 = 1 [L10974] ref_cnt = 0 [L10975] ldv_state_variable_0 = 1 [L10976] ldv_state_variable_3 = 0 [L10977] ldv_state_variable_2 = 0 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=39, ldvarg3={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, tmp___2={0:0}, tmp___3=39, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=39, ldvarg3={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, tmp___2={0:0}, tmp___3=39, tmp___4=2, user_rmmod=0] [L11198] COND TRUE ldv_state_variable_0 != 0 [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: [L11209] case 1: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=39, ldvarg3={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, tmp___2={0:0}, tmp___3=39, tmp___4=2, tmp___6=1, user_rmmod=0] [L11210] COND TRUE ldv_state_variable_0 == 1 [L11211] CALL, EXPR mwifiex_pcie_init_module() [L10703] int ret ; [L10704] struct _ddebug descriptor ; [L10705] long tmp ; [L10706] struct _ddebug descriptor___0 ; [L10707] long tmp___0 ; [L10709] descriptor.modname = "mwifiex_pcie" [L10710] descriptor.function = "mwifiex_pcie_init_module" [L10711] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10712] descriptor.format = "Marvell PCIe Driver\n" [L10713] descriptor.lineno = 2464U [L10714] descriptor.flags = 0U [L10715] EXPR descriptor.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, descriptor={742:0}, descriptor.flags=0, descriptor___0={741:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L10715] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7487] return (exp); [L10715] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={366:0}, descriptor={742:0}, descriptor.flags=0, descriptor___0={741:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L10715] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L10716] COND FALSE !(tmp != 0L) [L10720] CALL sema_init(& add_remove_card_sem, 1) [L7532] struct lock_class_key __key ; [L7533] struct semaphore __constr_expr_0 ; [L7535] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7536] __constr_expr_0.lock.magic = 3735899821U [L7537] __constr_expr_0.lock.owner_cpu = 4294967295U [L7538] __constr_expr_0.lock.owner = (void *)-1 [L7539] __constr_expr_0.lock.dep_map.key = 0 [L7540] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7541] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7542] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7543] __constr_expr_0.lock.dep_map.cpu = 0 [L7544] __constr_expr_0.lock.dep_map.ip = 0UL [L7545] __constr_expr_0.count = (unsigned int )val [L7546] __constr_expr_0.wait_list.next = & sem->wait_list [L7547] __constr_expr_0.wait_list.prev = & sem->wait_list [L7548] *sem = __constr_expr_0 [L7549] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7550] return; [L7550] return; [L10720] RET sema_init(& add_remove_card_sem, 1) [L10721] user_rmmod = 0U [L10722] CALL, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L11712] return __VERIFIER_nondet_int(); [L10722] RET, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10722] ret = __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10723] COND FALSE !(ret != 0) [L10726] descriptor___0.modname = "mwifiex_pcie" [L10727] descriptor___0.function = "mwifiex_pcie_init_module" [L10728] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10729] descriptor___0.format = "info: Driver registered successfully!\n" [L10730] descriptor___0.lineno = 2475U [L10731] descriptor___0.flags = 0U [L10732] EXPR descriptor___0.flags VAL [__dynamic_pr_debug(& descriptor, "mwifiex_pcie: Marvell PCIe Driver\n")=18446744073709551635, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, descriptor={742:0}, descriptor___0={741:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={361:0}, tmp=0, user_rmmod=0] [L10732] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7487] return (exp); [L10732] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__dynamic_pr_debug(& descriptor, "mwifiex_pcie: Marvell PCIe Driver\n")=18446744073709551635, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, descriptor={742:0}, descriptor___0={741:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={361:0}, tmp=0, user_rmmod=0] [L10732] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L10733] COND FALSE !(tmp___0 != 0L) VAL [__dynamic_pr_debug(& descriptor, "mwifiex_pcie: Marvell PCIe Driver\n")=18446744073709551635, __dynamic_pr_debug(& descriptor___0, "mwifiex_pcie: info: Driver registered successfully!\n")=18446744073709551663, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, descriptor={742:0}, descriptor___0={741:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={361:0}, tmp=0, tmp___0=0, user_rmmod=0] [L10738] return (ret); [L10738] return (ret); [L10738] return (ret); [L11211] RET, EXPR mwifiex_pcie_init_module() [L11211] ldv_retval_19 = mwifiex_pcie_init_module() [L11212] COND FALSE !(ldv_retval_19 != 0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=39, ldvarg3={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, tmp___2={0:0}, tmp___3=39, tmp___4=2, tmp___6=1, user_rmmod=0] [L11217] COND TRUE ldv_retval_19 == 0 [L11218] ldv_state_variable_0 = 2 [L11219] ldv_state_variable_2 = 1 [L11220] CALL ldv_initialize_mwifiex_if_ops_2() [L10899] void *tmp ; [L10900] void *tmp___0 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L10902] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, size=6864, tmp___0=1, user_rmmod=0] [L10902] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(6864UL)={0:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L10902] tmp = ldv_zalloc(6864UL) [L10903] pcie_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, user_rmmod=0] [L10904] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, size=232, tmp___0=1, user_rmmod=0] [L10904] RET, EXPR ldv_zalloc(232UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(232UL)={0:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, user_rmmod=0] [L10904] tmp___0 = ldv_zalloc(232UL) [L10905] pcie_ops_group1 = (struct sk_buff *)tmp___0 [L11220] RET ldv_initialize_mwifiex_if_ops_2() [L11221] ldv_state_variable_3 = 1 [L11222] CALL ldv_initialize_pci_driver_3() [L10890] void *tmp ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L10892] CALL, EXPR ldv_zalloc(2976UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=2976, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, size=2976, tmp___0=1, user_rmmod=0] [L10892] RET, EXPR ldv_zalloc(2976UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(2976UL)={0:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L10892] tmp = ldv_zalloc(2976UL) [L10893] mwifiex_pcie_group0 = (struct pci_dev *)tmp [L11222] RET ldv_initialize_pci_driver_3() [L11223] ldv_state_variable_4 = 1 [L11224] CALL ldv_dev_pm_ops_4() [L10911] void *tmp ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L10913] CALL, EXPR ldv_zalloc(1416UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\old(size)=1416, \result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, size=1416, tmp___0=1, user_rmmod=0] [L10913] RET, EXPR ldv_zalloc(1416UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1416UL)={0:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L10913] tmp = ldv_zalloc(1416UL) [L10914] mwifiex_pcie_pm_ops_group1 = (struct device *)tmp [L11224] RET ldv_dev_pm_ops_4() [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: [L11237] case 3: [L11280] case 4: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=39, ldvarg3={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, tmp___2={0:0}, tmp___3=39, tmp___4=4, tmp___6=1, user_rmmod=0] [L11281] COND TRUE ldv_state_variable_2 != 0 [L11282] tmp___8 = __VERIFIER_nondet_int() [L11284] case 0: [L11291] case 1: [L11298] case 2: [L11305] case 3: [L11312] case 4: [L11319] case 5: [L11326] case 6: [L11333] case 7: [L11340] case 8: [L11347] case 9: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=39, ldvarg3={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, tmp___2={0:0}, tmp___3=39, tmp___4=4, tmp___6=1, tmp___8=9, user_rmmod=0] [L11348] COND TRUE ldv_state_variable_2 == 1 [L11349] CALL mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L9904] int ret ; [L9905] u8 *firmware ; [L9906] u32 firmware_len ; [L9907] u32 offset ; [L9908] struct sk_buff *skb ; [L9909] u32 txlen ; [L9910] u32 tx_blocks ; [L9911] u32 tries ; [L9912] u32 len ; [L9913] u32 block_retry_cnt ; [L9914] struct pcie_service_card *card ; [L9915] struct mwifiex_pcie_card_reg const *reg ; [L9916] struct _ddebug descriptor ; [L9917] long tmp ; [L9918] int tmp___0 ; [L9919] u32 ireg_intr ; [L9920] struct _ddebug descriptor___0 ; [L9921] long tmp___1 ; [L9922] int tmp___2 ; [L9923] int tmp___3 ; [L9924] struct _ddebug descriptor___1 ; [L9925] long tmp___4 ; [L9927] EXPR fw->fw_buf [L9927] firmware = fw->fw_buf [L9928] EXPR fw->fw_len [L9928] firmware_len = fw->fw_len [L9929] offset = 0U [L9930] tx_blocks = 0U [L9931] block_retry_cnt = 0U [L9932] EXPR adapter->card [L9932] card = (struct pcie_service_card *)adapter->card [L9933] EXPR card->pcie.reg [L9933] reg = card->pcie.reg [L9934] COND FALSE !((unsigned long )firmware == (unsigned long )((u8 *)0U) || firmware_len == 0U) [L9939] descriptor.modname = "mwifiex_pcie" [L9940] descriptor.function = "mwifiex_prog_fw_w_helper" [L9941] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L9942] descriptor.format = "info: Downloading FW image (%d bytes)\n" [L9943] descriptor.lineno = 1857U [L9944] descriptor.flags = 0U [L9945] EXPR descriptor.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor.flags=0, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, tx_blocks=0, user_rmmod=0] [L9945] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7487] return (exp); [L9945] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor.flags=0, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, tx_blocks=0, user_rmmod=0] [L9945] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L9946] COND FALSE !(tmp != 0L) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, tmp=0, tx_blocks=0, user_rmmod=0] [L9951] CALL, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L8209] int tmp ; [L8210] bool tmp___0 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L8212] CALL, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7823] u32 *cookie_addr ; [L7824] struct pcie_service_card *card ; [L7825] struct mwifiex_pcie_card_reg const *reg ; [L7826] struct _ddebug descriptor ; [L7827] long tmp ; [L7829] EXPR adapter->card [L7829] card = (struct pcie_service_card *)adapter->card [L7830] EXPR card->pcie.reg [L7830] reg = card->pcie.reg [L7831] EXPR reg->sleep_cookie VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={366:0}, card={748:-1189}, descriptor={751:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, reg->sleep_cookie=-255, set_impl={361:0}, user_rmmod=0] [L7831] COND FALSE !((unsigned int )((unsigned char )reg->sleep_cookie) == 0U) [L7835] EXPR card->sleep_cookie_vbase VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={366:0}, card={748:-1189}, card->sleep_cookie_vbase={18446744073709551616:0}, descriptor={751:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, user_rmmod=0] [L7835] COND FALSE !((unsigned long )card->sleep_cookie_vbase != (unsigned long )((u8 *)0U)) [L7855] return (0); [L7855] return (0); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={366:0}, card={748:-1189}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, user_rmmod=0] [L8212] RET, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_ok_to_access_hw(adapter)=0, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L8212] tmp___0 = mwifiex_pcie_ok_to_access_hw(adapter) [L8213] COND FALSE !((int )tmp___0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp___0=0, user_rmmod=0] [L8222] return (0); VAL [\result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp___0=0, user_rmmod=0] [L9951] RET, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_disable_host_int(adapter)=0, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, tmp=0, tx_blocks=0, user_rmmod=0] [L9951] tmp___0 = mwifiex_pcie_disable_host_int(adapter) [L9952] COND FALSE !(tmp___0 != 0) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9958] CALL, EXPR ldv_dev_alloc_skb_14(2312U) VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L11450] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L11452] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L11622] void *skb ; [L11623] void *tmp___7 ; VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L11625] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND FALSE !(tmp___0 != 0) [L7447] EXPR, FCALL calloc(1UL, size) [L7447] tmp = calloc(1UL, size) [L7448] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, calloc(1UL, size)={371:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, p={371:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, size=248, tmp={371:0}, tmp___0=0, user_rmmod=0] [L7449] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7418] COND FALSE !(!cond) [L7449] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, calloc(1UL, size)={371:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, p={371:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, size=248, tmp={371:0}, tmp___0=0, user_rmmod=0] [L7450] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={371:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, calloc(1UL, size)={371:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, p={371:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, size=248, tmp={371:0}, tmp___0=0, user_rmmod=0] [L11625] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={371:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L11625] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L11626] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, skb={371:0}, tmp___7={371:0}, user_rmmod=0] [L11627] COND FALSE !(! skb) [L11630] CALL ldv_set_add(LDV_SKBS, skb) [L11498] int i ; [L11500] i = 0 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, e={371:0}, e={371:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={361:0}, user_rmmod=0] [L11501] COND TRUE 1 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, e={371:0}, e={371:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={361:0}, user_rmmod=0] [L11502] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, e={371:0}, e={371:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={361:0}, user_rmmod=0] [L11512] COND TRUE last_index < 15 [L11513] set_impl[last_index] = e [L11514] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, e={371:0}, e={371:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={361:0}, user_rmmod=0] [L11630] RET ldv_set_add(LDV_SKBS, skb) [L11631] return (skb); VAL [\old(last_index)=0, \result={371:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, skb={371:0}, tmp___7={371:0}, user_rmmod=0] [L11452] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2312, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_skb_alloc()={371:0}, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L11452] tmp = ldv_skb_alloc() [L11453] return (tmp); [L9958] RET, EXPR ldv_dev_alloc_skb_14(2312U) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, ldv_dev_alloc_skb_14(2312U)={371:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9958] skb = ldv_dev_alloc_skb_14(2312U) [L9959] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9965] ireg_intr = 0U VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9966] COND FALSE !(offset >= firmware_len) [L9970] tries = 0U VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9986] COND TRUE tries <= 99U [L9973] EXPR reg->cmd_size VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, reg->cmd_size=131071, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] CALL, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L8046] struct pcie_service_card *card ; [L8048] EXPR adapter->card [L8048] card = (struct pcie_service_card *)adapter->card [L8049] EXPR card->pci_mmap1 [L8049] CALL, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L11765] return __VERIFIER_nondet_uint(); [L8049] RET, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L8049] *data = ioread32(card->pci_mmap1 + (unsigned long )reg) [L8050] return (0); [L9973] RET, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_read_reg(adapter, (int )reg->cmd_size, & len)=0, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, reg->cmd_size=131071, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] ret = mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) [L9974] COND FALSE !(ret != 0) [L9979] EXPR \read(len) VAL [\read(len)=-4294964983, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=0, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9979] COND TRUE len != 0U [L9991] EXPR \read(len) VAL [\read(len)=-4294964983, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=0, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9991] COND FALSE !(len == 0U) [L9994] EXPR \read(len) VAL [\read(len)=-4294964983, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=0, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9994] COND TRUE len > 2312U [L9996] \read(len) [L9997] ret = -1 VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=-1, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L10076] CALL dev_kfree_skb_any(skb) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=0] [L7578] FCALL __dev_kfree_skb_any(skb, 1) [L10076] RET dev_kfree_skb_any(skb) VAL [__dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, descriptor={748:0}, descriptor___0={746:0}, descriptor___1={750:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, ireg_intr={745:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={747:0}, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=-1, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); VAL [\result=-1, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=18446744073709551698, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, adapter={0:0}, adapter={0:0}, adapter->dev={18446744073709551672:18446744073709551650}, add_remove_card_sem={366:0}, block_retry_cnt=0, card={748:-1189}, firmware={380:-379}, firmware_len=1, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, offset=0, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={0:0}, ret=-1, set_impl={361:0}, skb={371:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L11349] RET mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L11350] ldv_state_variable_2 = 1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=39, ldvarg3={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, tmp___2={0:0}, tmp___3=39, tmp___4=4, tmp___6=1, tmp___8=9, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=39, ldvarg3={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, tmp___2={0:0}, tmp___3=39, tmp___4=2, tmp___6=1, tmp___8=9, user_rmmod=0] [L11198] COND TRUE ldv_state_variable_0 != 0 [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=39, ldvarg3={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, tmp___2={0:0}, tmp___3=39, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=0] [L11202] COND TRUE ldv_state_variable_0 == 2 && ref_cnt == 0 [L11203] CALL mwifiex_pcie_cleanup_module() [L10743] int tmp ; [L10745] CALL, EXPR down_interruptible(& add_remove_card_sem) [L11758] return __VERIFIER_nondet_int(); [L10745] RET, EXPR down_interruptible(& add_remove_card_sem) [L10745] tmp = down_interruptible(& add_remove_card_sem) [L10746] COND FALSE !(tmp == 0) [L10750] user_rmmod = 1U [L10751] FCALL pci_unregister_driver(& mwifiex_pcie) [L11203] RET mwifiex_pcie_cleanup_module() [L11204] ldv_state_variable_0 = 3 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=39, ldvarg3={0:0}, ldvarg4=72, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=72, tmp___2={0:0}, tmp___3=39, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=1] [L11402] CALL ldv_check_final_state() [L11689] int tmp___7 ; [L11691] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L11580] return (last_index == 0); [L11691] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L11691] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L11692] COND FALSE !(\read(tmp___7)) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, tmp___7=0, user_rmmod=1] [L11694] CALL ldv_error() VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=1] [L7474] reach_error() VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={18446744073709551684:18446744073709551701}, add_remove_card_sem={366:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={369:0}, mwifiex_pcie={363:0}, mwifiex_pcie8766={362:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={370:0}, mwifiex_reg_8897={368:0}, pcie_ops={365:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={361:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 58 procedures, 1159 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 273.5s, OverallIterations: 12, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.2s, AutomataDifference: 247.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 60 mSolverCounterUnknown, 13022 SdHoareTripleChecker+Valid, 239.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 11929 mSDsluCounter, 79619 SdHoareTripleChecker+Invalid, 234.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 58053 mSDsCounter, 1379 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 13365 IncrementalHoareTripleChecker+Invalid, 14804 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1379 mSolverCounterUnsat, 21566 mSDtfsCounter, 13365 mSolverCounterSat, 0.5s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 65 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=7616occurred in iteration=10, InterpolantAutomatonStates: 59, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 6.9s AutomataMinimizationTime, 11 MinimizatonAttempts, 20226 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 5.8s SatisfiabilityAnalysisTime, 8.0s InterpolantComputationTime, 1435 NumberOfCodeBlocks, 1435 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 1269 ConstructedInterpolants, 0 QuantifiedInterpolants, 1735 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 1012/1012 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-11-19 06:43:58,003 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2022-11-19 06:43:58,040 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-64bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 06:44:00,580 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 06:44:00,593 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 06:44:00,638 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 06:44:00,639 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 06:44:00,644 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 06:44:00,647 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 06:44:00,651 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 06:44:00,654 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 06:44:00,663 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 06:44:00,664 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 06:44:00,667 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 06:44:00,667 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 06:44:00,670 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 06:44:00,671 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 06:44:00,673 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 06:44:00,676 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 06:44:00,677 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 06:44:00,683 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 06:44:00,690 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 06:44:00,693 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 06:44:00,695 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 06:44:00,697 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 06:44:00,698 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 06:44:00,708 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 06:44:00,708 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 06:44:00,709 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 06:44:00,711 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 06:44:00,711 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 06:44:00,712 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 06:44:00,712 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 06:44:00,713 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 06:44:00,715 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 06:44:00,716 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 06:44:00,717 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 06:44:00,717 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 06:44:00,718 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 06:44:00,719 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 06:44:00,719 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 06:44:00,721 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 06:44:00,722 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 06:44:00,727 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-64bit-Taipan_Bitvector.epf [2022-11-19 06:44:00,771 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 06:44:00,772 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 06:44:00,773 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 06:44:00,774 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 06:44:00,775 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 06:44:00,775 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 06:44:00,776 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 06:44:00,776 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 06:44:00,776 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 06:44:00,776 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 06:44:00,778 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 06:44:00,778 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 06:44:00,780 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 06:44:00,780 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 06:44:00,780 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 06:44:00,781 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 06:44:00,781 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 06:44:00,781 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-19 06:44:00,781 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-11-19 06:44:00,782 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-11-19 06:44:00,782 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 06:44:00,782 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 06:44:00,782 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 06:44:00,783 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 06:44:00,783 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-19 06:44:00,783 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 06:44:00,783 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:44:00,784 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 06:44:00,784 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 06:44:00,784 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 06:44:00,785 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2022-11-19 06:44:00,785 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-11-19 06:44:00,785 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 06:44:00,786 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 06:44:00,786 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-19 06:44:00,786 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2022-11-19 06:44:01,128 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 06:44:01,152 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 06:44:01,155 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 06:44:01,156 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 06:44:01,157 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 06:44:01,159 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-19 06:44:01,235 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/data/e0eef2130/b9dba8e171174549924476db225fde36/FLAGc48509840 [2022-11-19 06:44:02,204 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 06:44:02,204 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-19 06:44:02,287 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/data/e0eef2130/b9dba8e171174549924476db225fde36/FLAGc48509840 [2022-11-19 06:44:02,611 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/data/e0eef2130/b9dba8e171174549924476db225fde36 [2022-11-19 06:44:02,613 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 06:44:02,616 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 06:44:02,619 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 06:44:02,620 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 06:44:02,624 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 06:44:02,625 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:44:02" (1/1) ... [2022-11-19 06:44:02,626 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1e9c1b5c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:02, skipping insertion in model container [2022-11-19 06:44:02,626 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:44:02" (1/1) ... [2022-11-19 06:44:02,635 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 06:44:02,854 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 06:44:04,198 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-19 06:44:05,490 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:44:05,539 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-11-19 06:44:05,622 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 06:44:05,793 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-19 06:44:06,102 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:44:06,125 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 06:44:06,360 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-19 06:44:06,576 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:44:06,921 INFO L208 MainTranslator]: Completed translation [2022-11-19 06:44:06,922 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06 WrapperNode [2022-11-19 06:44:06,922 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 06:44:06,923 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 06:44:06,923 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 06:44:06,923 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 06:44:06,931 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,027 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,316 INFO L138 Inliner]: procedures = 262, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6121 [2022-11-19 06:44:07,317 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 06:44:07,318 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 06:44:07,318 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 06:44:07,319 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 06:44:07,330 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,330 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,360 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,361 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,503 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,526 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,549 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,567 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,597 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 06:44:07,598 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 06:44:07,598 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 06:44:07,598 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 06:44:07,599 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (1/1) ... [2022-11-19 06:44:07,606 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:44:07,617 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:44:07,630 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 06:44:07,665 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 06:44:07,686 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-11-19 06:44:07,687 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-11-19 06:44:07,687 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-11-19 06:44:07,687 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2022-11-19 06:44:07,687 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2022-11-19 06:44:07,687 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-11-19 06:44:07,687 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-11-19 06:44:07,688 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-19 06:44:07,688 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-11-19 06:44:07,688 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-19 06:44:07,688 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-19 06:44:07,688 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-19 06:44:07,688 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-19 06:44:07,689 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-19 06:44:07,689 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-19 06:44:07,689 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-19 06:44:07,689 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-19 06:44:07,689 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-19 06:44:07,689 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2022-11-19 06:44:07,690 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2022-11-19 06:44:07,690 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-19 06:44:07,690 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-19 06:44:07,690 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-11-19 06:44:07,690 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-11-19 06:44:07,690 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2022-11-19 06:44:07,691 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2022-11-19 06:44:07,691 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2022-11-19 06:44:07,691 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2022-11-19 06:44:07,691 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2022-11-19 06:44:07,691 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2022-11-19 06:44:07,691 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2022-11-19 06:44:07,692 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2022-11-19 06:44:07,692 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-19 06:44:07,692 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-19 06:44:07,692 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2022-11-19 06:44:07,692 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2022-11-19 06:44:07,692 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-19 06:44:07,693 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-19 06:44:07,693 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-19 06:44:07,693 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-19 06:44:07,693 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2022-11-19 06:44:07,693 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2022-11-19 06:44:07,693 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-11-19 06:44:07,694 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-11-19 06:44:07,694 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2022-11-19 06:44:07,694 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2022-11-19 06:44:07,694 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-19 06:44:07,694 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-19 06:44:07,694 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2022-11-19 06:44:07,695 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2022-11-19 06:44:07,695 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-11-19 06:44:07,695 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-11-19 06:44:07,695 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-11-19 06:44:07,695 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2022-11-19 06:44:07,695 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2022-11-19 06:44:07,696 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-11-19 06:44:07,696 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-11-19 06:44:07,696 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-11-19 06:44:07,696 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-19 06:44:07,696 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-11-19 06:44:07,696 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-19 06:44:07,697 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2022-11-19 06:44:07,697 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2022-11-19 06:44:07,697 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-19 06:44:07,697 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-19 06:44:07,697 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2022-11-19 06:44:07,697 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-11-19 06:44:07,698 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-11-19 06:44:07,698 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-11-19 06:44:07,698 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2022-11-19 06:44:07,698 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2022-11-19 06:44:07,698 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-11-19 06:44:07,698 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-11-19 06:44:07,699 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-19 06:44:07,699 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-19 06:44:07,699 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-19 06:44:07,699 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-19 06:44:07,699 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2022-11-19 06:44:07,699 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2022-11-19 06:44:07,700 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2022-11-19 06:44:07,700 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2022-11-19 06:44:07,700 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2022-11-19 06:44:07,700 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2022-11-19 06:44:07,700 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2022-11-19 06:44:07,700 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2022-11-19 06:44:07,701 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2022-11-19 06:44:07,701 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2022-11-19 06:44:07,701 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-19 06:44:07,701 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-19 06:44:07,701 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2022-11-19 06:44:07,701 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2022-11-19 06:44:07,702 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2022-11-19 06:44:07,702 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2022-11-19 06:44:07,702 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2022-11-19 06:44:07,702 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2022-11-19 06:44:07,702 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2022-11-19 06:44:07,702 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2022-11-19 06:44:07,703 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-19 06:44:07,703 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-19 06:44:07,703 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-19 06:44:07,703 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-19 06:44:07,703 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2022-11-19 06:44:07,703 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2022-11-19 06:44:07,703 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2022-11-19 06:44:07,704 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2022-11-19 06:44:07,704 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2022-11-19 06:44:07,704 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2022-11-19 06:44:07,704 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-11-19 06:44:07,704 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-11-19 06:44:07,704 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2022-11-19 06:44:07,705 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2022-11-19 06:44:07,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2022-11-19 06:44:07,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2022-11-19 06:44:07,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2022-11-19 06:44:07,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2022-11-19 06:44:07,706 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-19 06:44:07,706 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-19 06:44:07,706 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-19 06:44:07,706 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-19 06:44:07,706 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-19 06:44:07,707 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2022-11-19 06:44:07,707 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2022-11-19 06:44:07,707 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 06:44:07,707 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2022-11-19 06:44:07,707 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2022-11-19 06:44:07,707 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-19 06:44:07,708 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-19 06:44:07,708 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-19 06:44:07,708 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2022-11-19 06:44:07,708 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2022-11-19 06:44:07,708 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2022-11-19 06:44:07,709 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2022-11-19 06:44:07,709 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2022-11-19 06:44:07,709 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2022-11-19 06:44:07,709 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2022-11-19 06:44:07,709 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2022-11-19 06:44:07,709 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2022-11-19 06:44:07,710 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-11-19 06:44:07,710 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-11-19 06:44:07,710 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2022-11-19 06:44:07,710 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-19 06:44:07,710 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 06:44:07,710 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 06:44:07,711 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2022-11-19 06:44:07,711 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2022-11-19 06:44:07,711 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2022-11-19 06:44:07,711 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2022-11-19 06:44:08,763 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 06:44:08,766 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 06:44:18,658 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-19 06:45:16,790 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 06:45:16,807 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 06:45:16,808 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-19 06:45:16,812 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:45:16 BoogieIcfgContainer [2022-11-19 06:45:16,812 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 06:45:16,814 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 06:45:16,815 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 06:45:16,818 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 06:45:16,818 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 06:44:02" (1/3) ... [2022-11-19 06:45:16,819 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@160f55ec and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:45:16, skipping insertion in model container [2022-11-19 06:45:16,819 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:44:06" (2/3) ... [2022-11-19 06:45:16,819 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@160f55ec and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:45:16, skipping insertion in model container [2022-11-19 06:45:16,820 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:45:16" (3/3) ... [2022-11-19 06:45:16,821 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-19 06:45:16,840 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 06:45:16,840 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 06:45:16,921 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 06:45:16,932 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@62dfc782, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 06:45:16,933 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 06:45:16,944 INFO L276 IsEmpty]: Start isEmpty. Operand has 1550 states, 1177 states have (on average 1.4129141886151233) internal successors, (1663), 1198 states have internal predecessors, (1663), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2022-11-19 06:45:16,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-19 06:45:16,976 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:45:16,977 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:45:16,978 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:45:16,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:45:16,987 INFO L85 PathProgramCache]: Analyzing trace with hash 1895879575, now seen corresponding path program 1 times [2022-11-19 06:45:17,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:45:17,006 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1726893443] [2022-11-19 06:45:17,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:45:17,007 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:17,007 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:45:17,018 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:45:17,073 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-11-19 06:45:18,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:45:18,548 INFO L263 TraceCheckSpWp]: Trace formula consists of 1381 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-19 06:45:18,554 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:45:18,714 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-19 06:45:18,714 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:45:18,715 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:45:18,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1726893443] [2022-11-19 06:45:18,716 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1726893443] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:45:18,716 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:45:18,717 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:45:18,719 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462094127] [2022-11-19 06:45:18,719 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:45:18,724 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:45:18,724 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:45:18,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:45:18,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:45:18,778 INFO L87 Difference]: Start difference. First operand has 1550 states, 1177 states have (on average 1.4129141886151233) internal successors, (1663), 1198 states have internal predecessors, (1663), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-19 06:45:19,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:45:19,969 INFO L93 Difference]: Finished difference Result 4591 states and 6837 transitions. [2022-11-19 06:45:19,970 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:45:19,972 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 39 [2022-11-19 06:45:19,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:45:20,001 INFO L225 Difference]: With dead ends: 4591 [2022-11-19 06:45:20,002 INFO L226 Difference]: Without dead ends: 3018 [2022-11-19 06:45:20,014 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:45:20,017 INFO L413 NwaCegarLoop]: 2584 mSDtfsCounter, 2224 mSDsluCounter, 2248 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2224 SdHoareTripleChecker+Valid, 4832 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-19 06:45:20,018 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2224 Valid, 4832 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-19 06:45:20,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3018 states. [2022-11-19 06:45:20,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3018 to 3018. [2022-11-19 06:45:20,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3018 states, 2301 states have (on average 1.404606692742286) internal successors, (3232), 2325 states have internal predecessors, (3232), 606 states have call successors, (606), 111 states have call predecessors, (606), 110 states have return successors, (605), 605 states have call predecessors, (605), 605 states have call successors, (605) [2022-11-19 06:45:20,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3018 states to 3018 states and 4443 transitions. [2022-11-19 06:45:20,284 INFO L78 Accepts]: Start accepts. Automaton has 3018 states and 4443 transitions. Word has length 39 [2022-11-19 06:45:20,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:45:20,285 INFO L495 AbstractCegarLoop]: Abstraction has 3018 states and 4443 transitions. [2022-11-19 06:45:20,285 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-19 06:45:20,285 INFO L276 IsEmpty]: Start isEmpty. Operand 3018 states and 4443 transitions. [2022-11-19 06:45:20,291 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-19 06:45:20,292 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:45:20,292 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:45:20,327 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2022-11-19 06:45:20,507 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:20,508 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:45:20,509 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:45:20,509 INFO L85 PathProgramCache]: Analyzing trace with hash -787900593, now seen corresponding path program 1 times [2022-11-19 06:45:20,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:45:20,512 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1462901945] [2022-11-19 06:45:20,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:45:20,512 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:20,512 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:45:20,513 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:45:20,543 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-11-19 06:45:22,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:45:22,613 INFO L263 TraceCheckSpWp]: Trace formula consists of 1819 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-19 06:45:22,617 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:45:22,879 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-19 06:45:22,879 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:45:22,880 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:45:22,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1462901945] [2022-11-19 06:45:22,880 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1462901945] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:45:22,880 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:45:22,880 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 06:45:22,880 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1786506746] [2022-11-19 06:45:22,880 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:45:22,882 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 06:45:22,882 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:45:22,882 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 06:45:22,883 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:45:22,883 INFO L87 Difference]: Start difference. First operand 3018 states and 4443 transitions. Second operand has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-19 06:45:28,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:45:28,930 INFO L93 Difference]: Finished difference Result 6942 states and 10332 transitions. [2022-11-19 06:45:28,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 06:45:28,931 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2022-11-19 06:45:28,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:45:28,953 INFO L225 Difference]: With dead ends: 6942 [2022-11-19 06:45:28,953 INFO L226 Difference]: Without dead ends: 3934 [2022-11-19 06:45:28,965 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-19 06:45:28,966 INFO L413 NwaCegarLoop]: 3446 mSDtfsCounter, 1086 mSDsluCounter, 12560 mSDsCounter, 0 mSdLazyCounter, 556 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1296 SdHoareTripleChecker+Valid, 16006 SdHoareTripleChecker+Invalid, 556 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 556 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.6s IncrementalHoareTripleChecker+Time [2022-11-19 06:45:28,966 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1296 Valid, 16006 Invalid, 556 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [0 Valid, 556 Invalid, 0 Unknown, 0 Unchecked, 5.6s Time] [2022-11-19 06:45:28,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3934 states. [2022-11-19 06:45:29,116 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3934 to 3018. [2022-11-19 06:45:29,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3018 states, 2301 states have (on average 1.4041720990873534) internal successors, (3231), 2325 states have internal predecessors, (3231), 606 states have call successors, (606), 111 states have call predecessors, (606), 110 states have return successors, (605), 605 states have call predecessors, (605), 605 states have call successors, (605) [2022-11-19 06:45:29,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3018 states to 3018 states and 4442 transitions. [2022-11-19 06:45:29,138 INFO L78 Accepts]: Start accepts. Automaton has 3018 states and 4442 transitions. Word has length 49 [2022-11-19 06:45:29,139 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:45:29,139 INFO L495 AbstractCegarLoop]: Abstraction has 3018 states and 4442 transitions. [2022-11-19 06:45:29,139 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-19 06:45:29,140 INFO L276 IsEmpty]: Start isEmpty. Operand 3018 states and 4442 transitions. [2022-11-19 06:45:29,144 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-19 06:45:29,145 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:45:29,145 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:45:29,189 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-11-19 06:45:29,358 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:29,359 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:45:29,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:45:29,359 INFO L85 PathProgramCache]: Analyzing trace with hash -1799017843, now seen corresponding path program 1 times [2022-11-19 06:45:29,363 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:45:29,363 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [622851328] [2022-11-19 06:45:29,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:45:29,363 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:29,363 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:45:29,366 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:45:29,374 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-11-19 06:45:31,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:45:31,386 INFO L263 TraceCheckSpWp]: Trace formula consists of 1819 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-19 06:45:31,389 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:45:31,759 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-19 06:45:31,759 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:45:31,759 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:45:31,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [622851328] [2022-11-19 06:45:31,760 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [622851328] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:45:31,760 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:45:31,760 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:45:31,760 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [105984621] [2022-11-19 06:45:31,760 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:45:31,761 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:45:31,761 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:45:31,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:45:31,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:45:31,762 INFO L87 Difference]: Start difference. First operand 3018 states and 4442 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-19 06:45:32,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:45:32,557 INFO L93 Difference]: Finished difference Result 9031 states and 13322 transitions. [2022-11-19 06:45:32,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:45:32,557 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2022-11-19 06:45:32,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:45:32,599 INFO L225 Difference]: With dead ends: 9031 [2022-11-19 06:45:32,600 INFO L226 Difference]: Without dead ends: 6014 [2022-11-19 06:45:32,613 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 45 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-19 06:45:32,619 INFO L413 NwaCegarLoop]: 2677 mSDtfsCounter, 2223 mSDsluCounter, 7594 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2223 SdHoareTripleChecker+Valid, 10271 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 06:45:32,621 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2223 Valid, 10271 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-19 06:45:32,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6014 states. [2022-11-19 06:45:33,011 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6014 to 6014. [2022-11-19 06:45:33,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6014 states, 4585 states have (on average 1.4045801526717556) internal successors, (6440), 4633 states have internal predecessors, (6440), 1208 states have call successors, (1208), 221 states have call predecessors, (1208), 220 states have return successors, (1219), 1207 states have call predecessors, (1219), 1207 states have call successors, (1219) [2022-11-19 06:45:33,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6014 states to 6014 states and 8867 transitions. [2022-11-19 06:45:33,050 INFO L78 Accepts]: Start accepts. Automaton has 6014 states and 8867 transitions. Word has length 49 [2022-11-19 06:45:33,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:45:33,051 INFO L495 AbstractCegarLoop]: Abstraction has 6014 states and 8867 transitions. [2022-11-19 06:45:33,051 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-19 06:45:33,051 INFO L276 IsEmpty]: Start isEmpty. Operand 6014 states and 8867 transitions. [2022-11-19 06:45:33,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-11-19 06:45:33,065 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:45:33,067 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:45:33,113 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-11-19 06:45:33,290 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:33,291 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:45:33,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:45:33,291 INFO L85 PathProgramCache]: Analyzing trace with hash 464906894, now seen corresponding path program 1 times [2022-11-19 06:45:33,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:45:33,295 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1116001261] [2022-11-19 06:45:33,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:45:33,295 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:33,296 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:45:33,297 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:45:33,338 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-11-19 06:45:35,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:45:35,216 INFO L263 TraceCheckSpWp]: Trace formula consists of 2135 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-19 06:45:35,221 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:45:35,325 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-19 06:45:35,325 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:45:35,325 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:45:35,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1116001261] [2022-11-19 06:45:35,326 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1116001261] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:45:35,326 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:45:35,326 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:45:35,327 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1788144056] [2022-11-19 06:45:35,327 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:45:35,327 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:45:35,328 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:45:35,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:45:35,328 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:45:35,329 INFO L87 Difference]: Start difference. First operand 6014 states and 8867 transitions. Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-19 06:45:36,468 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:45:36,468 INFO L93 Difference]: Finished difference Result 13359 states and 19675 transitions. [2022-11-19 06:45:36,468 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:45:36,469 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 117 [2022-11-19 06:45:36,469 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:45:36,511 INFO L225 Difference]: With dead ends: 13359 [2022-11-19 06:45:36,511 INFO L226 Difference]: Without dead ends: 7355 [2022-11-19 06:45:36,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:45:36,539 INFO L413 NwaCegarLoop]: 2302 mSDtfsCounter, 519 mSDsluCounter, 2192 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 519 SdHoareTripleChecker+Valid, 4494 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-19 06:45:36,540 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [519 Valid, 4494 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-19 06:45:36,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7355 states. [2022-11-19 06:45:36,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7355 to 7343. [2022-11-19 06:45:37,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7343 states, 5692 states have (on average 1.4181307097680955) internal successors, (8072), 5740 states have internal predecessors, (8072), 1361 states have call successors, (1361), 290 states have call predecessors, (1361), 289 states have return successors, (1372), 1360 states have call predecessors, (1372), 1360 states have call successors, (1372) [2022-11-19 06:45:37,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7343 states to 7343 states and 10805 transitions. [2022-11-19 06:45:37,064 INFO L78 Accepts]: Start accepts. Automaton has 7343 states and 10805 transitions. Word has length 117 [2022-11-19 06:45:37,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:45:37,066 INFO L495 AbstractCegarLoop]: Abstraction has 7343 states and 10805 transitions. [2022-11-19 06:45:37,067 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-19 06:45:37,067 INFO L276 IsEmpty]: Start isEmpty. Operand 7343 states and 10805 transitions. [2022-11-19 06:45:37,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2022-11-19 06:45:37,089 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:45:37,089 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:45:37,133 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-11-19 06:45:37,306 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:37,307 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:45:37,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:45:37,307 INFO L85 PathProgramCache]: Analyzing trace with hash 1053518960, now seen corresponding path program 1 times [2022-11-19 06:45:37,309 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:45:37,309 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1765165492] [2022-11-19 06:45:37,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:45:37,309 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:37,309 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:45:37,310 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:45:37,313 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-11-19 06:45:39,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:45:39,425 INFO L263 TraceCheckSpWp]: Trace formula consists of 2242 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-19 06:45:39,431 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:45:39,576 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 73 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-11-19 06:45:39,576 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:45:39,580 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:45:39,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1765165492] [2022-11-19 06:45:39,580 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1765165492] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:45:39,580 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:45:39,581 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:45:39,581 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [78290866] [2022-11-19 06:45:39,581 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:45:39,583 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:45:39,583 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:45:39,583 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:45:39,583 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:45:39,584 INFO L87 Difference]: Start difference. First operand 7343 states and 10805 transitions. Second operand has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-19 06:45:43,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:45:43,428 INFO L93 Difference]: Finished difference Result 15083 states and 22165 transitions. [2022-11-19 06:45:43,428 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-19 06:45:43,429 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 157 [2022-11-19 06:45:43,429 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:45:43,495 INFO L225 Difference]: With dead ends: 15083 [2022-11-19 06:45:43,495 INFO L226 Difference]: Without dead ends: 7747 [2022-11-19 06:45:43,522 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 153 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-19 06:45:43,522 INFO L413 NwaCegarLoop]: 4344 mSDtfsCounter, 2226 mSDsluCounter, 10934 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2226 SdHoareTripleChecker+Valid, 15278 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-19 06:45:43,523 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2226 Valid, 15278 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-19 06:45:43,533 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7747 states. [2022-11-19 06:45:43,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7747 to 7382. [2022-11-19 06:45:43,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7382 states, 5722 states have (on average 1.4159384830478854) internal successors, (8102), 5773 states have internal predecessors, (8102), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2022-11-19 06:45:44,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7382 states to 7382 states and 10847 transitions. [2022-11-19 06:45:44,026 INFO L78 Accepts]: Start accepts. Automaton has 7382 states and 10847 transitions. Word has length 157 [2022-11-19 06:45:44,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:45:44,026 INFO L495 AbstractCegarLoop]: Abstraction has 7382 states and 10847 transitions. [2022-11-19 06:45:44,027 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-19 06:45:44,027 INFO L276 IsEmpty]: Start isEmpty. Operand 7382 states and 10847 transitions. [2022-11-19 06:45:44,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-11-19 06:45:44,044 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:45:44,044 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:45:44,093 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-11-19 06:45:44,266 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:44,267 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:45:44,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:45:44,267 INFO L85 PathProgramCache]: Analyzing trace with hash 1396928693, now seen corresponding path program 1 times [2022-11-19 06:45:44,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:45:44,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [673052143] [2022-11-19 06:45:44,270 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:45:44,270 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:44,270 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:45:44,272 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:45:44,294 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-11-19 06:45:46,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:45:46,681 INFO L263 TraceCheckSpWp]: Trace formula consists of 2299 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-19 06:45:46,690 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:45:46,891 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-11-19 06:45:46,892 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:45:46,892 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:45:46,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [673052143] [2022-11-19 06:45:46,892 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [673052143] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:45:46,892 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:45:46,893 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 06:45:46,893 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [814399697] [2022-11-19 06:45:46,893 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:45:46,894 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 06:45:46,894 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:45:46,894 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 06:45:46,895 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:45:46,895 INFO L87 Difference]: Start difference. First operand 7382 states and 10847 transitions. Second operand has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-19 06:45:48,275 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-19 06:45:52,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:45:52,774 INFO L93 Difference]: Finished difference Result 14905 states and 21932 transitions. [2022-11-19 06:45:52,774 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 06:45:52,775 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2022-11-19 06:45:52,775 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:45:52,810 INFO L225 Difference]: With dead ends: 14905 [2022-11-19 06:45:52,810 INFO L226 Difference]: Without dead ends: 7540 [2022-11-19 06:45:52,833 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 158 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-19 06:45:52,834 INFO L413 NwaCegarLoop]: 2450 mSDtfsCounter, 1077 mSDsluCounter, 8488 mSDsCounter, 0 mSdLazyCounter, 329 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1286 SdHoareTripleChecker+Valid, 10938 SdHoareTripleChecker+Invalid, 329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 329 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.4s IncrementalHoareTripleChecker+Time [2022-11-19 06:45:52,834 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1286 Valid, 10938 Invalid, 329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 329 Invalid, 0 Unknown, 0 Unchecked, 5.4s Time] [2022-11-19 06:45:52,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7540 states. [2022-11-19 06:45:53,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7540 to 7382. [2022-11-19 06:45:53,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7382 states, 5722 states have (on average 1.4152394267738553) internal successors, (8098), 5773 states have internal predecessors, (8098), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2022-11-19 06:45:53,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7382 states to 7382 states and 10843 transitions. [2022-11-19 06:45:53,354 INFO L78 Accepts]: Start accepts. Automaton has 7382 states and 10843 transitions. Word has length 163 [2022-11-19 06:45:53,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:45:53,355 INFO L495 AbstractCegarLoop]: Abstraction has 7382 states and 10843 transitions. [2022-11-19 06:45:53,355 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-19 06:45:53,355 INFO L276 IsEmpty]: Start isEmpty. Operand 7382 states and 10843 transitions. [2022-11-19 06:45:53,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-11-19 06:45:53,369 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:45:53,370 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:45:53,422 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-11-19 06:45:53,582 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:53,583 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:45:53,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:45:53,583 INFO L85 PathProgramCache]: Analyzing trace with hash -325073993, now seen corresponding path program 1 times [2022-11-19 06:45:53,585 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:45:53,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [567143995] [2022-11-19 06:45:53,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:45:53,585 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:45:53,585 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:45:53,586 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:45:53,587 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-11-19 06:45:55,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:45:56,091 INFO L263 TraceCheckSpWp]: Trace formula consists of 2299 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-19 06:45:56,097 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:45:56,342 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2022-11-19 06:45:56,343 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:45:56,343 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:45:56,343 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [567143995] [2022-11-19 06:45:56,343 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [567143995] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:45:56,344 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:45:56,344 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 06:45:56,344 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [191679123] [2022-11-19 06:45:56,344 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:45:56,346 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 06:45:56,347 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:45:56,348 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 06:45:56,348 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:45:56,348 INFO L87 Difference]: Start difference. First operand 7382 states and 10843 transitions. Second operand has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-19 06:46:00,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:46:00,133 INFO L93 Difference]: Finished difference Result 18817 states and 28162 transitions. [2022-11-19 06:46:00,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 06:46:00,134 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2022-11-19 06:46:00,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:46:00,190 INFO L225 Difference]: With dead ends: 18817 [2022-11-19 06:46:00,190 INFO L226 Difference]: Without dead ends: 11452 [2022-11-19 06:46:00,215 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 158 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-19 06:46:00,216 INFO L413 NwaCegarLoop]: 3513 mSDtfsCounter, 1082 mSDsluCounter, 12707 mSDsCounter, 0 mSdLazyCounter, 556 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1292 SdHoareTripleChecker+Valid, 16220 SdHoareTripleChecker+Invalid, 556 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 556 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:46:00,216 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1292 Valid, 16220 Invalid, 556 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 556 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2022-11-19 06:46:00,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11452 states. [2022-11-19 06:46:00,889 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11452 to 7382. [2022-11-19 06:46:00,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7382 states, 5722 states have (on average 1.4145403704998252) internal successors, (8094), 5773 states have internal predecessors, (8094), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2022-11-19 06:46:00,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7382 states to 7382 states and 10839 transitions. [2022-11-19 06:46:00,930 INFO L78 Accepts]: Start accepts. Automaton has 7382 states and 10839 transitions. Word has length 163 [2022-11-19 06:46:00,931 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:46:00,932 INFO L495 AbstractCegarLoop]: Abstraction has 7382 states and 10839 transitions. [2022-11-19 06:46:00,932 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-19 06:46:00,932 INFO L276 IsEmpty]: Start isEmpty. Operand 7382 states and 10839 transitions. [2022-11-19 06:46:00,946 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-11-19 06:46:00,946 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:46:00,946 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:46:00,999 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-11-19 06:46:01,162 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:01,163 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:46:01,163 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:46:01,163 INFO L85 PathProgramCache]: Analyzing trace with hash 1636500665, now seen corresponding path program 1 times [2022-11-19 06:46:01,165 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:46:01,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1494840165] [2022-11-19 06:46:01,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:46:01,166 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:01,166 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:46:01,168 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:46:01,214 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-11-19 06:46:03,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:46:03,925 INFO L263 TraceCheckSpWp]: Trace formula consists of 2299 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-19 06:46:03,928 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:46:04,066 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2022-11-19 06:46:04,067 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:46:04,067 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:46:04,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1494840165] [2022-11-19 06:46:04,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1494840165] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:46:04,068 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:46:04,068 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:46:04,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1870022029] [2022-11-19 06:46:04,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:46:04,069 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:46:04,069 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:46:04,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:46:04,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:46:04,070 INFO L87 Difference]: Start difference. First operand 7382 states and 10839 transitions. Second operand has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-19 06:46:04,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:46:04,704 INFO L93 Difference]: Finished difference Result 14827 states and 21865 transitions. [2022-11-19 06:46:04,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:46:04,705 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 163 [2022-11-19 06:46:04,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:46:04,737 INFO L225 Difference]: With dead ends: 14827 [2022-11-19 06:46:04,737 INFO L226 Difference]: Without dead ends: 7462 [2022-11-19 06:46:04,758 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:46:04,759 INFO L413 NwaCegarLoop]: 2251 mSDtfsCounter, 6 mSDsluCounter, 6734 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 8985 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 06:46:04,760 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 8985 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 06:46:04,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7462 states. [2022-11-19 06:46:05,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7462 to 7414. [2022-11-19 06:46:05,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7414 states, 5746 states have (on average 1.4128089105464672) internal successors, (8118), 5797 states have internal predecessors, (8118), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 300 states have return successors, (1442), 1371 states have call predecessors, (1442), 1366 states have call successors, (1442) [2022-11-19 06:46:05,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7414 states to 7414 states and 10927 transitions. [2022-11-19 06:46:05,351 INFO L78 Accepts]: Start accepts. Automaton has 7414 states and 10927 transitions. Word has length 163 [2022-11-19 06:46:05,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:46:05,351 INFO L495 AbstractCegarLoop]: Abstraction has 7414 states and 10927 transitions. [2022-11-19 06:46:05,352 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-19 06:46:05,352 INFO L276 IsEmpty]: Start isEmpty. Operand 7414 states and 10927 transitions. [2022-11-19 06:46:05,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 166 [2022-11-19 06:46:05,374 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:46:05,374 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:46:05,427 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-11-19 06:46:05,598 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:05,599 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:46:05,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:46:05,599 INFO L85 PathProgramCache]: Analyzing trace with hash 512514198, now seen corresponding path program 1 times [2022-11-19 06:46:05,602 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:46:05,602 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1582860927] [2022-11-19 06:46:05,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:46:05,602 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:05,603 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:46:05,604 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:46:05,642 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-11-19 06:46:08,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:46:08,624 INFO L263 TraceCheckSpWp]: Trace formula consists of 2302 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-19 06:46:08,627 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:46:08,869 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2022-11-19 06:46:08,870 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:46:08,870 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:46:08,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1582860927] [2022-11-19 06:46:08,871 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1582860927] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:46:08,871 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:46:08,871 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:46:08,871 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [46274366] [2022-11-19 06:46:08,871 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:46:08,872 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:46:08,872 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:46:08,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:46:08,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:46:08,873 INFO L87 Difference]: Start difference. First operand 7414 states and 10927 transitions. Second operand has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-19 06:46:09,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:46:09,355 INFO L93 Difference]: Finished difference Result 14837 states and 21909 transitions. [2022-11-19 06:46:09,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:46:09,356 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 165 [2022-11-19 06:46:09,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:46:09,383 INFO L225 Difference]: With dead ends: 14837 [2022-11-19 06:46:09,383 INFO L226 Difference]: Without dead ends: 7440 [2022-11-19 06:46:09,402 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 161 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:46:09,403 INFO L413 NwaCegarLoop]: 2249 mSDtfsCounter, 2 mSDsluCounter, 6734 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 8983 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:46:09,403 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 8983 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:46:09,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7440 states. [2022-11-19 06:46:09,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7440 to 7434. [2022-11-19 06:46:09,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7434 states, 5760 states have (on average 1.4118055555555555) internal successors, (8132), 5813 states have internal predecessors, (8132), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 306 states have return successors, (1456), 1375 states have call predecessors, (1456), 1366 states have call successors, (1456) [2022-11-19 06:46:09,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7434 states to 7434 states and 10955 transitions. [2022-11-19 06:46:09,978 INFO L78 Accepts]: Start accepts. Automaton has 7434 states and 10955 transitions. Word has length 165 [2022-11-19 06:46:09,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:46:09,979 INFO L495 AbstractCegarLoop]: Abstraction has 7434 states and 10955 transitions. [2022-11-19 06:46:09,979 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-19 06:46:09,980 INFO L276 IsEmpty]: Start isEmpty. Operand 7434 states and 10955 transitions. [2022-11-19 06:46:09,992 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2022-11-19 06:46:09,992 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:46:09,992 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:46:10,044 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-11-19 06:46:10,206 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:10,207 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:46:10,207 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:46:10,207 INFO L85 PathProgramCache]: Analyzing trace with hash 409548996, now seen corresponding path program 1 times [2022-11-19 06:46:10,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:46:10,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [10205392] [2022-11-19 06:46:10,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:46:10,209 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:10,210 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:46:10,211 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:46:10,215 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-11-19 06:46:12,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:46:12,883 INFO L263 TraceCheckSpWp]: Trace formula consists of 2328 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-19 06:46:12,887 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:46:14,206 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2022-11-19 06:46:14,206 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:46:14,206 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:46:14,207 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [10205392] [2022-11-19 06:46:14,207 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [10205392] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:46:14,207 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:46:14,207 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-19 06:46:14,207 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1996459332] [2022-11-19 06:46:14,208 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:46:14,208 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-19 06:46:14,208 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:46:14,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-19 06:46:14,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2022-11-19 06:46:14,210 INFO L87 Difference]: Start difference. First operand 7434 states and 10955 transitions. Second operand has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-19 06:46:17,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:46:17,469 INFO L93 Difference]: Finished difference Result 18955 states and 28538 transitions. [2022-11-19 06:46:17,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-19 06:46:17,472 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) Word has length 172 [2022-11-19 06:46:17,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:46:17,513 INFO L225 Difference]: With dead ends: 18955 [2022-11-19 06:46:17,513 INFO L226 Difference]: Without dead ends: 11538 [2022-11-19 06:46:17,535 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 175 GetRequests, 161 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2022-11-19 06:46:17,535 INFO L413 NwaCegarLoop]: 3628 mSDtfsCounter, 1086 mSDsluCounter, 38515 mSDsCounter, 0 mSdLazyCounter, 242 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1295 SdHoareTripleChecker+Valid, 42143 SdHoareTripleChecker+Invalid, 244 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 242 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:46:17,536 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1295 Valid, 42143 Invalid, 244 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2 Valid, 242 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2022-11-19 06:46:17,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11538 states. [2022-11-19 06:46:18,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11538 to 7458. [2022-11-19 06:46:18,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7458 states, 5778 states have (on average 1.4098303911388024) internal successors, (8146), 5829 states have internal predecessors, (8146), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-19 06:46:18,314 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7458 states to 7458 states and 10991 transitions. [2022-11-19 06:46:18,316 INFO L78 Accepts]: Start accepts. Automaton has 7458 states and 10991 transitions. Word has length 172 [2022-11-19 06:46:18,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:46:18,317 INFO L495 AbstractCegarLoop]: Abstraction has 7458 states and 10991 transitions. [2022-11-19 06:46:18,317 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-19 06:46:18,317 INFO L276 IsEmpty]: Start isEmpty. Operand 7458 states and 10991 transitions. [2022-11-19 06:46:18,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2022-11-19 06:46:18,332 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:46:18,332 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:46:18,386 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-11-19 06:46:18,546 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:18,547 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:46:18,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:46:18,547 INFO L85 PathProgramCache]: Analyzing trace with hash -112393712, now seen corresponding path program 1 times [2022-11-19 06:46:18,549 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:46:18,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1214885656] [2022-11-19 06:46:18,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:46:18,550 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:18,550 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:46:18,551 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:46:18,595 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-11-19 06:46:21,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:46:21,538 INFO L263 TraceCheckSpWp]: Trace formula consists of 2353 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-19 06:46:21,544 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:46:21,587 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2022-11-19 06:46:21,587 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:46:21,587 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:46:21,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1214885656] [2022-11-19 06:46:21,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1214885656] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:46:21,587 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:46:21,587 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:46:21,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1747835304] [2022-11-19 06:46:21,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:46:21,588 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:46:21,588 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:46:21,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:46:21,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:46:21,589 INFO L87 Difference]: Start difference. First operand 7458 states and 10991 transitions. Second operand has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-19 06:46:22,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:46:22,246 INFO L93 Difference]: Finished difference Result 19261 states and 28974 transitions. [2022-11-19 06:46:22,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:46:22,252 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 178 [2022-11-19 06:46:22,253 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:46:22,297 INFO L225 Difference]: With dead ends: 19261 [2022-11-19 06:46:22,297 INFO L226 Difference]: Without dead ends: 11820 [2022-11-19 06:46:22,324 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 176 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:46:22,325 INFO L413 NwaCegarLoop]: 3655 mSDtfsCounter, 1072 mSDsluCounter, 2436 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1279 SdHoareTripleChecker+Valid, 6091 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:46:22,325 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1279 Valid, 6091 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:46:22,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11820 states. [2022-11-19 06:46:23,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11820 to 7462. [2022-11-19 06:46:23,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7462 states, 5782 states have (on average 1.4095468695952957) internal successors, (8150), 5833 states have internal predecessors, (8150), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-19 06:46:23,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7462 states to 7462 states and 10995 transitions. [2022-11-19 06:46:23,115 INFO L78 Accepts]: Start accepts. Automaton has 7462 states and 10995 transitions. Word has length 178 [2022-11-19 06:46:23,115 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:46:23,115 INFO L495 AbstractCegarLoop]: Abstraction has 7462 states and 10995 transitions. [2022-11-19 06:46:23,116 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-19 06:46:23,116 INFO L276 IsEmpty]: Start isEmpty. Operand 7462 states and 10995 transitions. [2022-11-19 06:46:23,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2022-11-19 06:46:23,130 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:46:23,130 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:46:23,186 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-11-19 06:46:23,346 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:23,347 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:46:23,347 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:46:23,347 INFO L85 PathProgramCache]: Analyzing trace with hash 1396355311, now seen corresponding path program 1 times [2022-11-19 06:46:23,349 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:46:23,349 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1237339826] [2022-11-19 06:46:23,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:46:23,349 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:23,349 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:46:23,350 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:46:23,351 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2022-11-19 06:46:26,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:46:26,395 INFO L263 TraceCheckSpWp]: Trace formula consists of 2404 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-19 06:46:26,408 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:46:26,663 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2022-11-19 06:46:26,663 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:46:26,664 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:46:26,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1237339826] [2022-11-19 06:46:26,664 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1237339826] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:46:26,664 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:46:26,664 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-19 06:46:26,664 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358279253] [2022-11-19 06:46:26,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:46:26,665 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 06:46:26,665 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:46:26,666 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 06:46:26,666 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:46:26,666 INFO L87 Difference]: Start difference. First operand 7462 states and 10995 transitions. Second operand has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-19 06:46:30,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:46:30,784 INFO L93 Difference]: Finished difference Result 18985 states and 28530 transitions. [2022-11-19 06:46:30,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 06:46:30,785 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 182 [2022-11-19 06:46:30,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:46:30,824 INFO L225 Difference]: With dead ends: 18985 [2022-11-19 06:46:30,824 INFO L226 Difference]: Without dead ends: 11540 [2022-11-19 06:46:30,843 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 182 GetRequests, 177 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-19 06:46:30,844 INFO L413 NwaCegarLoop]: 3515 mSDtfsCounter, 1002 mSDsluCounter, 12814 mSDsCounter, 0 mSdLazyCounter, 558 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1191 SdHoareTripleChecker+Valid, 16329 SdHoareTripleChecker+Invalid, 558 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 558 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-19 06:46:30,844 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1191 Valid, 16329 Invalid, 558 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 558 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-19 06:46:30,854 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11540 states. [2022-11-19 06:46:31,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11540 to 7462. [2022-11-19 06:46:31,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7462 states, 5782 states have (on average 1.408855067450709) internal successors, (8146), 5833 states have internal predecessors, (8146), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-19 06:46:31,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7462 states to 7462 states and 10991 transitions. [2022-11-19 06:46:31,729 INFO L78 Accepts]: Start accepts. Automaton has 7462 states and 10991 transitions. Word has length 182 [2022-11-19 06:46:31,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:46:31,730 INFO L495 AbstractCegarLoop]: Abstraction has 7462 states and 10991 transitions. [2022-11-19 06:46:31,731 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-19 06:46:31,731 INFO L276 IsEmpty]: Start isEmpty. Operand 7462 states and 10991 transitions. [2022-11-19 06:46:31,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2022-11-19 06:46:31,745 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:46:31,746 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:46:31,800 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2022-11-19 06:46:31,966 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:31,967 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:46:31,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:46:31,967 INFO L85 PathProgramCache]: Analyzing trace with hash 1458394925, now seen corresponding path program 1 times [2022-11-19 06:46:31,970 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:46:31,970 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2120521607] [2022-11-19 06:46:31,970 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:46:31,970 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:31,971 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:46:31,972 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:46:31,986 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2022-11-19 06:46:35,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:46:35,803 INFO L263 TraceCheckSpWp]: Trace formula consists of 2404 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-19 06:46:35,809 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:46:36,186 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2022-11-19 06:46:36,186 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:46:36,187 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:46:36,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2120521607] [2022-11-19 06:46:36,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2120521607] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:46:36,187 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:46:36,187 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-19 06:46:36,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1586321980] [2022-11-19 06:46:36,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:46:36,188 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:46:36,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:46:36,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:46:36,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:46:36,190 INFO L87 Difference]: Start difference. First operand 7462 states and 10991 transitions. Second operand has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-19 06:46:39,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:46:39,978 INFO L93 Difference]: Finished difference Result 23343 states and 35523 transitions. [2022-11-19 06:46:39,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 06:46:39,979 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 182 [2022-11-19 06:46:39,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:46:40,019 INFO L225 Difference]: With dead ends: 23343 [2022-11-19 06:46:40,019 INFO L226 Difference]: Without dead ends: 15898 [2022-11-19 06:46:40,039 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:46:40,040 INFO L413 NwaCegarLoop]: 4911 mSDtfsCounter, 2171 mSDsluCounter, 3587 mSDsCounter, 0 mSdLazyCounter, 202 mSolverCounterSat, 210 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2565 SdHoareTripleChecker+Valid, 8498 SdHoareTripleChecker+Invalid, 412 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 210 IncrementalHoareTripleChecker+Valid, 202 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2022-11-19 06:46:40,041 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2565 Valid, 8498 Invalid, 412 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [210 Valid, 202 Invalid, 0 Unknown, 0 Unchecked, 2.3s Time] [2022-11-19 06:46:40,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15898 states. [2022-11-19 06:46:40,774 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15898 to 7470. [2022-11-19 06:46:40,781 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7470 states, 5790 states have (on average 1.4082901554404146) internal successors, (8154), 5841 states have internal predecessors, (8154), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-19 06:46:40,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7470 states to 7470 states and 10999 transitions. [2022-11-19 06:46:40,813 INFO L78 Accepts]: Start accepts. Automaton has 7470 states and 10999 transitions. Word has length 182 [2022-11-19 06:46:40,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:46:40,814 INFO L495 AbstractCegarLoop]: Abstraction has 7470 states and 10999 transitions. [2022-11-19 06:46:40,815 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-19 06:46:40,815 INFO L276 IsEmpty]: Start isEmpty. Operand 7470 states and 10999 transitions. [2022-11-19 06:46:40,827 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2022-11-19 06:46:40,827 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:46:40,828 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:46:40,884 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2022-11-19 06:46:41,050 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:41,051 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:46:41,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:46:41,052 INFO L85 PathProgramCache]: Analyzing trace with hash -1049777951, now seen corresponding path program 1 times [2022-11-19 06:46:41,054 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:46:41,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1249192163] [2022-11-19 06:46:41,055 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:46:41,055 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:41,055 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:46:41,056 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:46:41,074 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2022-11-19 06:46:44,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:46:44,214 INFO L263 TraceCheckSpWp]: Trace formula consists of 2396 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-19 06:46:44,218 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:46:44,361 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2022-11-19 06:46:44,361 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:46:44,361 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-19 06:46:44,361 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1249192163] [2022-11-19 06:46:44,361 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1249192163] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:46:44,362 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:46:44,362 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:46:44,362 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [435544354] [2022-11-19 06:46:44,362 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:46:44,362 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:46:44,363 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-19 06:46:44,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:46:44,363 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:46:44,363 INFO L87 Difference]: Start difference. First operand 7470 states and 10999 transitions. Second operand has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-19 06:46:45,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:46:45,631 INFO L93 Difference]: Finished difference Result 19017 states and 28558 transitions. [2022-11-19 06:46:45,632 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 06:46:45,632 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 183 [2022-11-19 06:46:45,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:46:45,662 INFO L225 Difference]: With dead ends: 19017 [2022-11-19 06:46:45,662 INFO L226 Difference]: Without dead ends: 11564 [2022-11-19 06:46:45,679 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:46:45,680 INFO L413 NwaCegarLoop]: 3630 mSDtfsCounter, 1067 mSDsluCounter, 9583 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1274 SdHoareTripleChecker+Valid, 13213 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-19 06:46:45,680 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1274 Valid, 13213 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-19 06:46:45,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11564 states. [2022-11-19 06:46:46,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11564 to 7470. [2022-11-19 06:46:46,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7470 states, 5790 states have (on average 1.4075993091537133) internal successors, (8150), 5841 states have internal predecessors, (8150), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-19 06:46:46,406 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7470 states to 7470 states and 10995 transitions. [2022-11-19 06:46:46,408 INFO L78 Accepts]: Start accepts. Automaton has 7470 states and 10995 transitions. Word has length 183 [2022-11-19 06:46:46,409 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:46:46,409 INFO L495 AbstractCegarLoop]: Abstraction has 7470 states and 10995 transitions. [2022-11-19 06:46:46,409 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-19 06:46:46,410 INFO L276 IsEmpty]: Start isEmpty. Operand 7470 states and 10995 transitions. [2022-11-19 06:46:46,421 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2022-11-19 06:46:46,421 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:46:46,422 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:46:46,479 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2022-11-19 06:46:46,634 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:46,635 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:46:46,635 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:46:46,635 INFO L85 PathProgramCache]: Analyzing trace with hash 750340242, now seen corresponding path program 1 times [2022-11-19 06:46:46,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-19 06:46:46,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [36778170] [2022-11-19 06:46:46,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:46:46,638 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-19 06:46:46,638 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat [2022-11-19 06:46:46,639 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-19 06:46:46,658 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2b22c05d-a7dd-4850-b736-23c904bc9b16/bin/utaipan-I9t0OCRTmS/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (16)] Waiting until timeout for monitored process