./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 14:24:15,788 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 14:24:15,791 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 14:24:15,824 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 14:24:15,824 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 14:24:15,825 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 14:24:15,827 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 14:24:15,829 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 14:24:15,831 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 14:24:15,832 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 14:24:15,833 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 14:24:15,835 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 14:24:15,835 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 14:24:15,836 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 14:24:15,838 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 14:24:15,839 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 14:24:15,840 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 14:24:15,842 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 14:24:15,844 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 14:24:15,846 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 14:24:15,848 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 14:24:15,849 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 14:24:15,851 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 14:24:15,852 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 14:24:15,856 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 14:24:15,857 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 14:24:15,857 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 14:24:15,858 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 14:24:15,859 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 14:24:15,860 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 14:24:15,860 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 14:24:15,861 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 14:24:15,862 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 14:24:15,863 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 14:24:15,865 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 14:24:15,865 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 14:24:15,866 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 14:24:15,867 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 14:24:15,867 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 14:24:15,868 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 14:24:15,869 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 14:24:15,870 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-64bit-Taipan_Default.epf [2022-11-23 14:24:15,898 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 14:24:15,898 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 14:24:15,899 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 14:24:15,899 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 14:24:15,900 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 14:24:15,900 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 14:24:15,900 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-23 14:24:15,901 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-23 14:24:15,901 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-23 14:24:15,901 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-23 14:24:15,901 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-23 14:24:15,902 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-23 14:24:15,902 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-23 14:24:15,902 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-23 14:24:15,902 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-23 14:24:15,903 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-23 14:24:15,903 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-23 14:24:15,903 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-23 14:24:15,904 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 14:24:15,904 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 14:24:15,904 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 14:24:15,904 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 14:24:15,904 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 14:24:15,905 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 14:24:15,905 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 14:24:15,905 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 14:24:15,905 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 14:24:15,910 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 14:24:15,910 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 14:24:15,911 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 14:24:15,911 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 14:24:15,911 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-23 14:24:15,912 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 14:24:15,912 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 14:24:15,912 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-23 14:24:15,912 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 14:24:15,913 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 14:24:15,914 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-23 14:24:15,914 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2022-11-23 14:24:16,289 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 14:24:16,327 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 14:24:16,330 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 14:24:16,331 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 14:24:16,332 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 14:24:16,333 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-23 14:24:19,458 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 14:24:20,182 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 14:24:20,182 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-23 14:24:20,243 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/data/cc563ed6d/0b859a6c6bbb4bfda69b9edbdf19424d/FLAGf461fed84 [2022-11-23 14:24:20,266 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/data/cc563ed6d/0b859a6c6bbb4bfda69b9edbdf19424d [2022-11-23 14:24:20,270 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 14:24:20,272 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 14:24:20,279 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 14:24:20,279 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 14:24:20,283 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 14:24:20,285 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:24:20" (1/1) ... [2022-11-23 14:24:20,286 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3c88eda7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:20, skipping insertion in model container [2022-11-23 14:24:20,286 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:24:20" (1/1) ... [2022-11-23 14:24:20,295 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 14:24:20,525 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 14:24:21,748 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-23 14:24:23,024 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:24:23,065 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 14:24:23,294 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-23 14:24:23,641 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:24:23,859 INFO L208 MainTranslator]: Completed translation [2022-11-23 14:24:23,859 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23 WrapperNode [2022-11-23 14:24:23,859 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 14:24:23,861 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 14:24:23,861 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 14:24:23,861 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 14:24:23,869 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,014 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,264 INFO L138 Inliner]: procedures = 247, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6358 [2022-11-23 14:24:24,265 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 14:24:24,265 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 14:24:24,266 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 14:24:24,266 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 14:24:24,277 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,278 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,333 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,334 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,547 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,590 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,616 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,640 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,672 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 14:24:24,673 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 14:24:24,673 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 14:24:24,673 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 14:24:24,674 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (1/1) ... [2022-11-23 14:24:24,681 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 14:24:24,692 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:24:24,706 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 14:24:24,720 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 14:24:24,752 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-11-23 14:24:24,752 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-11-23 14:24:24,752 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2022-11-23 14:24:24,753 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2022-11-23 14:24:24,753 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-23 14:24:24,753 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-23 14:24:24,753 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-23 14:24:24,753 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-23 14:24:24,753 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-23 14:24:24,754 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-23 14:24:24,754 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-23 14:24:24,754 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-23 14:24:24,754 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-23 14:24:24,754 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-23 14:24:24,754 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2022-11-23 14:24:24,755 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2022-11-23 14:24:24,755 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-23 14:24:24,755 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-23 14:24:24,755 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-11-23 14:24:24,755 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-11-23 14:24:24,755 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2022-11-23 14:24:24,755 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2022-11-23 14:24:24,756 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2022-11-23 14:24:24,756 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2022-11-23 14:24:24,756 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2022-11-23 14:24:24,756 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2022-11-23 14:24:24,756 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2022-11-23 14:24:24,756 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2022-11-23 14:24:24,757 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-23 14:24:24,757 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-23 14:24:24,757 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2022-11-23 14:24:24,757 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2022-11-23 14:24:24,757 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-23 14:24:24,799 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-23 14:24:24,799 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-23 14:24:24,799 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-23 14:24:24,799 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2022-11-23 14:24:24,800 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2022-11-23 14:24:24,800 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-11-23 14:24:24,800 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-11-23 14:24:24,800 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2022-11-23 14:24:24,800 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2022-11-23 14:24:24,800 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-23 14:24:24,800 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-23 14:24:24,800 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2022-11-23 14:24:24,800 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2022-11-23 14:24:24,800 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-11-23 14:24:24,801 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-11-23 14:24:24,801 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-11-23 14:24:24,801 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2022-11-23 14:24:24,801 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2022-11-23 14:24:24,801 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-23 14:24:24,801 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-23 14:24:24,801 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2022-11-23 14:24:24,801 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2022-11-23 14:24:24,801 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-23 14:24:24,801 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-23 14:24:24,802 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2022-11-23 14:24:24,802 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2022-11-23 14:24:24,802 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-11-23 14:24:24,802 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-11-23 14:24:24,802 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-23 14:24:24,802 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-23 14:24:24,802 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-11-23 14:24:24,802 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-23 14:24:24,802 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-23 14:24:24,803 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2022-11-23 14:24:24,803 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2022-11-23 14:24:24,803 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2022-11-23 14:24:24,803 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2022-11-23 14:24:24,803 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2022-11-23 14:24:24,803 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2022-11-23 14:24:24,803 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-11-23 14:24:24,803 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2022-11-23 14:24:24,803 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2022-11-23 14:24:24,803 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-23 14:24:24,804 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2022-11-23 14:24:24,804 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2022-11-23 14:24:24,804 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-23 14:24:24,804 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-23 14:24:24,804 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2022-11-23 14:24:24,804 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2022-11-23 14:24:24,804 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2022-11-23 14:24:24,804 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2022-11-23 14:24:24,804 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2022-11-23 14:24:24,805 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2022-11-23 14:24:24,805 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2022-11-23 14:24:24,805 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2022-11-23 14:24:24,805 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-23 14:24:24,805 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-23 14:24:24,805 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-23 14:24:24,805 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-23 14:24:24,805 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2022-11-23 14:24:24,810 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2022-11-23 14:24:24,810 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2022-11-23 14:24:24,811 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2022-11-23 14:24:24,811 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-23 14:24:24,811 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2022-11-23 14:24:24,811 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2022-11-23 14:24:24,812 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-11-23 14:24:24,812 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-11-23 14:24:24,812 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2022-11-23 14:24:24,812 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2022-11-23 14:24:24,812 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-23 14:24:24,813 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-23 14:24:24,813 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-23 14:24:24,813 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-23 14:24:24,813 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-23 14:24:24,813 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2022-11-23 14:24:24,814 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2022-11-23 14:24:24,814 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 14:24:24,815 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2022-11-23 14:24:24,816 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2022-11-23 14:24:24,817 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-23 14:24:24,817 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-23 14:24:24,818 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-23 14:24:24,818 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2022-11-23 14:24:24,819 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2022-11-23 14:24:24,819 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2022-11-23 14:24:24,820 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2022-11-23 14:24:24,821 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2022-11-23 14:24:24,821 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2022-11-23 14:24:24,821 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-11-23 14:24:24,821 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-11-23 14:24:24,821 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-23 14:24:24,822 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-23 14:24:24,822 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 14:24:24,822 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 14:24:24,822 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2022-11-23 14:24:24,823 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2022-11-23 14:24:24,823 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2022-11-23 14:24:24,823 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2022-11-23 14:24:25,717 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 14:24:25,721 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 14:24:26,965 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-23 14:24:35,297 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 14:24:37,388 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 14:24:37,389 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 14:24:37,396 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:24:37 BoogieIcfgContainer [2022-11-23 14:24:37,396 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 14:24:37,399 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 14:24:37,399 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 14:24:37,403 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 14:24:37,404 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 02:24:20" (1/3) ... [2022-11-23 14:24:37,405 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7100cb12 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:24:37, skipping insertion in model container [2022-11-23 14:24:37,405 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:24:23" (2/3) ... [2022-11-23 14:24:37,407 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7100cb12 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:24:37, skipping insertion in model container [2022-11-23 14:24:37,407 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:24:37" (3/3) ... [2022-11-23 14:24:37,408 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-23 14:24:37,433 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 14:24:37,433 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 14:24:37,544 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 14:24:37,553 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@74cb0046, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 14:24:37,554 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 14:24:37,567 INFO L276 IsEmpty]: Start isEmpty. Operand has 1158 states, 785 states have (on average 1.4) internal successors, (1099), 806 states have internal predecessors, (1099), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2022-11-23 14:24:37,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-23 14:24:37,587 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:37,588 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:37,589 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:37,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:37,598 INFO L85 PathProgramCache]: Analyzing trace with hash 100035787, now seen corresponding path program 1 times [2022-11-23 14:24:37,611 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:37,612 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [678785612] [2022-11-23 14:24:37,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:37,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:38,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:38,581 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-23 14:24:38,582 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:38,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [678785612] [2022-11-23 14:24:38,583 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [678785612] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:38,584 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:24:38,584 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:24:38,586 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [761941815] [2022-11-23 14:24:38,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:38,593 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:24:38,593 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:38,637 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:24:38,638 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:24:38,643 INFO L87 Difference]: Start difference. First operand has 1158 states, 785 states have (on average 1.4) internal successors, (1099), 806 states have internal predecessors, (1099), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-23 14:24:40,827 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:24:44,424 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.70s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:24:45,734 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.30s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:24:49,737 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:24:51,828 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:24:54,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:24:54,533 INFO L93 Difference]: Finished difference Result 3425 states and 5109 transitions. [2022-11-23 14:24:54,535 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:24:54,537 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 30 [2022-11-23 14:24:54,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:24:54,574 INFO L225 Difference]: With dead ends: 3425 [2022-11-23 14:24:54,575 INFO L226 Difference]: Without dead ends: 2250 [2022-11-23 14:24:54,589 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:24:54,592 INFO L413 NwaCegarLoop]: 1845 mSDtfsCounter, 1653 mSDsluCounter, 1502 mSDsCounter, 0 mSdLazyCounter, 429 mSolverCounterSat, 5 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1653 SdHoareTripleChecker+Valid, 3347 SdHoareTripleChecker+Invalid, 437 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 429 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.6s IncrementalHoareTripleChecker+Time [2022-11-23 14:24:54,594 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1653 Valid, 3347 Invalid, 437 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 429 Invalid, 3 Unknown, 0 Unchecked, 15.6s Time] [2022-11-23 14:24:54,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2250 states. [2022-11-23 14:24:54,933 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2250 to 2249. [2022-11-23 14:24:54,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2249 states, 1536 states have (on average 1.3854166666666667) internal successors, (2128), 1561 states have internal predecessors, (2128), 602 states have call successors, (602), 111 states have call predecessors, (602), 110 states have return successors, (601), 600 states have call predecessors, (601), 601 states have call successors, (601) [2022-11-23 14:24:54,969 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2249 states to 2249 states and 3331 transitions. [2022-11-23 14:24:54,973 INFO L78 Accepts]: Start accepts. Automaton has 2249 states and 3331 transitions. Word has length 30 [2022-11-23 14:24:54,973 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:24:54,974 INFO L495 AbstractCegarLoop]: Abstraction has 2249 states and 3331 transitions. [2022-11-23 14:24:54,974 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-23 14:24:54,975 INFO L276 IsEmpty]: Start isEmpty. Operand 2249 states and 3331 transitions. [2022-11-23 14:24:54,988 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-23 14:24:54,989 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:24:54,989 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:24:54,989 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 14:24:54,990 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:24:54,991 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:24:54,992 INFO L85 PathProgramCache]: Analyzing trace with hash 98804831, now seen corresponding path program 1 times [2022-11-23 14:24:54,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:24:54,993 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1769297462] [2022-11-23 14:24:54,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:24:54,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:24:55,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:24:55,845 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-23 14:24:55,845 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:24:55,846 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1769297462] [2022-11-23 14:24:55,846 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1769297462] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:24:55,847 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:24:55,847 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 14:24:55,848 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [667264014] [2022-11-23 14:24:55,848 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:24:55,850 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 14:24:55,851 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:24:55,851 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 14:24:55,852 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:24:55,852 INFO L87 Difference]: Start difference. First operand 2249 states and 3331 transitions. Second operand has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 3 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:24:57,969 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:01,191 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.06s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:05,053 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.82s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:06,580 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.53s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:09,269 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:11,347 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:13,377 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:15,397 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:15,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:25:15,515 INFO L93 Difference]: Finished difference Result 4481 states and 6648 transitions. [2022-11-23 14:25:15,517 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 14:25:15,517 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 3 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 38 [2022-11-23 14:25:15,518 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:25:15,547 INFO L225 Difference]: With dead ends: 4481 [2022-11-23 14:25:15,548 INFO L226 Difference]: Without dead ends: 4476 [2022-11-23 14:25:15,551 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:25:15,553 INFO L413 NwaCegarLoop]: 1850 mSDtfsCounter, 1659 mSDsluCounter, 3335 mSDsCounter, 0 mSdLazyCounter, 620 mSolverCounterSat, 1 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1659 SdHoareTripleChecker+Valid, 5185 SdHoareTripleChecker+Invalid, 625 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 620 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 19.4s IncrementalHoareTripleChecker+Time [2022-11-23 14:25:15,553 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1659 Valid, 5185 Invalid, 625 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 620 Invalid, 4 Unknown, 0 Unchecked, 19.4s Time] [2022-11-23 14:25:15,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4476 states. [2022-11-23 14:25:15,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4476 to 4473. [2022-11-23 14:25:15,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4473 states, 3056 states have (on average 1.3861256544502618) internal successors, (4236), 3107 states have internal predecessors, (4236), 1196 states have call successors, (1196), 221 states have call predecessors, (1196), 220 states have return successors, (1207), 1192 states have call predecessors, (1207), 1195 states have call successors, (1207) [2022-11-23 14:25:15,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4473 states to 4473 states and 6639 transitions. [2022-11-23 14:25:15,792 INFO L78 Accepts]: Start accepts. Automaton has 4473 states and 6639 transitions. Word has length 38 [2022-11-23 14:25:15,793 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:25:15,793 INFO L495 AbstractCegarLoop]: Abstraction has 4473 states and 6639 transitions. [2022-11-23 14:25:15,793 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.75) internal successors, (23), 4 states have internal predecessors, (23), 3 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:25:15,793 INFO L276 IsEmpty]: Start isEmpty. Operand 4473 states and 6639 transitions. [2022-11-23 14:25:15,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-11-23 14:25:15,811 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:25:15,812 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:25:15,812 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 14:25:15,812 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:25:15,822 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:25:15,823 INFO L85 PathProgramCache]: Analyzing trace with hash 1154610276, now seen corresponding path program 1 times [2022-11-23 14:25:15,823 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:25:15,823 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [858031677] [2022-11-23 14:25:15,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:25:15,824 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:25:16,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:25:16,299 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-11-23 14:25:16,299 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:25:16,299 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [858031677] [2022-11-23 14:25:16,299 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [858031677] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:25:16,300 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:25:16,300 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:25:16,300 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [661870908] [2022-11-23 14:25:16,300 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:25:16,301 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:25:16,301 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:25:16,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:25:16,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:25:16,302 INFO L87 Difference]: Start difference. First operand 4473 states and 6639 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-23 14:25:18,381 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:22,086 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:24,670 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.72s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:25,877 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.21s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:27,959 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:29,279 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.31s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:30,778 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.50s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:30,861 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:25:30,861 INFO L93 Difference]: Finished difference Result 7417 states and 10976 transitions. [2022-11-23 14:25:30,863 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:25:30,863 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 101 [2022-11-23 14:25:30,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:25:30,881 INFO L225 Difference]: With dead ends: 7417 [2022-11-23 14:25:30,881 INFO L226 Difference]: Without dead ends: 2951 [2022-11-23 14:25:30,898 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:25:30,899 INFO L413 NwaCegarLoop]: 1542 mSDtfsCounter, 337 mSDsluCounter, 1438 mSDsCounter, 0 mSdLazyCounter, 455 mSolverCounterSat, 2 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 337 SdHoareTripleChecker+Valid, 2980 SdHoareTripleChecker+Invalid, 460 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 455 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.4s IncrementalHoareTripleChecker+Time [2022-11-23 14:25:30,899 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [337 Valid, 2980 Invalid, 460 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 455 Invalid, 3 Unknown, 0 Unchecked, 14.4s Time] [2022-11-23 14:25:30,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2951 states. [2022-11-23 14:25:31,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2951 to 2941. [2022-11-23 14:25:31,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2941 states, 2055 states have (on average 1.405352798053528) internal successors, (2888), 2081 states have internal predecessors, (2888), 721 states have call successors, (721), 165 states have call predecessors, (721), 164 states have return successors, (726), 718 states have call predecessors, (726), 720 states have call successors, (726) [2022-11-23 14:25:31,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2941 states to 2941 states and 4335 transitions. [2022-11-23 14:25:31,043 INFO L78 Accepts]: Start accepts. Automaton has 2941 states and 4335 transitions. Word has length 101 [2022-11-23 14:25:31,043 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:25:31,044 INFO L495 AbstractCegarLoop]: Abstraction has 2941 states and 4335 transitions. [2022-11-23 14:25:31,044 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-23 14:25:31,044 INFO L276 IsEmpty]: Start isEmpty. Operand 2941 states and 4335 transitions. [2022-11-23 14:25:31,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-11-23 14:25:31,052 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:25:31,052 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:25:31,053 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 14:25:31,053 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:25:31,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:25:31,053 INFO L85 PathProgramCache]: Analyzing trace with hash 470801343, now seen corresponding path program 1 times [2022-11-23 14:25:31,054 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:25:31,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1778241684] [2022-11-23 14:25:31,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:25:31,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:25:31,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:25:31,463 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-23 14:25:31,463 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:25:31,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1778241684] [2022-11-23 14:25:31,464 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1778241684] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:25:31,464 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:25:31,464 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:25:31,464 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2113576286] [2022-11-23 14:25:31,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:25:31,466 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:25:31,467 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:25:31,468 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:25:31,468 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:25:31,468 INFO L87 Difference]: Start difference. First operand 2941 states and 4335 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-23 14:25:33,548 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:37,755 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.95s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:39,820 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:40,939 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:43,349 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.58s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:45,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:25:45,094 INFO L93 Difference]: Finished difference Result 6988 states and 10306 transitions. [2022-11-23 14:25:45,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:25:45,096 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 109 [2022-11-23 14:25:45,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:25:45,115 INFO L225 Difference]: With dead ends: 6988 [2022-11-23 14:25:45,115 INFO L226 Difference]: Without dead ends: 4280 [2022-11-23 14:25:45,126 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:25:45,127 INFO L413 NwaCegarLoop]: 1782 mSDtfsCounter, 1667 mSDsluCounter, 1468 mSDsCounter, 0 mSdLazyCounter, 405 mSolverCounterSat, 1 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1667 SdHoareTripleChecker+Valid, 3250 SdHoareTripleChecker+Invalid, 408 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 405 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.4s IncrementalHoareTripleChecker+Time [2022-11-23 14:25:45,128 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1667 Valid, 3250 Invalid, 408 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 405 Invalid, 2 Unknown, 0 Unchecked, 13.4s Time] [2022-11-23 14:25:45,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4280 states. [2022-11-23 14:25:45,321 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4280 to 4048. [2022-11-23 14:25:45,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4048 states, 2812 states have (on average 1.4004267425320056) internal successors, (3938), 2851 states have internal predecessors, (3938), 1015 states have call successors, (1015), 221 states have call predecessors, (1015), 220 states have return successors, (1020), 1011 states have call predecessors, (1020), 1014 states have call successors, (1020) [2022-11-23 14:25:45,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4048 states to 4048 states and 5973 transitions. [2022-11-23 14:25:45,349 INFO L78 Accepts]: Start accepts. Automaton has 4048 states and 5973 transitions. Word has length 109 [2022-11-23 14:25:45,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:25:45,352 INFO L495 AbstractCegarLoop]: Abstraction has 4048 states and 5973 transitions. [2022-11-23 14:25:45,352 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-23 14:25:45,352 INFO L276 IsEmpty]: Start isEmpty. Operand 4048 states and 5973 transitions. [2022-11-23 14:25:45,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2022-11-23 14:25:45,364 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:25:45,364 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:25:45,365 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 14:25:45,365 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:25:45,365 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:25:45,366 INFO L85 PathProgramCache]: Analyzing trace with hash 812249822, now seen corresponding path program 1 times [2022-11-23 14:25:45,366 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:25:45,366 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [460844960] [2022-11-23 14:25:45,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:25:45,367 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:25:45,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:25:46,360 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2022-11-23 14:25:46,361 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:25:46,361 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [460844960] [2022-11-23 14:25:46,361 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [460844960] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:25:46,361 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:25:46,361 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 14:25:46,361 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2064631217] [2022-11-23 14:25:46,361 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:25:46,362 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:25:46,362 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:25:46,362 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:25:46,362 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:25:46,363 INFO L87 Difference]: Start difference. First operand 4048 states and 5973 transitions. Second operand has 5 states, 5 states have (on average 15.8) internal successors, (79), 4 states have internal predecessors, (79), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-23 14:25:48,504 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:52,505 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:55,864 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:57,962 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:25:59,183 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.20s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:01,194 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:02,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:26:02,959 INFO L93 Difference]: Finished difference Result 7883 states and 11668 transitions. [2022-11-23 14:26:02,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 14:26:02,962 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.8) internal successors, (79), 4 states have internal predecessors, (79), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 133 [2022-11-23 14:26:02,963 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:26:02,983 INFO L225 Difference]: With dead ends: 7883 [2022-11-23 14:26:02,984 INFO L226 Difference]: Without dead ends: 4068 [2022-11-23 14:26:02,998 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:26:02,999 INFO L413 NwaCegarLoop]: 1486 mSDtfsCounter, 2 mSDsluCounter, 4445 mSDsCounter, 0 mSdLazyCounter, 826 mSolverCounterSat, 1 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 5931 SdHoareTripleChecker+Invalid, 832 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 826 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.4s IncrementalHoareTripleChecker+Time [2022-11-23 14:26:02,999 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 5931 Invalid, 832 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 826 Invalid, 5 Unknown, 0 Unchecked, 16.4s Time] [2022-11-23 14:26:03,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4068 states. [2022-11-23 14:26:03,188 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4068 to 4062. [2022-11-23 14:26:03,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4062 states, 2822 states have (on average 1.39900779588944) internal successors, (3948), 2862 states have internal predecessors, (3948), 1015 states have call successors, (1015), 221 states have call predecessors, (1015), 224 states have return successors, (1032), 1014 states have call predecessors, (1032), 1014 states have call successors, (1032) [2022-11-23 14:26:03,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4062 states to 4062 states and 5995 transitions. [2022-11-23 14:26:03,231 INFO L78 Accepts]: Start accepts. Automaton has 4062 states and 5995 transitions. Word has length 133 [2022-11-23 14:26:03,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:26:03,233 INFO L495 AbstractCegarLoop]: Abstraction has 4062 states and 5995 transitions. [2022-11-23 14:26:03,234 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.8) internal successors, (79), 4 states have internal predecessors, (79), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-23 14:26:03,235 INFO L276 IsEmpty]: Start isEmpty. Operand 4062 states and 5995 transitions. [2022-11-23 14:26:03,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2022-11-23 14:26:03,242 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:26:03,242 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:26:03,243 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 14:26:03,243 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:26:03,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:26:03,243 INFO L85 PathProgramCache]: Analyzing trace with hash -1993774181, now seen corresponding path program 1 times [2022-11-23 14:26:03,244 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:26:03,244 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [958620722] [2022-11-23 14:26:03,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:26:03,244 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:26:03,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:26:04,129 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2022-11-23 14:26:04,129 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:26:04,129 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [958620722] [2022-11-23 14:26:04,133 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [958620722] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:26:04,133 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:26:04,134 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 14:26:04,134 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [928083930] [2022-11-23 14:26:04,134 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:26:04,135 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:26:04,135 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:26:04,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:26:04,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:26:04,136 INFO L87 Difference]: Start difference. First operand 4062 states and 5995 transitions. Second operand has 5 states, 5 states have (on average 16.0) internal successors, (80), 4 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-23 14:26:06,254 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:11,024 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.41s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:12,259 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.23s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:13,826 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.57s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:17,634 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:19,718 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:21,729 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:21,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:26:21,959 INFO L93 Difference]: Finished difference Result 8171 states and 12129 transitions. [2022-11-23 14:26:21,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 14:26:21,963 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 4 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 137 [2022-11-23 14:26:21,963 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:26:21,991 INFO L225 Difference]: With dead ends: 8171 [2022-11-23 14:26:21,991 INFO L226 Difference]: Without dead ends: 4122 [2022-11-23 14:26:22,009 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:26:22,010 INFO L413 NwaCegarLoop]: 1487 mSDtfsCounter, 6 mSDsluCounter, 4442 mSDsCounter, 0 mSdLazyCounter, 832 mSolverCounterSat, 1 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 17.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 5929 SdHoareTripleChecker+Invalid, 837 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 832 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.6s IncrementalHoareTripleChecker+Time [2022-11-23 14:26:22,010 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 5929 Invalid, 837 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 832 Invalid, 4 Unknown, 0 Unchecked, 17.6s Time] [2022-11-23 14:26:22,016 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4122 states. [2022-11-23 14:26:22,201 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4122 to 4086. [2022-11-23 14:26:22,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4086 states, 2840 states have (on average 1.3964788732394366) internal successors, (3966), 2880 states have internal predecessors, (3966), 1015 states have call successors, (1015), 221 states have call predecessors, (1015), 230 states have return successors, (1080), 1020 states have call predecessors, (1080), 1014 states have call successors, (1080) [2022-11-23 14:26:22,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4086 states to 4086 states and 6061 transitions. [2022-11-23 14:26:22,225 INFO L78 Accepts]: Start accepts. Automaton has 4086 states and 6061 transitions. Word has length 137 [2022-11-23 14:26:22,225 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:26:22,225 INFO L495 AbstractCegarLoop]: Abstraction has 4086 states and 6061 transitions. [2022-11-23 14:26:22,226 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 16.0) internal successors, (80), 4 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-23 14:26:22,226 INFO L276 IsEmpty]: Start isEmpty. Operand 4086 states and 6061 transitions. [2022-11-23 14:26:22,234 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-11-23 14:26:22,235 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:26:22,235 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:26:22,235 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 14:26:22,236 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:26:22,236 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:26:22,236 INFO L85 PathProgramCache]: Analyzing trace with hash 378173278, now seen corresponding path program 1 times [2022-11-23 14:26:22,236 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:26:22,237 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1625085275] [2022-11-23 14:26:22,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:26:22,237 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:26:23,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:26:23,870 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2022-11-23 14:26:23,871 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:26:23,871 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1625085275] [2022-11-23 14:26:23,871 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1625085275] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:26:23,871 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:26:23,872 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 14:26:23,872 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [508974383] [2022-11-23 14:26:23,872 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:26:23,872 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 14:26:23,873 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:26:23,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 14:26:23,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:26:23,874 INFO L87 Difference]: Start difference. First operand 4086 states and 6061 transitions. Second operand has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-23 14:26:25,992 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:29,386 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.18s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:33,408 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:35,523 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:38,192 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.68s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:39,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:26:39,105 INFO L93 Difference]: Finished difference Result 7947 states and 11793 transitions. [2022-11-23 14:26:39,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 14:26:39,107 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 139 [2022-11-23 14:26:39,107 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:26:39,125 INFO L225 Difference]: With dead ends: 7947 [2022-11-23 14:26:39,125 INFO L226 Difference]: Without dead ends: 4096 [2022-11-23 14:26:39,137 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:26:39,138 INFO L413 NwaCegarLoop]: 1490 mSDtfsCounter, 11 mSDsluCounter, 2973 mSDsCounter, 0 mSdLazyCounter, 616 mSolverCounterSat, 2 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 4463 SdHoareTripleChecker+Invalid, 621 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 616 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:26:39,138 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 4463 Invalid, 621 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 616 Invalid, 3 Unknown, 0 Unchecked, 15.0s Time] [2022-11-23 14:26:39,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4096 states. [2022-11-23 14:26:39,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4096 to 4088. [2022-11-23 14:26:39,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4088 states, 2842 states have (on average 1.3958479943701618) internal successors, (3967), 2882 states have internal predecessors, (3967), 1015 states have call successors, (1015), 221 states have call predecessors, (1015), 230 states have return successors, (1080), 1020 states have call predecessors, (1080), 1014 states have call successors, (1080) [2022-11-23 14:26:39,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4088 states to 4088 states and 6062 transitions. [2022-11-23 14:26:39,318 INFO L78 Accepts]: Start accepts. Automaton has 4088 states and 6062 transitions. Word has length 139 [2022-11-23 14:26:39,322 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:26:39,322 INFO L495 AbstractCegarLoop]: Abstraction has 4088 states and 6062 transitions. [2022-11-23 14:26:39,323 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 2 states have call successors, (17), 2 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-23 14:26:39,323 INFO L276 IsEmpty]: Start isEmpty. Operand 4088 states and 6062 transitions. [2022-11-23 14:26:39,333 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2022-11-23 14:26:39,333 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:26:39,333 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:26:39,333 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-23 14:26:39,334 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:26:39,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:26:39,334 INFO L85 PathProgramCache]: Analyzing trace with hash 766990161, now seen corresponding path program 1 times [2022-11-23 14:26:39,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:26:39,335 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [897268613] [2022-11-23 14:26:39,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:26:39,335 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:26:45,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:26:48,134 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2022-11-23 14:26:48,134 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:26:48,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [897268613] [2022-11-23 14:26:48,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [897268613] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:26:48,135 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:26:48,135 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-23 14:26:48,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1629150719] [2022-11-23 14:26:48,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:26:48,136 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-23 14:26:48,136 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:26:48,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-23 14:26:48,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2022-11-23 14:26:48,136 INFO L87 Difference]: Start difference. First operand 4088 states and 6062 transitions. Second operand has 13 states, 10 states have (on average 8.4) internal successors, (84), 9 states have internal predecessors, (84), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2022-11-23 14:26:50,476 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:57,945 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.74s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:26:59,955 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:02,944 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.75s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:04,515 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.57s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:05,787 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.27s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:09,714 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.46s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:17,861 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:19,849 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.99s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:21,863 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:23,757 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.89s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:26,429 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:28,437 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:30,276 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.84s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:32,161 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.88s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:33,876 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.71s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:35,888 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:37,894 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:39,709 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.29s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:41,661 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.95s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:44,987 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:48,117 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:53,744 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:55,870 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:27:58,581 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.37s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:01,990 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:04,972 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:06,668 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.70s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:07,981 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.31s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:12,229 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.34s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:14,683 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.84s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:16,138 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.45s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:17,743 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.30s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:19,752 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:21,763 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:22,845 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:24,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:28:24,223 INFO L93 Difference]: Finished difference Result 10121 states and 15383 transitions. [2022-11-23 14:28:24,228 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-23 14:28:24,229 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 8.4) internal successors, (84), 9 states have internal predecessors, (84), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) Word has length 143 [2022-11-23 14:28:24,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:28:24,267 INFO L225 Difference]: With dead ends: 10121 [2022-11-23 14:28:24,268 INFO L226 Difference]: Without dead ends: 6270 [2022-11-23 14:28:24,287 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2022-11-23 14:28:24,288 INFO L413 NwaCegarLoop]: 2416 mSDtfsCounter, 682 mSDsluCounter, 25719 mSDsCounter, 0 mSdLazyCounter, 3747 mSolverCounterSat, 1 mSolverCounterUnsat, 14 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 94.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 876 SdHoareTripleChecker+Valid, 28135 SdHoareTripleChecker+Invalid, 3762 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3747 IncrementalHoareTripleChecker+Invalid, 14 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 95.5s IncrementalHoareTripleChecker+Time [2022-11-23 14:28:24,289 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [876 Valid, 28135 Invalid, 3762 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1 Valid, 3747 Invalid, 14 Unknown, 0 Unchecked, 95.5s Time] [2022-11-23 14:28:24,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6270 states. [2022-11-23 14:28:24,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6270 to 4104. [2022-11-23 14:28:24,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4104 states, 2853 states have (on average 1.3932702418506835) internal successors, (3975), 2892 states have internal predecessors, (3975), 1015 states have call successors, (1015), 221 states have call predecessors, (1015), 235 states have return successors, (1097), 1026 states have call predecessors, (1097), 1014 states have call successors, (1097) [2022-11-23 14:28:24,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4104 states to 4104 states and 6087 transitions. [2022-11-23 14:28:24,604 INFO L78 Accepts]: Start accepts. Automaton has 4104 states and 6087 transitions. Word has length 143 [2022-11-23 14:28:24,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:28:24,605 INFO L495 AbstractCegarLoop]: Abstraction has 4104 states and 6087 transitions. [2022-11-23 14:28:24,605 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 8.4) internal successors, (84), 9 states have internal predecessors, (84), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2022-11-23 14:28:24,605 INFO L276 IsEmpty]: Start isEmpty. Operand 4104 states and 6087 transitions. [2022-11-23 14:28:24,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-11-23 14:28:24,613 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:28:24,613 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:28:24,613 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-23 14:28:24,614 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:28:24,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:28:24,614 INFO L85 PathProgramCache]: Analyzing trace with hash -235970605, now seen corresponding path program 1 times [2022-11-23 14:28:24,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:28:24,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [454123284] [2022-11-23 14:28:24,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:24,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:28:25,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:25,916 INFO L134 CoverageAnalysis]: Checked inductivity of 138 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2022-11-23 14:28:25,916 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:28:25,916 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [454123284] [2022-11-23 14:28:25,916 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [454123284] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:28:25,917 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:28:25,917 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 14:28:25,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [398558381] [2022-11-23 14:28:25,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:28:25,918 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 14:28:25,918 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:28:25,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 14:28:25,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:28:25,919 INFO L87 Difference]: Start difference. First operand 4104 states and 6087 transitions. Second operand has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-23 14:28:28,030 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:32,438 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:35,579 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:37,949 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:39,970 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:40,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:28:40,168 INFO L93 Difference]: Finished difference Result 11549 states and 17706 transitions. [2022-11-23 14:28:40,170 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 14:28:40,171 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 150 [2022-11-23 14:28:40,171 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:28:40,201 INFO L225 Difference]: With dead ends: 11549 [2022-11-23 14:28:40,201 INFO L226 Difference]: Without dead ends: 7682 [2022-11-23 14:28:40,215 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:28:40,216 INFO L413 NwaCegarLoop]: 2898 mSDtfsCounter, 1130 mSDsluCounter, 3874 mSDsCounter, 0 mSdLazyCounter, 980 mSolverCounterSat, 3 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1426 SdHoareTripleChecker+Valid, 6772 SdHoareTripleChecker+Invalid, 988 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 980 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.8s IncrementalHoareTripleChecker+Time [2022-11-23 14:28:40,216 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1426 Valid, 6772 Invalid, 988 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 980 Invalid, 5 Unknown, 0 Unchecked, 13.8s Time] [2022-11-23 14:28:40,225 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7682 states. [2022-11-23 14:28:40,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7682 to 4110. [2022-11-23 14:28:40,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4110 states, 2859 states have (on average 1.3924449108079748) internal successors, (3981), 2898 states have internal predecessors, (3981), 1015 states have call successors, (1015), 221 states have call predecessors, (1015), 235 states have return successors, (1097), 1026 states have call predecessors, (1097), 1014 states have call successors, (1097) [2022-11-23 14:28:40,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4110 states to 4110 states and 6093 transitions. [2022-11-23 14:28:40,607 INFO L78 Accepts]: Start accepts. Automaton has 4110 states and 6093 transitions. Word has length 150 [2022-11-23 14:28:40,608 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:28:40,608 INFO L495 AbstractCegarLoop]: Abstraction has 4110 states and 6093 transitions. [2022-11-23 14:28:40,608 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-23 14:28:40,609 INFO L276 IsEmpty]: Start isEmpty. Operand 4110 states and 6093 transitions. [2022-11-23 14:28:40,618 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 150 [2022-11-23 14:28:40,618 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:28:40,618 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:28:40,618 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-23 14:28:40,619 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:28:40,619 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:28:40,619 INFO L85 PathProgramCache]: Analyzing trace with hash 595615837, now seen corresponding path program 1 times [2022-11-23 14:28:40,620 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:28:40,620 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2027045932] [2022-11-23 14:28:40,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:40,620 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:28:40,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:41,188 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 122 trivial. 0 not checked. [2022-11-23 14:28:41,188 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:28:41,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2027045932] [2022-11-23 14:28:41,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2027045932] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:28:41,189 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:28:41,189 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:28:41,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1182922694] [2022-11-23 14:28:41,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:28:41,190 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:28:41,190 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:28:41,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:28:41,191 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:28:41,191 INFO L87 Difference]: Start difference. First operand 4110 states and 6093 transitions. Second operand has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-23 14:28:43,290 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:46,198 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.55s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:50,360 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:51,442 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.02s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:53,863 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:55,151 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.27s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:28:56,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:28:56,553 INFO L93 Difference]: Finished difference Result 10147 states and 15380 transitions. [2022-11-23 14:28:56,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:28:56,555 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 149 [2022-11-23 14:28:56,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:28:56,579 INFO L225 Difference]: With dead ends: 10147 [2022-11-23 14:28:56,580 INFO L226 Difference]: Without dead ends: 6274 [2022-11-23 14:28:56,591 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:28:56,592 INFO L413 NwaCegarLoop]: 2366 mSDtfsCounter, 671 mSDsluCounter, 1655 mSDsCounter, 0 mSdLazyCounter, 505 mSolverCounterSat, 0 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 861 SdHoareTripleChecker+Valid, 4021 SdHoareTripleChecker+Invalid, 508 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 505 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:28:56,592 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [861 Valid, 4021 Invalid, 508 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 505 Invalid, 3 Unknown, 0 Unchecked, 15.0s Time] [2022-11-23 14:28:56,599 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6274 states. [2022-11-23 14:28:56,925 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6274 to 4113. [2022-11-23 14:28:56,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4113 states, 2862 states have (on average 1.3920335429769393) internal successors, (3984), 2901 states have internal predecessors, (3984), 1015 states have call successors, (1015), 221 states have call predecessors, (1015), 235 states have return successors, (1097), 1026 states have call predecessors, (1097), 1014 states have call successors, (1097) [2022-11-23 14:28:56,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4113 states to 4113 states and 6096 transitions. [2022-11-23 14:28:56,949 INFO L78 Accepts]: Start accepts. Automaton has 4113 states and 6096 transitions. Word has length 149 [2022-11-23 14:28:56,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:28:56,950 INFO L495 AbstractCegarLoop]: Abstraction has 4113 states and 6096 transitions. [2022-11-23 14:28:56,950 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-23 14:28:56,950 INFO L276 IsEmpty]: Start isEmpty. Operand 4113 states and 6096 transitions. [2022-11-23 14:28:56,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2022-11-23 14:28:56,958 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:28:56,959 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:28:56,959 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-23 14:28:56,959 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:28:56,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:28:56,960 INFO L85 PathProgramCache]: Analyzing trace with hash 1907382136, now seen corresponding path program 1 times [2022-11-23 14:28:56,960 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:28:56,960 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [408008239] [2022-11-23 14:28:56,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:28:56,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:28:57,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:28:57,489 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 122 trivial. 0 not checked. [2022-11-23 14:28:57,490 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-23 14:28:57,490 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [408008239] [2022-11-23 14:28:57,490 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [408008239] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:28:57,490 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:28:57,490 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 14:28:57,491 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2035068031] [2022-11-23 14:28:57,491 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:28:57,491 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:28:57,491 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-23 14:28:57,492 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:28:57,492 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:28:57,492 INFO L87 Difference]: Start difference. First operand 4113 states and 6096 transitions. Second operand has 5 states, 4 states have (on average 22.25) internal successors, (89), 4 states have internal predecessors, (89), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-23 14:28:59,609 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:29:04,556 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.13s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:29:06,565 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:29:10,622 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:29:11,935 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:29:14,299 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.97s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:29:17,317 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:29:19,546 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:29:22,429 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.03s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:29:24,309 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.03s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:29:24,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:29:24,439 INFO L93 Difference]: Finished difference Result 9976 states and 15098 transitions. [2022-11-23 14:29:24,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 14:29:24,442 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 22.25) internal successors, (89), 4 states have internal predecessors, (89), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 151 [2022-11-23 14:29:24,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:29:24,467 INFO L225 Difference]: With dead ends: 9976 [2022-11-23 14:29:24,467 INFO L226 Difference]: Without dead ends: 6100 [2022-11-23 14:29:24,480 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-11-23 14:29:24,480 INFO L413 NwaCegarLoop]: 2348 mSDtfsCounter, 667 mSDsluCounter, 6259 mSDsCounter, 0 mSdLazyCounter, 1136 mSolverCounterSat, 1 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 26.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 857 SdHoareTripleChecker+Valid, 8607 SdHoareTripleChecker+Invalid, 1142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1136 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 26.5s IncrementalHoareTripleChecker+Time [2022-11-23 14:29:24,481 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [857 Valid, 8607 Invalid, 1142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1136 Invalid, 5 Unknown, 0 Unchecked, 26.5s Time] [2022-11-23 14:29:24,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6100 states. [2022-11-23 14:29:24,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6100 to 4113. [2022-11-23 14:29:24,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4113 states, 2862 states have (on average 1.3909853249475892) internal successors, (3981), 2901 states have internal predecessors, (3981), 1015 states have call successors, (1015), 221 states have call predecessors, (1015), 235 states have return successors, (1097), 1026 states have call predecessors, (1097), 1014 states have call successors, (1097) [2022-11-23 14:29:24,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4113 states to 4113 states and 6093 transitions. [2022-11-23 14:29:24,904 INFO L78 Accepts]: Start accepts. Automaton has 4113 states and 6093 transitions. Word has length 151 [2022-11-23 14:29:24,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:29:24,905 INFO L495 AbstractCegarLoop]: Abstraction has 4113 states and 6093 transitions. [2022-11-23 14:29:24,906 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 22.25) internal successors, (89), 4 states have internal predecessors, (89), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-23 14:29:24,906 INFO L276 IsEmpty]: Start isEmpty. Operand 4113 states and 6093 transitions. [2022-11-23 14:29:24,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 156 [2022-11-23 14:29:24,915 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:29:24,916 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:29:24,916 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-23 14:29:24,916 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:29:24,916 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:29:24,917 INFO L85 PathProgramCache]: Analyzing trace with hash 157291945, now seen corresponding path program 1 times [2022-11-23 14:29:24,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-23 14:29:24,917 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [91449410] [2022-11-23 14:29:24,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:29:24,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 14:29:29,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-23 14:29:29,601 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-23 14:29:30,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-23 14:29:30,734 INFO L130 FreeRefinementEngine]: Strategy SIFA_TAIPAN found a feasible trace [2022-11-23 14:29:30,735 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-11-23 14:29:30,736 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-23 14:29:30,738 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-23 14:29:30,741 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:29:30,746 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-23 14:29:30,836 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-23 14:29:30,837 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-23 14:29:30,838 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-23 14:29:30,838 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-23 14:29:30,838 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-23 14:29:30,839 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-23 14:29:30,839 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-23 14:29:30,839 WARN L421 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-11-23 14:29:31,110 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 02:29:31 BoogieIcfgContainer [2022-11-23 14:29:31,110 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-23 14:29:31,111 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-23 14:29:31,111 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-23 14:29:31,111 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-23 14:29:31,112 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:24:37" (3/4) ... [2022-11-23 14:29:31,115 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-11-23 14:29:31,115 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-23 14:29:31,116 INFO L158 Benchmark]: Toolchain (without parser) took 310843.76ms. Allocated memory was 127.9MB in the beginning and 746.6MB in the end (delta: 618.7MB). Free memory was 73.1MB in the beginning and 155.8MB in the end (delta: -82.7MB). Peak memory consumption was 537.8MB. Max. memory is 16.1GB. [2022-11-23 14:29:31,116 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 127.9MB. Free memory is still 71.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 14:29:31,116 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3580.72ms. Allocated memory was 127.9MB in the beginning and 241.2MB in the end (delta: 113.2MB). Free memory was 73.1MB in the beginning and 149.3MB in the end (delta: -76.3MB). Peak memory consumption was 102.3MB. Max. memory is 16.1GB. [2022-11-23 14:29:31,117 INFO L158 Benchmark]: Boogie Procedure Inliner took 404.20ms. Allocated memory is still 241.2MB. Free memory was 149.3MB in the beginning and 113.7MB in the end (delta: 35.7MB). Peak memory consumption was 35.7MB. Max. memory is 16.1GB. [2022-11-23 14:29:31,118 INFO L158 Benchmark]: Boogie Preprocessor took 406.66ms. Allocated memory is still 241.2MB. Free memory was 113.7MB in the beginning and 129.5MB in the end (delta: -15.8MB). Peak memory consumption was 47.1MB. Max. memory is 16.1GB. [2022-11-23 14:29:31,118 INFO L158 Benchmark]: RCFGBuilder took 12723.61ms. Allocated memory was 241.2MB in the beginning and 545.3MB in the end (delta: 304.1MB). Free memory was 129.5MB in the beginning and 340.2MB in the end (delta: -210.7MB). Peak memory consumption was 304.2MB. Max. memory is 16.1GB. [2022-11-23 14:29:31,119 INFO L158 Benchmark]: TraceAbstraction took 293711.34ms. Allocated memory was 545.3MB in the beginning and 746.6MB in the end (delta: 201.3MB). Free memory was 340.2MB in the beginning and 155.8MB in the end (delta: 184.4MB). Peak memory consumption was 405.1MB. Max. memory is 16.1GB. [2022-11-23 14:29:31,119 INFO L158 Benchmark]: Witness Printer took 4.21ms. Allocated memory is still 746.6MB. Free memory is still 155.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 14:29:31,129 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 127.9MB. Free memory is still 71.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3580.72ms. Allocated memory was 127.9MB in the beginning and 241.2MB in the end (delta: 113.2MB). Free memory was 73.1MB in the beginning and 149.3MB in the end (delta: -76.3MB). Peak memory consumption was 102.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 404.20ms. Allocated memory is still 241.2MB. Free memory was 149.3MB in the beginning and 113.7MB in the end (delta: 35.7MB). Peak memory consumption was 35.7MB. Max. memory is 16.1GB. * Boogie Preprocessor took 406.66ms. Allocated memory is still 241.2MB. Free memory was 113.7MB in the beginning and 129.5MB in the end (delta: -15.8MB). Peak memory consumption was 47.1MB. Max. memory is 16.1GB. * RCFGBuilder took 12723.61ms. Allocated memory was 241.2MB in the beginning and 545.3MB in the end (delta: 304.1MB). Free memory was 129.5MB in the beginning and 340.2MB in the end (delta: -210.7MB). Peak memory consumption was 304.2MB. Max. memory is 16.1GB. * TraceAbstraction took 293711.34ms. Allocated memory was 545.3MB in the beginning and 746.6MB in the end (delta: 201.3MB). Free memory was 340.2MB in the beginning and 155.8MB in the end (delta: 184.4MB). Peak memory consumption was 405.1MB. Max. memory is 16.1GB. * Witness Printer took 4.21ms. Allocated memory is still 746.6MB. Free memory is still 155.8MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7474]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 9939, overapproximation of bitwiseAnd at line 9945. Possible FailurePath: [L7497] int ldv_irq_1_3 = 0; [L7498] void *ldv_irq_data_1_1 ; [L7499] int ldv_irq_1_0 = 0; [L7500] void *ldv_irq_data_1_0 ; [L7501] int ldv_state_variable_0 ; [L7502] int ldv_state_variable_2 ; [L7503] void *ldv_irq_data_1_3 ; [L7504] struct sk_buff *pcie_ops_group1 ; [L7505] struct device *mwifiex_pcie_pm_ops_group1 ; [L7506] void *ldv_irq_data_1_2 ; [L7507] struct mwifiex_adapter *pcie_ops_group0 ; [L7508] int ldv_irq_1_2 = 0; [L7509] int LDV_IN_INTERRUPT = 1; [L7510] int ldv_irq_1_1 = 0; [L7511] int ldv_irq_line_1_3 ; [L7512] int ldv_state_variable_3 ; [L7513] int ldv_irq_line_1_0 ; [L7514] int ref_cnt ; [L7515] int ldv_irq_line_1_1 ; [L7516] int ldv_state_variable_1 ; [L7517] int ldv_irq_line_1_2 ; [L7518] int ldv_state_variable_4 ; [L7519] struct pci_dev *mwifiex_pcie_group0 ; [L7687-L7689] static struct mwifiex_pcie_card_reg const mwifiex_reg_8766 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 3288U, 3292U, 3296U, 3300U, 3304U, 3308U, 3312U, 0U, 63U, 0U, 63U, 0U, 128U, 128U, 128U, 0U, 0U, 0U, 0U, 0U, 0U, 1U}; [L7690-L7693] static struct mwifiex_pcie_card_reg const mwifiex_reg_8897 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 49292U, 49244U, 49244U, 49292U, 3304U, 3308U, 3312U, 16U, 67043328U, 134152192U, 1023U, 2047U, 67108864U, 1024U, 128U, 1U, 2U, 4U, 8U, 65536U, 1U, 0U}; [L7694] static struct mwifiex_pcie_device const mwifiex_pcie8766 = {"mrvl/pcie8766_uapsta.bin", & mwifiex_reg_8766, 256U, 2048U}; [L7695] static struct mwifiex_pcie_device const mwifiex_pcie8897 = {"mrvl/pcie8897_uapsta.bin", & mwifiex_reg_8897, 256U, 4096U}; [L7779] static u8 user_rmmod ; [L7781] static struct semaphore add_remove_card_sem ; [L8010-L8012] static struct pci_device_id const mwifiex_ids[3U] = { {4523U, 11056U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8766)}, {4523U, 11064U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8897)}}; [L8013] struct pci_device_id const __mod_pci__mwifiex_ids_device_table ; [L8014-L8017] static struct dev_pm_ops const mwifiex_pcie_pm_ops = {0, 0, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L8018-L8034] static struct pci_driver mwifiex_pcie = {{0, 0}, "mwifiex_pcie", (struct pci_device_id const *)(& mwifiex_ids), & mwifiex_pcie_probe, & mwifiex_pcie_remove, 0, 0, 0, 0, & mwifiex_pcie_shutdown, 0, 0, {0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_pcie_pm_ops, 0}, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}; [L10694-L10700] static struct mwifiex_if_ops pcie_ops = {& mwifiex_pcie_init, & mwifiex_pcie_cleanup, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_pcie_enable_host_int, 0, & mwifiex_process_int_status, & mwifiex_pcie_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, (void (*)(struct mwifiex_adapter * , u16 ))0, (void (*)(struct mwifiex_adapter * ))0, & mwifiex_pcie_cmdrsp_complete, & mwifiex_pcie_event_complete, 0, & mwifiex_pcie_init_fw_port, 0, 0, 0, & mwifiex_clean_pcie_ring_buf}; [L10755] int ldv_retval_20 ; [L10757] int ldv_retval_18 ; [L10758] int ldv_retval_2 ; [L10759] int ldv_retval_5 ; [L10760] int ldv_retval_0 ; [L10762] int ldv_retval_11 ; [L10763] int ldv_retval_1 ; [L10765] int ldv_retval_15 ; [L10766] int ldv_retval_16 ; [L10771] int ldv_retval_8 ; [L10772] int ldv_retval_7 ; [L10773] int ldv_retval_19 ; [L10775] int ldv_retval_14 ; [L10776] int ldv_retval_17 ; [L10779] int ldv_retval_12 ; [L10781] int ldv_retval_6 ; [L10784] int ldv_retval_13 ; [L10785] int ldv_retval_9 ; [L10786] int ldv_retval_10 ; [L10788] int ldv_retval_4 ; [L10790] int ldv_retval_3 ; [L11484] Element set_impl[15] ; [L11485] int last_index = 0; [L11619] Set LDV_SKBS ; [L10945] struct pci_device_id *ldvarg0 ; [L10946] void *tmp ; [L10947] struct mwifiex_tx_param *ldvarg1 ; [L10948] void *tmp___0 ; [L10949] u32 ldvarg4 ; [L10950] u32 tmp___1 ; [L10951] struct mwifiex_fw_image *ldvarg3 ; [L10952] void *tmp___2 ; [L10953] u8 ldvarg2 ; [L10954] u8 tmp___3 ; [L10955] int tmp___4 ; [L10956] int tmp___5 ; [L10957] int tmp___6 ; [L10958] int tmp___7 ; [L10959] int tmp___8 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10961] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=32, tmp___0=1, unknown-#in~size-unknown=32, user_rmmod=0] [L10961] RET, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10961] tmp = ldv_zalloc(32UL) [L10962] ldvarg0 = (struct pci_device_id *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10963] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=4, tmp___0=1, unknown-#in~size-unknown=4, user_rmmod=0] [L10963] RET, EXPR ldv_zalloc(4UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10963] tmp___0 = ldv_zalloc(4UL) [L10964] ldvarg1 = (struct mwifiex_tx_param *)tmp___0 [L10965] tmp___1 = __VERIFIER_nondet_u32() [L10966] ldvarg4 = tmp___1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, user_rmmod=0] [L10967] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=32, tmp___0=1, unknown-#in~size-unknown=32, user_rmmod=0] [L10967] RET, EXPR ldv_zalloc(32UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, user_rmmod=0] [L10967] tmp___2 = ldv_zalloc(32UL) [L10968] ldvarg3 = (struct mwifiex_fw_image *)tmp___2 [L10969] tmp___3 = __VERIFIER_nondet_u8() [L10970] ldvarg2 = tmp___3 [L10971] CALL ldv_initialize() [L11638] CALL ldv_set_init(LDV_SKBS) [L11490] set = set_impl [L11491] last_index = 0 [L11638] RET ldv_set_init(LDV_SKBS) [L10971] RET ldv_initialize() [L10972] ldv_state_variable_4 = 0 [L10973] ldv_state_variable_1 = 1 [L10974] ref_cnt = 0 [L10975] ldv_state_variable_0 = 1 [L10976] ldv_state_variable_3 = 0 [L10977] ldv_state_variable_2 = 0 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=32, ldvarg3={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, tmp___2={0:0}, tmp___3=32, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=32, ldvarg3={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, tmp___2={0:0}, tmp___3=32, tmp___4=2, user_rmmod=0] [L11198] COND TRUE ldv_state_variable_0 != 0 [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: [L11209] case 1: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=32, ldvarg3={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, tmp___2={0:0}, tmp___3=32, tmp___4=2, tmp___6=1, user_rmmod=0] [L11210] COND TRUE ldv_state_variable_0 == 1 [L11211] CALL, EXPR mwifiex_pcie_init_module() [L10703] int ret ; [L10704] struct _ddebug descriptor ; [L10705] long tmp ; [L10706] struct _ddebug descriptor___0 ; [L10707] long tmp___0 ; [L10709] descriptor.modname = "mwifiex_pcie" [L10710] descriptor.function = "mwifiex_pcie_init_module" [L10711] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10712] descriptor.format = "Marvell PCIe Driver\n" [L10713] descriptor.lineno = 2464U [L10714] descriptor.flags = 0U [L10715] EXPR descriptor.flags VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor.flags=0, descriptor___0={372:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, unknown-#in~c-unknown=0, unknown-#in~exp-unknown=0, user_rmmod=0] [L7487] return (exp); [L10715] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor.flags=0, descriptor___0={372:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L10716] COND FALSE !(tmp != 0L) [L10720] CALL sema_init(& add_remove_card_sem, 1) [L7532] struct lock_class_key __key ; [L7533] struct semaphore __constr_expr_0 ; [L7535] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7536] __constr_expr_0.lock.magic = 3735899821U [L7537] __constr_expr_0.lock.owner_cpu = 4294967295U [L7538] __constr_expr_0.lock.owner = (void *)-1 [L7539] __constr_expr_0.lock.dep_map.key = 0 [L7540] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7541] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7542] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7543] __constr_expr_0.lock.dep_map.cpu = 0 [L7544] __constr_expr_0.lock.dep_map.ip = 0UL [L7545] __constr_expr_0.count = (unsigned int )val [L7546] __constr_expr_0.wait_list.next = & sem->wait_list [L7547] __constr_expr_0.wait_list.prev = & sem->wait_list [L7548] *sem = __constr_expr_0 [L7549] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7550] return; [L7550] return; [L10720] RET sema_init(& add_remove_card_sem, 1) [L10721] user_rmmod = 0U [L10722] CALL, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L11712] return __VERIFIER_nondet_int(); [L10722] RET, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10722] ret = __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10723] COND FALSE !(ret != 0) [L10726] descriptor___0.modname = "mwifiex_pcie" [L10727] descriptor___0.function = "mwifiex_pcie_init_module" [L10728] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10729] descriptor___0.format = "info: Driver registered successfully!\n" [L10730] descriptor___0.lineno = 2475U [L10731] descriptor___0.flags = 0U [L10732] EXPR descriptor___0.flags VAL [__dynamic_pr_debug(& descriptor, "mwifiex_pcie: Marvell PCIe Driver\n")=4294967319, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor___0={372:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=0, user_rmmod=0] [L10732] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, unknown-#in~c-unknown=0, unknown-#in~exp-unknown=0, user_rmmod=0] [L7487] return (exp); [L10732] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__dynamic_pr_debug(& descriptor, "mwifiex_pcie: Marvell PCIe Driver\n")=4294967319, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor___0={372:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=0, user_rmmod=0] [L10732] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L10733] COND FALSE !(tmp___0 != 0L) VAL [__dynamic_pr_debug(& descriptor, "mwifiex_pcie: Marvell PCIe Driver\n")=4294967319, __dynamic_pr_debug(& descriptor___0, "mwifiex_pcie: info: Driver registered successfully!\n")=4294967303, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor___0={372:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, tmp=0, tmp___0=0, user_rmmod=0] [L10738] return (ret); [L10738] return (ret); [L10738] return (ret); [L11211] RET, EXPR mwifiex_pcie_init_module() [L11211] ldv_retval_19 = mwifiex_pcie_init_module() [L11212] COND FALSE !(ldv_retval_19 != 0) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=32, ldvarg3={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, tmp___2={0:0}, tmp___3=32, tmp___4=2, tmp___6=1, user_rmmod=0] [L11217] COND TRUE ldv_retval_19 == 0 [L11218] ldv_state_variable_0 = 2 [L11219] ldv_state_variable_2 = 1 [L11220] CALL ldv_initialize_mwifiex_if_ops_2() [L10899] void *tmp ; [L10900] void *tmp___0 ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10902] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=6864, tmp___0=1, unknown-#in~size-unknown=6864, user_rmmod=0] [L10902] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(6864UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10902] tmp = ldv_zalloc(6864UL) [L10903] pcie_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10904] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=232, tmp___0=1, unknown-#in~size-unknown=232, user_rmmod=0] [L10904] RET, EXPR ldv_zalloc(232UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_zalloc(232UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, user_rmmod=0] [L10904] tmp___0 = ldv_zalloc(232UL) [L10905] pcie_ops_group1 = (struct sk_buff *)tmp___0 [L11220] RET ldv_initialize_mwifiex_if_ops_2() [L11221] ldv_state_variable_3 = 1 [L11222] CALL ldv_initialize_pci_driver_3() [L10890] void *tmp ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10892] CALL, EXPR ldv_zalloc(2976UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=2976, tmp___0=1, unknown-#in~size-unknown=2976, user_rmmod=0] [L10892] RET, EXPR ldv_zalloc(2976UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_zalloc(2976UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10892] tmp = ldv_zalloc(2976UL) [L10893] mwifiex_pcie_group0 = (struct pci_dev *)tmp [L11222] RET ldv_initialize_pci_driver_3() [L11223] ldv_state_variable_4 = 1 [L11224] CALL ldv_dev_pm_ops_4() [L10911] void *tmp ; VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10913] CALL, EXPR ldv_zalloc(1416UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [\result={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=1416, tmp___0=1, unknown-#in~size-unknown=1416, user_rmmod=0] [L10913] RET, EXPR ldv_zalloc(1416UL) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(1416UL)={0:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10913] tmp = ldv_zalloc(1416UL) [L10914] mwifiex_pcie_pm_ops_group1 = (struct device *)tmp [L11224] RET ldv_dev_pm_ops_4() [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: [L11237] case 3: [L11280] case 4: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=32, ldvarg3={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, tmp___2={0:0}, tmp___3=32, tmp___4=4, tmp___6=1, user_rmmod=0] [L11281] COND TRUE ldv_state_variable_2 != 0 [L11282] tmp___8 = __VERIFIER_nondet_int() [L11284] case 0: [L11291] case 1: [L11298] case 2: [L11305] case 3: [L11312] case 4: [L11319] case 5: [L11326] case 6: [L11333] case 7: [L11340] case 8: [L11347] case 9: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=32, ldvarg3={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, tmp___2={0:0}, tmp___3=32, tmp___4=4, tmp___6=1, tmp___8=9, user_rmmod=0] [L11348] COND TRUE ldv_state_variable_2 == 1 [L11349] CALL mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L9904] int ret ; [L9905] u8 *firmware ; [L9906] u32 firmware_len ; [L9907] u32 offset ; [L9908] struct sk_buff *skb ; [L9909] u32 txlen ; [L9910] u32 tx_blocks ; [L9911] u32 tries ; [L9912] u32 len ; [L9913] u32 block_retry_cnt ; [L9914] struct pcie_service_card *card ; [L9915] struct mwifiex_pcie_card_reg const *reg ; [L9916] struct _ddebug descriptor ; [L9917] long tmp ; [L9918] int tmp___0 ; [L9919] u32 ireg_intr ; [L9920] struct _ddebug descriptor___0 ; [L9921] long tmp___1 ; [L9922] int tmp___2 ; [L9923] int tmp___3 ; [L9924] struct _ddebug descriptor___1 ; [L9925] long tmp___4 ; [L9927] EXPR fw->fw_buf [L9927] firmware = fw->fw_buf [L9928] EXPR fw->fw_len [L9928] firmware_len = fw->fw_len [L9929] offset = 0U [L9930] tx_blocks = 0U [L9931] block_retry_cnt = 0U [L9932] EXPR adapter->card [L9932] card = (struct pcie_service_card *)adapter->card [L9933] EXPR card->pcie.reg [L9933] reg = card->pcie.reg [L9934] COND FALSE !((unsigned long )firmware == (unsigned long )((u8 *)0U) || firmware_len == 0U) [L9939] descriptor.modname = "mwifiex_pcie" [L9940] descriptor.function = "mwifiex_prog_fw_w_helper" [L9941] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L9942] descriptor.format = "info: Downloading FW image (%d bytes)\n" [L9943] descriptor.lineno = 1857U [L9944] descriptor.flags = 0U [L9945] EXPR descriptor.flags VAL [#in~adapter={0:0}, #in~fw={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor.flags=0, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9945] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, unknown-#in~c-unknown=0, unknown-#in~exp-unknown=0, user_rmmod=0] [L7487] return (exp); [L9945] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [#in~adapter={0:0}, #in~fw={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor.flags=0, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9945] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L9946] COND FALSE !(tmp != 0L) VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, tmp=0, tx_blocks=0, user_rmmod=0] [L9951] CALL, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [#in~adapter={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8209] int tmp ; [L8210] bool tmp___0 ; VAL [#in~adapter={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] CALL, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [#in~adapter={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7823] u32 *cookie_addr ; [L7824] struct pcie_service_card *card ; [L7825] struct mwifiex_pcie_card_reg const *reg ; [L7826] struct _ddebug descriptor ; [L7827] long tmp ; [L7829] EXPR adapter->card [L7829] card = (struct pcie_service_card *)adapter->card [L7830] EXPR card->pcie.reg [L7830] reg = card->pcie.reg [L7831] EXPR reg->sleep_cookie VAL [#in~adapter={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, add_remove_card_sem={365:0}, card={375:-27}, descriptor={381:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, reg->sleep_cookie=-255, set_impl={370:0}, user_rmmod=0] [L7831] COND FALSE !((unsigned int )((unsigned char )reg->sleep_cookie) == 0U) [L7835] EXPR card->sleep_cookie_vbase VAL [#in~adapter={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, add_remove_card_sem={365:0}, card={375:-27}, card->sleep_cookie_vbase={0:0}, descriptor={381:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, user_rmmod=0] [L7835] COND FALSE !((unsigned long )card->sleep_cookie_vbase != (unsigned long )((u8 *)0U)) [L7855] return (0); [L7855] return (0); VAL [#in~adapter={0:0}, \result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, add_remove_card_sem={365:0}, card={375:-27}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, user_rmmod=0] [L8212] RET, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [#in~adapter={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_ok_to_access_hw(adapter)=0, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] tmp___0 = mwifiex_pcie_ok_to_access_hw(adapter) [L8213] COND FALSE !((int )tmp___0) VAL [#in~adapter={0:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___0=0, user_rmmod=0] [L8222] return (0); VAL [#in~adapter={0:0}, \result=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___0=0, user_rmmod=0] [L9951] RET, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_disable_host_int(adapter)=0, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, tmp=0, tx_blocks=0, user_rmmod=0] [L9951] tmp___0 = mwifiex_pcie_disable_host_int(adapter) [L9952] COND FALSE !(tmp___0 != 0) VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9958] CALL, EXPR ldv_dev_alloc_skb_14(2312U) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, unknown-#in~length-unknown=2312, user_rmmod=0] [L11450] struct sk_buff *tmp ; VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, unknown-#in~length-unknown=2312, user_rmmod=0] [L11452] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11622] void *skb ; [L11623] void *tmp___7 ; VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND FALSE !(tmp___0 != 0) [L7447] EXPR, FCALL calloc(1UL, size) [L7447] tmp = calloc(1UL, size) [L7448] p = tmp VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, calloc(1UL, size)={-18446744073709551617:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-18446744073709551617:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, unknown-#in~size-unknown=248, user_rmmod=0] [L7449] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, unknown-#in~cond-unknown=1, user_rmmod=0] [L7418] COND FALSE !(!cond) [L7449] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, calloc(1UL, size)={-18446744073709551617:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-18446744073709551617:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, unknown-#in~size-unknown=248, user_rmmod=0] [L7450] return (p); VAL [\old(last_index)=0, \result={-18446744073709551617:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, calloc(1UL, size)={-18446744073709551617:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-18446744073709551617:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, unknown-#in~size-unknown=248, user_rmmod=0] [L11625] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551617:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L11626] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, user_rmmod=0] [L11627] COND FALSE !(! skb) [L11630] CALL ldv_set_add(LDV_SKBS, skb) [L11498] int i ; [L11500] i = 0 VAL [#in~e={-18446744073709551617:0}, #in~set={0:0}, \old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11501] COND TRUE 1 VAL [#in~e={-18446744073709551617:0}, #in~set={0:0}, \old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11502] COND FALSE !(i < last_index) VAL [#in~e={-18446744073709551617:0}, #in~set={0:0}, \old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, e={-18446744073709551617:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11512] COND TRUE last_index < 15 [L11513] set_impl[last_index] = e [L11514] last_index = last_index + 1 VAL [#in~e={-18446744073709551617:0}, #in~set={0:0}, \old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, e={-18446744073709551617:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={370:0}, user_rmmod=0] [L11630] RET ldv_set_add(LDV_SKBS, skb) [L11631] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551617:0}, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, user_rmmod=0] [L11452] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_skb_alloc()={-18446744073709551617:0}, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, length=2312, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, unknown-#in~length-unknown=2312, user_rmmod=0] [L11452] tmp = ldv_skb_alloc() [L11453] return (tmp); [L9958] RET, EXPR ldv_dev_alloc_skb_14(2312U) VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, ldv_dev_alloc_skb_14(2312U)={-18446744073709551617:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9958] skb = ldv_dev_alloc_skb_14(2312U) [L9959] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9965] ireg_intr = 0U VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tx_blocks=0, user_rmmod=0] [L9966] COND FALSE !(offset >= firmware_len) [L9970] tries = 0U VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9986] COND TRUE tries <= 99U [L9973] EXPR reg->cmd_size VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, reg->cmd_size=0, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] CALL, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8046] struct pcie_service_card *card ; [L8048] EXPR adapter->card [L8048] card = (struct pcie_service_card *)adapter->card [L8049] EXPR card->pci_mmap1 [L8049] CALL, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L11765] return __VERIFIER_nondet_uint(); [L8049] RET, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L8049] *data = ioread32(card->pci_mmap1 + (unsigned long )reg) [L8050] return (0); [L9973] RET, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_read_reg(adapter, (int )reg->cmd_size, & len)=0, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, reg->cmd_size=0, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9973] ret = mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) [L9974] COND FALSE !(ret != 0) [L9979] EXPR \read(len) VAL [#in~adapter={0:0}, #in~fw={0:0}, \read(len)=-4294964983, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, ret=0, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9979] COND TRUE len != 0U [L9991] EXPR \read(len) VAL [#in~adapter={0:0}, #in~fw={0:0}, \read(len)=-4294964983, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, ret=0, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9991] COND FALSE !(len == 0U) [L9994] EXPR \read(len) VAL [#in~adapter={0:0}, #in~fw={0:0}, \read(len)=-4294964983, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, ret=0, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L9994] COND TRUE len > 2312U [L9996] \read(len) [L9997] ret = -1 VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, ret=-1, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L10076] CALL dev_kfree_skb_any(skb) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7578] FCALL __dev_kfree_skb_any(skb, 1) [L10076] RET dev_kfree_skb_any(skb) VAL [#in~adapter={0:0}, #in~fw={0:0}, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, descriptor={378:0}, descriptor___0={376:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=1, fw={0:0}, ireg_intr={375:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={377:0}, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, ret=-1, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); VAL [#in~adapter={0:0}, #in~fw={0:0}, \result=-1, __dynamic_dev_dbg(& descriptor, (struct device const *)adapter->dev, "info: Downloading FW image (%d bytes)\n", firmware_len)=4294967355, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, adapter={0:0}, adapter->dev={4294967341:4294967309}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={375:-27}, firmware={380:-379}, firmware_len=1, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={375:-67}, ret=-1, set_impl={370:0}, skb={-18446744073709551617:0}, tmp=0, tmp___0=0, tries=0, tx_blocks=0, user_rmmod=0] [L11349] RET mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L11350] ldv_state_variable_2 = 1 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=32, ldvarg3={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, tmp___2={0:0}, tmp___3=32, tmp___4=4, tmp___6=1, tmp___8=9, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=32, ldvarg3={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, tmp___2={0:0}, tmp___3=32, tmp___4=2, tmp___6=1, tmp___8=9, user_rmmod=0] [L11198] COND TRUE ldv_state_variable_0 != 0 [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=32, ldvarg3={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, tmp___2={0:0}, tmp___3=32, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=0] [L11202] COND TRUE ldv_state_variable_0 == 2 && ref_cnt == 0 [L11203] CALL mwifiex_pcie_cleanup_module() [L10743] int tmp ; [L10745] CALL, EXPR down_interruptible(& add_remove_card_sem) [L11758] return __VERIFIER_nondet_int(); [L10745] RET, EXPR down_interruptible(& add_remove_card_sem) [L10745] tmp = down_interruptible(& add_remove_card_sem) [L10746] COND FALSE !(tmp == 0) [L10750] user_rmmod = 1U [L10751] FCALL pci_unregister_driver(& mwifiex_pcie) [L11203] RET mwifiex_pcie_cleanup_module() [L11204] ldv_state_variable_0 = 3 VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2=32, ldvarg3={0:0}, ldvarg4=67, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=67, tmp___2={0:0}, tmp___3=32, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=1] [L11402] CALL ldv_check_final_state() [L11689] int tmp___7 ; [L11691] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L11580] return (last_index == 0); [L11691] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L11691] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L11692] COND FALSE !(\read(tmp___7)) VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___7=0, user_rmmod=1] [L11694] CALL ldv_error() VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] [L7474] reach_error() VAL [__mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __mod_pci__mwifiex_ids_device_table=0, __this_module={4294967360:4294967377}, add_remove_card_sem={365:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_2=0, ldv_retval_20=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie={368:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 58 procedures, 1159 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 293.2s, OverallIterations: 12, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 266.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 51 mSolverCounterUnknown, 9356 SdHoareTripleChecker+Valid, 262.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8485 mSDsluCounter, 78620 SdHoareTripleChecker+Invalid, 258.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 57110 mSDsCounter, 18 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 10551 IncrementalHoareTripleChecker+Invalid, 10620 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 18 mSolverCounterUnsat, 21510 mSDtfsCounter, 10551 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 59 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4473occurred in iteration=2, InterpolantAutomatonStates: 54, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.1s AutomataMinimizationTime, 11 MinimizatonAttempts, 10182 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 13.4s SatisfiabilityAnalysisTime, 7.3s InterpolantComputationTime, 1435 NumberOfCodeBlocks, 1435 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 1269 ConstructedInterpolants, 0 QuantifiedInterpolants, 1714 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 1012/1012 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-11-23 14:29:31,374 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2022-11-23 14:29:31,402 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-64bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 14:29:33,674 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 14:29:33,676 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 14:29:33,716 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 14:29:33,716 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 14:29:33,720 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 14:29:33,724 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 14:29:33,728 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 14:29:33,730 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 14:29:33,736 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 14:29:33,737 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 14:29:33,739 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 14:29:33,740 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 14:29:33,742 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 14:29:33,744 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 14:29:33,748 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 14:29:33,752 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 14:29:33,753 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 14:29:33,755 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 14:29:33,758 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 14:29:33,762 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 14:29:33,765 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 14:29:33,767 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 14:29:33,768 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 14:29:33,774 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 14:29:33,778 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 14:29:33,779 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 14:29:33,780 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 14:29:33,781 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 14:29:33,782 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 14:29:33,783 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 14:29:33,784 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 14:29:33,785 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 14:29:33,795 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 14:29:33,797 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 14:29:33,797 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 14:29:33,798 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 14:29:33,798 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 14:29:33,799 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 14:29:33,800 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 14:29:33,800 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 14:29:33,805 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/config/svcomp-Reach-64bit-Taipan_Bitvector.epf [2022-11-23 14:29:33,841 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 14:29:33,841 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 14:29:33,843 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 14:29:33,843 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 14:29:33,844 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 14:29:33,845 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 14:29:33,845 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-23 14:29:33,845 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-23 14:29:33,845 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-23 14:29:33,846 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-23 14:29:33,847 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-23 14:29:33,847 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-23 14:29:33,848 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 14:29:33,848 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 14:29:33,848 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 14:29:33,849 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 14:29:33,849 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 14:29:33,849 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-23 14:29:33,849 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-11-23 14:29:33,849 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-11-23 14:29:33,850 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 14:29:33,850 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 14:29:33,850 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 14:29:33,850 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 14:29:33,850 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-23 14:29:33,851 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 14:29:33,851 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 14:29:33,851 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 14:29:33,851 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 14:29:33,852 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 14:29:33,852 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2022-11-23 14:29:33,852 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-11-23 14:29:33,852 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 14:29:33,853 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-23 14:29:33,853 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-23 14:29:33,853 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2022-11-23 14:29:34,255 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 14:29:34,285 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 14:29:34,288 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 14:29:34,289 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 14:29:34,290 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 14:29:34,291 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-23 14:29:37,611 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 14:29:38,278 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 14:29:38,279 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-23 14:29:38,344 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/data/f4e59403d/8b277fa8b80b4b46b231e94da56e831f/FLAG06c384b7e [2022-11-23 14:29:38,362 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/data/f4e59403d/8b277fa8b80b4b46b231e94da56e831f [2022-11-23 14:29:38,367 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 14:29:38,368 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 14:29:38,372 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 14:29:38,373 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 14:29:38,376 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 14:29:38,377 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:29:38" (1/1) ... [2022-11-23 14:29:38,378 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@633c254d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:38, skipping insertion in model container [2022-11-23 14:29:38,379 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:29:38" (1/1) ... [2022-11-23 14:29:38,387 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 14:29:38,609 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 14:29:39,704 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-23 14:29:40,842 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:29:40,907 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-11-23 14:29:40,997 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 14:29:41,201 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-23 14:29:41,369 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:29:41,382 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 14:29:41,731 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-11-23 14:29:42,000 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 14:29:42,229 INFO L208 MainTranslator]: Completed translation [2022-11-23 14:29:42,229 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42 WrapperNode [2022-11-23 14:29:42,230 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 14:29:42,231 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 14:29:42,231 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 14:29:42,231 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 14:29:42,239 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,313 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,503 INFO L138 Inliner]: procedures = 262, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6121 [2022-11-23 14:29:42,504 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 14:29:42,506 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 14:29:42,506 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 14:29:42,506 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 14:29:42,517 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,517 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,631 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,636 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,771 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,815 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,845 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,867 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,906 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 14:29:42,907 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 14:29:42,907 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 14:29:42,907 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 14:29:42,908 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (1/1) ... [2022-11-23 14:29:42,915 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 14:29:42,926 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/z3 [2022-11-23 14:29:42,944 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 14:29:42,965 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 14:29:42,991 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-11-23 14:29:42,994 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-11-23 14:29:42,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-11-23 14:29:42,994 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2022-11-23 14:29:42,994 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2022-11-23 14:29:42,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-11-23 14:29:42,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-11-23 14:29:42,995 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-11-23 14:29:42,995 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-11-23 14:29:42,995 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-11-23 14:29:42,995 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-11-23 14:29:42,996 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-11-23 14:29:42,996 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-11-23 14:29:42,997 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-11-23 14:29:42,998 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-23 14:29:42,998 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-11-23 14:29:42,998 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-23 14:29:42,998 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-23 14:29:42,998 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2022-11-23 14:29:42,999 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2022-11-23 14:29:42,999 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-11-23 14:29:42,999 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-11-23 14:29:42,999 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-11-23 14:29:43,000 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-11-23 14:29:43,000 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2022-11-23 14:29:43,001 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2022-11-23 14:29:43,002 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2022-11-23 14:29:43,002 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2022-11-23 14:29:43,003 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2022-11-23 14:29:43,003 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2022-11-23 14:29:43,003 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2022-11-23 14:29:43,003 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2022-11-23 14:29:43,003 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-11-23 14:29:43,004 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-11-23 14:29:43,004 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2022-11-23 14:29:43,004 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2022-11-23 14:29:43,004 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-11-23 14:29:43,006 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-11-23 14:29:43,006 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-11-23 14:29:43,006 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-11-23 14:29:43,006 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2022-11-23 14:29:43,006 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2022-11-23 14:29:43,006 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-11-23 14:29:43,007 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-11-23 14:29:43,007 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2022-11-23 14:29:43,007 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2022-11-23 14:29:43,007 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-23 14:29:43,007 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-23 14:29:43,008 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2022-11-23 14:29:43,008 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2022-11-23 14:29:43,009 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-11-23 14:29:43,010 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-11-23 14:29:43,011 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-11-23 14:29:43,011 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2022-11-23 14:29:43,011 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2022-11-23 14:29:43,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-11-23 14:29:43,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-11-23 14:29:43,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-11-23 14:29:43,013 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-23 14:29:43,014 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-11-23 14:29:43,014 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-23 14:29:43,014 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2022-11-23 14:29:43,014 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2022-11-23 14:29:43,014 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-23 14:29:43,014 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2022-11-23 14:29:43,015 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2022-11-23 14:29:43,015 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-11-23 14:29:43,015 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-11-23 14:29:43,016 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-11-23 14:29:43,016 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2022-11-23 14:29:43,016 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2022-11-23 14:29:43,017 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-11-23 14:29:43,017 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-11-23 14:29:43,017 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-23 14:29:43,017 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2022-11-23 14:29:43,018 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-11-23 14:29:43,018 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-11-23 14:29:43,018 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2022-11-23 14:29:43,018 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2022-11-23 14:29:43,019 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2022-11-23 14:29:43,019 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2022-11-23 14:29:43,020 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2022-11-23 14:29:43,020 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2022-11-23 14:29:43,020 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2022-11-23 14:29:43,020 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2022-11-23 14:29:43,021 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2022-11-23 14:29:43,021 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2022-11-23 14:29:43,021 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-11-23 14:29:43,021 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-11-23 14:29:43,022 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2022-11-23 14:29:43,022 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2022-11-23 14:29:43,023 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2022-11-23 14:29:43,023 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2022-11-23 14:29:43,023 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2022-11-23 14:29:43,023 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2022-11-23 14:29:43,024 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2022-11-23 14:29:43,024 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2022-11-23 14:29:43,024 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-23 14:29:43,024 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2022-11-23 14:29:43,026 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-11-23 14:29:43,026 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-11-23 14:29:43,026 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2022-11-23 14:29:43,026 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2022-11-23 14:29:43,026 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2022-11-23 14:29:43,027 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2022-11-23 14:29:43,027 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2022-11-23 14:29:43,027 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2022-11-23 14:29:43,027 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-11-23 14:29:43,028 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-11-23 14:29:43,029 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2022-11-23 14:29:43,031 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2022-11-23 14:29:43,032 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2022-11-23 14:29:43,032 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2022-11-23 14:29:43,033 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2022-11-23 14:29:43,033 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2022-11-23 14:29:43,033 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-11-23 14:29:43,035 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-11-23 14:29:43,035 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-23 14:29:43,035 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-11-23 14:29:43,036 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-11-23 14:29:43,036 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2022-11-23 14:29:43,037 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2022-11-23 14:29:43,037 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 14:29:43,037 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2022-11-23 14:29:43,037 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2022-11-23 14:29:43,037 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-23 14:29:43,037 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2022-11-23 14:29:43,038 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-23 14:29:43,038 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2022-11-23 14:29:43,038 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2022-11-23 14:29:43,038 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2022-11-23 14:29:43,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2022-11-23 14:29:43,039 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2022-11-23 14:29:43,039 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2022-11-23 14:29:43,039 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2022-11-23 14:29:43,039 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2022-11-23 14:29:43,039 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2022-11-23 14:29:43,040 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-11-23 14:29:43,040 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-11-23 14:29:43,040 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2022-11-23 14:29:43,040 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-11-23 14:29:43,040 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 14:29:43,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 14:29:43,041 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2022-11-23 14:29:43,041 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2022-11-23 14:29:43,041 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2022-11-23 14:29:43,041 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2022-11-23 14:29:44,000 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 14:29:44,004 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 14:29:54,726 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-11-23 14:30:53,042 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 14:30:53,060 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 14:30:53,060 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 14:30:53,065 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:30:53 BoogieIcfgContainer [2022-11-23 14:30:53,065 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 14:30:53,067 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 14:30:53,068 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 14:30:53,071 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 14:30:53,072 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 02:29:38" (1/3) ... [2022-11-23 14:30:53,072 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@43ddc0ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:30:53, skipping insertion in model container [2022-11-23 14:30:53,073 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:29:42" (2/3) ... [2022-11-23 14:30:53,073 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@43ddc0ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:30:53, skipping insertion in model container [2022-11-23 14:30:53,073 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:30:53" (3/3) ... [2022-11-23 14:30:53,075 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-11-23 14:30:53,096 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 14:30:53,097 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 14:30:53,189 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 14:30:53,196 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1185815e, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 14:30:53,196 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 14:30:53,211 INFO L276 IsEmpty]: Start isEmpty. Operand has 1550 states, 1177 states have (on average 1.4129141886151233) internal successors, (1663), 1198 states have internal predecessors, (1663), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2022-11-23 14:30:53,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-23 14:30:53,242 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:30:53,243 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:30:53,244 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:30:53,249 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:30:53,250 INFO L85 PathProgramCache]: Analyzing trace with hash 1895879575, now seen corresponding path program 1 times [2022-11-23 14:30:53,272 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:30:53,273 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2146120696] [2022-11-23 14:30:53,274 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:30:53,274 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:30:53,275 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:30:53,286 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:30:53,287 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-11-23 14:30:54,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:30:54,985 INFO L263 TraceCheckSpWp]: Trace formula consists of 1381 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-23 14:30:54,994 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:30:55,155 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-23 14:30:55,156 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:30:55,156 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:30:55,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2146120696] [2022-11-23 14:30:55,157 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2146120696] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:30:55,158 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:30:55,158 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:30:55,160 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [154847475] [2022-11-23 14:30:55,161 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:30:55,166 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:30:55,167 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:30:55,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:30:55,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:30:55,204 INFO L87 Difference]: Start difference. First operand has 1550 states, 1177 states have (on average 1.4129141886151233) internal successors, (1663), 1198 states have internal predecessors, (1663), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-23 14:30:56,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:30:56,715 INFO L93 Difference]: Finished difference Result 4591 states and 6837 transitions. [2022-11-23 14:30:56,716 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:30:56,718 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 39 [2022-11-23 14:30:56,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:30:56,750 INFO L225 Difference]: With dead ends: 4591 [2022-11-23 14:30:56,750 INFO L226 Difference]: Without dead ends: 3018 [2022-11-23 14:30:56,763 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:30:56,767 INFO L413 NwaCegarLoop]: 2584 mSDtfsCounter, 2224 mSDsluCounter, 2248 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2224 SdHoareTripleChecker+Valid, 4832 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-23 14:30:56,768 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2224 Valid, 4832 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-23 14:30:56,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3018 states. [2022-11-23 14:30:56,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3018 to 3018. [2022-11-23 14:30:56,986 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3018 states, 2301 states have (on average 1.404606692742286) internal successors, (3232), 2325 states have internal predecessors, (3232), 606 states have call successors, (606), 111 states have call predecessors, (606), 110 states have return successors, (605), 605 states have call predecessors, (605), 605 states have call successors, (605) [2022-11-23 14:30:57,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3018 states to 3018 states and 4443 transitions. [2022-11-23 14:30:57,009 INFO L78 Accepts]: Start accepts. Automaton has 3018 states and 4443 transitions. Word has length 39 [2022-11-23 14:30:57,009 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:30:57,010 INFO L495 AbstractCegarLoop]: Abstraction has 3018 states and 4443 transitions. [2022-11-23 14:30:57,010 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-23 14:30:57,010 INFO L276 IsEmpty]: Start isEmpty. Operand 3018 states and 4443 transitions. [2022-11-23 14:30:57,015 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-23 14:30:57,015 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:30:57,016 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:30:57,046 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2022-11-23 14:30:57,234 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:30:57,235 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:30:57,235 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:30:57,235 INFO L85 PathProgramCache]: Analyzing trace with hash -787900593, now seen corresponding path program 1 times [2022-11-23 14:30:57,239 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:30:57,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1845493561] [2022-11-23 14:30:57,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:30:57,239 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:30:57,240 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:30:57,241 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:30:57,283 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-11-23 14:30:59,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:30:59,363 INFO L263 TraceCheckSpWp]: Trace formula consists of 1819 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-23 14:30:59,369 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:30:59,643 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-23 14:30:59,643 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:30:59,644 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:30:59,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1845493561] [2022-11-23 14:30:59,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1845493561] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:30:59,644 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:30:59,644 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 14:30:59,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [570051200] [2022-11-23 14:30:59,644 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:30:59,646 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 14:30:59,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:30:59,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 14:30:59,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 14:30:59,648 INFO L87 Difference]: Start difference. First operand 3018 states and 4443 transitions. Second operand has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:31:05,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:31:05,136 INFO L93 Difference]: Finished difference Result 6942 states and 10332 transitions. [2022-11-23 14:31:05,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 14:31:05,137 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2022-11-23 14:31:05,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:31:05,166 INFO L225 Difference]: With dead ends: 6942 [2022-11-23 14:31:05,166 INFO L226 Difference]: Without dead ends: 3934 [2022-11-23 14:31:05,180 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-23 14:31:05,181 INFO L413 NwaCegarLoop]: 3446 mSDtfsCounter, 1086 mSDsluCounter, 12560 mSDsCounter, 0 mSdLazyCounter, 556 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1296 SdHoareTripleChecker+Valid, 16006 SdHoareTripleChecker+Invalid, 556 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 556 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:31:05,181 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1296 Valid, 16006 Invalid, 556 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [0 Valid, 556 Invalid, 0 Unknown, 0 Unchecked, 5.0s Time] [2022-11-23 14:31:05,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3934 states. [2022-11-23 14:31:05,360 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3934 to 3018. [2022-11-23 14:31:05,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3018 states, 2301 states have (on average 1.4041720990873534) internal successors, (3231), 2325 states have internal predecessors, (3231), 606 states have call successors, (606), 111 states have call predecessors, (606), 110 states have return successors, (605), 605 states have call predecessors, (605), 605 states have call successors, (605) [2022-11-23 14:31:05,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3018 states to 3018 states and 4442 transitions. [2022-11-23 14:31:05,388 INFO L78 Accepts]: Start accepts. Automaton has 3018 states and 4442 transitions. Word has length 49 [2022-11-23 14:31:05,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:31:05,389 INFO L495 AbstractCegarLoop]: Abstraction has 3018 states and 4442 transitions. [2022-11-23 14:31:05,389 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:31:05,389 INFO L276 IsEmpty]: Start isEmpty. Operand 3018 states and 4442 transitions. [2022-11-23 14:31:05,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-23 14:31:05,392 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:31:05,392 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:31:05,438 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-11-23 14:31:05,606 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:05,606 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:31:05,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:31:05,606 INFO L85 PathProgramCache]: Analyzing trace with hash -1799017843, now seen corresponding path program 1 times [2022-11-23 14:31:05,608 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:31:05,609 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1738192630] [2022-11-23 14:31:05,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:31:05,609 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:05,609 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:31:05,611 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:31:05,653 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-11-23 14:31:07,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:31:07,815 INFO L263 TraceCheckSpWp]: Trace formula consists of 1819 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-23 14:31:07,819 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:31:08,256 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-23 14:31:08,256 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:31:08,257 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:31:08,257 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1738192630] [2022-11-23 14:31:08,257 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1738192630] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:31:08,257 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:31:08,257 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 14:31:08,257 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1283476329] [2022-11-23 14:31:08,257 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:31:08,258 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:31:08,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:31:08,258 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:31:08,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:31:08,259 INFO L87 Difference]: Start difference. First operand 3018 states and 4442 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:31:08,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:31:08,983 INFO L93 Difference]: Finished difference Result 9031 states and 13322 transitions. [2022-11-23 14:31:08,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 14:31:08,984 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2022-11-23 14:31:08,985 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:31:09,023 INFO L225 Difference]: With dead ends: 9031 [2022-11-23 14:31:09,023 INFO L226 Difference]: Without dead ends: 6014 [2022-11-23 14:31:09,037 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 45 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-23 14:31:09,043 INFO L413 NwaCegarLoop]: 2705 mSDtfsCounter, 2223 mSDsluCounter, 7650 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2223 SdHoareTripleChecker+Valid, 10355 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 14:31:09,045 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2223 Valid, 10355 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 14:31:09,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6014 states. [2022-11-23 14:31:09,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6014 to 6014. [2022-11-23 14:31:09,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6014 states, 4585 states have (on average 1.4045801526717556) internal successors, (6440), 4633 states have internal predecessors, (6440), 1208 states have call successors, (1208), 221 states have call predecessors, (1208), 220 states have return successors, (1219), 1207 states have call predecessors, (1219), 1207 states have call successors, (1219) [2022-11-23 14:31:09,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6014 states to 6014 states and 8867 transitions. [2022-11-23 14:31:09,462 INFO L78 Accepts]: Start accepts. Automaton has 6014 states and 8867 transitions. Word has length 49 [2022-11-23 14:31:09,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:31:09,462 INFO L495 AbstractCegarLoop]: Abstraction has 6014 states and 8867 transitions. [2022-11-23 14:31:09,463 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 14:31:09,463 INFO L276 IsEmpty]: Start isEmpty. Operand 6014 states and 8867 transitions. [2022-11-23 14:31:09,475 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-11-23 14:31:09,475 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:31:09,476 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:31:09,520 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-11-23 14:31:09,697 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:09,698 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:31:09,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:31:09,698 INFO L85 PathProgramCache]: Analyzing trace with hash 464906894, now seen corresponding path program 1 times [2022-11-23 14:31:09,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:31:09,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1213937887] [2022-11-23 14:31:09,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:31:09,700 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:09,700 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:31:09,701 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:31:09,703 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-11-23 14:31:11,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:31:11,591 INFO L263 TraceCheckSpWp]: Trace formula consists of 2135 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-23 14:31:11,596 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:31:11,710 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-23 14:31:11,713 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:31:11,713 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:31:11,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1213937887] [2022-11-23 14:31:11,713 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1213937887] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:31:11,714 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:31:11,714 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:31:11,714 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [526318748] [2022-11-23 14:31:11,714 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:31:11,715 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:31:11,715 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:31:11,715 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:31:11,715 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:31:11,716 INFO L87 Difference]: Start difference. First operand 6014 states and 8867 transitions. Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-23 14:31:12,992 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.06s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:31:13,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:31:13,680 INFO L93 Difference]: Finished difference Result 13359 states and 19675 transitions. [2022-11-23 14:31:13,680 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:31:13,681 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 117 [2022-11-23 14:31:13,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:31:13,726 INFO L225 Difference]: With dead ends: 13359 [2022-11-23 14:31:13,726 INFO L226 Difference]: Without dead ends: 7355 [2022-11-23 14:31:13,752 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:31:13,754 INFO L413 NwaCegarLoop]: 2302 mSDtfsCounter, 519 mSDsluCounter, 2192 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 519 SdHoareTripleChecker+Valid, 4494 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-23 14:31:13,755 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [519 Valid, 4494 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-23 14:31:13,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7355 states. [2022-11-23 14:31:14,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7355 to 7343. [2022-11-23 14:31:14,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7343 states, 5692 states have (on average 1.4181307097680955) internal successors, (8072), 5740 states have internal predecessors, (8072), 1361 states have call successors, (1361), 290 states have call predecessors, (1361), 289 states have return successors, (1372), 1360 states have call predecessors, (1372), 1360 states have call successors, (1372) [2022-11-23 14:31:14,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7343 states to 7343 states and 10805 transitions. [2022-11-23 14:31:14,282 INFO L78 Accepts]: Start accepts. Automaton has 7343 states and 10805 transitions. Word has length 117 [2022-11-23 14:31:14,283 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:31:14,283 INFO L495 AbstractCegarLoop]: Abstraction has 7343 states and 10805 transitions. [2022-11-23 14:31:14,284 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-11-23 14:31:14,284 INFO L276 IsEmpty]: Start isEmpty. Operand 7343 states and 10805 transitions. [2022-11-23 14:31:14,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2022-11-23 14:31:14,305 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:31:14,307 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:31:14,357 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-11-23 14:31:14,530 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:14,530 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:31:14,530 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:31:14,530 INFO L85 PathProgramCache]: Analyzing trace with hash 1053518960, now seen corresponding path program 1 times [2022-11-23 14:31:14,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:31:14,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1310606826] [2022-11-23 14:31:14,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:31:14,533 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:14,533 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:31:14,535 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:31:14,577 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-11-23 14:31:16,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:31:16,757 INFO L263 TraceCheckSpWp]: Trace formula consists of 2242 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-23 14:31:16,772 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:31:16,931 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 73 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-11-23 14:31:16,934 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:31:16,935 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:31:16,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1310606826] [2022-11-23 14:31:16,935 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1310606826] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:31:16,935 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:31:16,935 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 14:31:16,936 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [637257693] [2022-11-23 14:31:16,936 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:31:16,936 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:31:16,938 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:31:16,939 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:31:16,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:31:16,939 INFO L87 Difference]: Start difference. First operand 7343 states and 10805 transitions. Second operand has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-23 14:31:20,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:31:20,408 INFO L93 Difference]: Finished difference Result 15083 states and 22165 transitions. [2022-11-23 14:31:20,409 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 14:31:20,409 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 157 [2022-11-23 14:31:20,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:31:20,471 INFO L225 Difference]: With dead ends: 15083 [2022-11-23 14:31:20,471 INFO L226 Difference]: Without dead ends: 7747 [2022-11-23 14:31:20,498 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 153 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-23 14:31:20,499 INFO L413 NwaCegarLoop]: 4344 mSDtfsCounter, 2226 mSDsluCounter, 10934 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2226 SdHoareTripleChecker+Valid, 15278 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-11-23 14:31:20,500 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2226 Valid, 15278 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 2.9s Time] [2022-11-23 14:31:20,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7747 states. [2022-11-23 14:31:21,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7747 to 7382. [2022-11-23 14:31:21,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7382 states, 5722 states have (on average 1.4159384830478854) internal successors, (8102), 5773 states have internal predecessors, (8102), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2022-11-23 14:31:21,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7382 states to 7382 states and 10847 transitions. [2022-11-23 14:31:21,046 INFO L78 Accepts]: Start accepts. Automaton has 7382 states and 10847 transitions. Word has length 157 [2022-11-23 14:31:21,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:31:21,048 INFO L495 AbstractCegarLoop]: Abstraction has 7382 states and 10847 transitions. [2022-11-23 14:31:21,048 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 5 states have internal predecessors, (105), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-11-23 14:31:21,048 INFO L276 IsEmpty]: Start isEmpty. Operand 7382 states and 10847 transitions. [2022-11-23 14:31:21,067 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-11-23 14:31:21,067 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:31:21,068 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:31:21,118 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-11-23 14:31:21,281 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:21,282 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:31:21,282 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:31:21,282 INFO L85 PathProgramCache]: Analyzing trace with hash 1396928693, now seen corresponding path program 1 times [2022-11-23 14:31:21,284 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:31:21,284 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1335634637] [2022-11-23 14:31:21,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:31:21,285 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:21,285 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:31:21,286 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:31:21,289 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-11-23 14:31:23,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:31:23,787 INFO L263 TraceCheckSpWp]: Trace formula consists of 2299 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-23 14:31:23,793 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:31:24,004 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-11-23 14:31:24,004 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:31:24,005 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:31:24,005 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1335634637] [2022-11-23 14:31:24,005 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1335634637] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:31:24,005 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:31:24,005 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 14:31:24,006 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [166830611] [2022-11-23 14:31:24,006 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:31:24,007 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 14:31:24,007 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:31:24,007 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 14:31:24,008 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 14:31:24,008 INFO L87 Difference]: Start difference. First operand 7382 states and 10847 transitions. Second operand has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-23 14:31:26,341 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-11-23 14:31:29,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:31:29,481 INFO L93 Difference]: Finished difference Result 14905 states and 21932 transitions. [2022-11-23 14:31:29,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 14:31:29,482 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2022-11-23 14:31:29,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:31:29,515 INFO L225 Difference]: With dead ends: 14905 [2022-11-23 14:31:29,515 INFO L226 Difference]: Without dead ends: 7540 [2022-11-23 14:31:29,536 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 158 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-23 14:31:29,537 INFO L413 NwaCegarLoop]: 2450 mSDtfsCounter, 1077 mSDsluCounter, 8488 mSDsCounter, 0 mSdLazyCounter, 329 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1286 SdHoareTripleChecker+Valid, 10938 SdHoareTripleChecker+Invalid, 329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 329 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.0s IncrementalHoareTripleChecker+Time [2022-11-23 14:31:29,537 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1286 Valid, 10938 Invalid, 329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 329 Invalid, 0 Unknown, 0 Unchecked, 5.0s Time] [2022-11-23 14:31:29,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7540 states. [2022-11-23 14:31:30,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7540 to 7382. [2022-11-23 14:31:30,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7382 states, 5722 states have (on average 1.4152394267738553) internal successors, (8098), 5773 states have internal predecessors, (8098), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2022-11-23 14:31:30,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7382 states to 7382 states and 10843 transitions. [2022-11-23 14:31:30,065 INFO L78 Accepts]: Start accepts. Automaton has 7382 states and 10843 transitions. Word has length 163 [2022-11-23 14:31:30,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:31:30,066 INFO L495 AbstractCegarLoop]: Abstraction has 7382 states and 10843 transitions. [2022-11-23 14:31:30,066 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-23 14:31:30,067 INFO L276 IsEmpty]: Start isEmpty. Operand 7382 states and 10843 transitions. [2022-11-23 14:31:30,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-11-23 14:31:30,081 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:31:30,082 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:31:30,123 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-11-23 14:31:30,305 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:30,306 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:31:30,306 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:31:30,306 INFO L85 PathProgramCache]: Analyzing trace with hash -325073993, now seen corresponding path program 1 times [2022-11-23 14:31:30,308 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:31:30,308 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [927483843] [2022-11-23 14:31:30,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:31:30,308 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:30,308 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:31:30,309 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:31:30,310 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-11-23 14:31:32,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:31:32,939 INFO L263 TraceCheckSpWp]: Trace formula consists of 2299 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-23 14:31:32,944 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:31:33,169 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2022-11-23 14:31:33,169 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:31:33,169 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:31:33,169 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [927483843] [2022-11-23 14:31:33,170 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [927483843] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:31:33,170 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:31:33,170 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 14:31:33,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2086112786] [2022-11-23 14:31:33,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:31:33,171 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 14:31:33,171 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:31:33,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 14:31:33,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 14:31:33,172 INFO L87 Difference]: Start difference. First operand 7382 states and 10843 transitions. Second operand has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-23 14:31:37,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:31:37,077 INFO L93 Difference]: Finished difference Result 18817 states and 28162 transitions. [2022-11-23 14:31:37,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 14:31:37,077 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2022-11-23 14:31:37,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:31:37,124 INFO L225 Difference]: With dead ends: 18817 [2022-11-23 14:31:37,124 INFO L226 Difference]: Without dead ends: 11452 [2022-11-23 14:31:37,148 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 158 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-23 14:31:37,149 INFO L413 NwaCegarLoop]: 3513 mSDtfsCounter, 1082 mSDsluCounter, 12707 mSDsCounter, 0 mSdLazyCounter, 556 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1292 SdHoareTripleChecker+Valid, 16220 SdHoareTripleChecker+Invalid, 556 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 556 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-23 14:31:37,149 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1292 Valid, 16220 Invalid, 556 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 556 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-23 14:31:37,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11452 states. [2022-11-23 14:31:37,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11452 to 7382. [2022-11-23 14:31:37,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7382 states, 5722 states have (on average 1.4145403704998252) internal successors, (8094), 5773 states have internal predecessors, (8094), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 292 states have return successors, (1378), 1363 states have call predecessors, (1378), 1366 states have call successors, (1378) [2022-11-23 14:31:37,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7382 states to 7382 states and 10839 transitions. [2022-11-23 14:31:37,850 INFO L78 Accepts]: Start accepts. Automaton has 7382 states and 10839 transitions. Word has length 163 [2022-11-23 14:31:37,850 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:31:37,850 INFO L495 AbstractCegarLoop]: Abstraction has 7382 states and 10839 transitions. [2022-11-23 14:31:37,851 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-23 14:31:37,851 INFO L276 IsEmpty]: Start isEmpty. Operand 7382 states and 10839 transitions. [2022-11-23 14:31:37,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-11-23 14:31:37,917 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:31:37,917 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:31:37,969 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-11-23 14:31:38,137 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:38,138 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:31:38,138 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:31:38,138 INFO L85 PathProgramCache]: Analyzing trace with hash 1636500665, now seen corresponding path program 1 times [2022-11-23 14:31:38,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:31:38,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [293086001] [2022-11-23 14:31:38,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:31:38,141 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:38,141 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:31:38,166 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:31:38,209 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-11-23 14:31:40,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:31:40,994 INFO L263 TraceCheckSpWp]: Trace formula consists of 2299 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-23 14:31:40,999 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:31:41,155 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2022-11-23 14:31:41,157 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:31:41,158 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:31:41,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [293086001] [2022-11-23 14:31:41,158 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [293086001] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:31:41,158 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:31:41,158 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 14:31:41,159 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [391089828] [2022-11-23 14:31:41,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:31:41,159 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:31:41,159 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:31:41,160 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:31:41,160 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:31:41,160 INFO L87 Difference]: Start difference. First operand 7382 states and 10839 transitions. Second operand has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-23 14:31:41,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:31:41,864 INFO L93 Difference]: Finished difference Result 14827 states and 21865 transitions. [2022-11-23 14:31:41,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 14:31:41,865 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 163 [2022-11-23 14:31:41,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:31:41,896 INFO L225 Difference]: With dead ends: 14827 [2022-11-23 14:31:41,896 INFO L226 Difference]: Without dead ends: 7462 [2022-11-23 14:31:41,918 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:31:41,919 INFO L413 NwaCegarLoop]: 2251 mSDtfsCounter, 6 mSDsluCounter, 6734 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 8985 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 14:31:41,919 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 8985 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 14:31:41,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7462 states. [2022-11-23 14:31:42,446 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7462 to 7414. [2022-11-23 14:31:42,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7414 states, 5746 states have (on average 1.4128089105464672) internal successors, (8118), 5797 states have internal predecessors, (8118), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 300 states have return successors, (1442), 1371 states have call predecessors, (1442), 1366 states have call successors, (1442) [2022-11-23 14:31:42,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7414 states to 7414 states and 10927 transitions. [2022-11-23 14:31:42,486 INFO L78 Accepts]: Start accepts. Automaton has 7414 states and 10927 transitions. Word has length 163 [2022-11-23 14:31:42,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:31:42,486 INFO L495 AbstractCegarLoop]: Abstraction has 7414 states and 10927 transitions. [2022-11-23 14:31:42,487 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.0) internal successors, (105), 4 states have internal predecessors, (105), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-23 14:31:42,487 INFO L276 IsEmpty]: Start isEmpty. Operand 7414 states and 10927 transitions. [2022-11-23 14:31:42,499 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 166 [2022-11-23 14:31:42,500 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:31:42,501 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:31:42,565 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-11-23 14:31:42,713 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:42,714 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:31:42,714 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:31:42,714 INFO L85 PathProgramCache]: Analyzing trace with hash 512514198, now seen corresponding path program 1 times [2022-11-23 14:31:42,716 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:31:42,716 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [367932857] [2022-11-23 14:31:42,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:31:42,716 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:42,716 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:31:42,717 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:31:42,718 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-11-23 14:31:45,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:31:45,368 INFO L263 TraceCheckSpWp]: Trace formula consists of 2302 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-23 14:31:45,372 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:31:45,615 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2022-11-23 14:31:45,615 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:31:45,616 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:31:45,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [367932857] [2022-11-23 14:31:45,616 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [367932857] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:31:45,616 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:31:45,616 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 14:31:45,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1664770170] [2022-11-23 14:31:45,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:31:45,618 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:31:45,618 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:31:45,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:31:45,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:31:45,619 INFO L87 Difference]: Start difference. First operand 7414 states and 10927 transitions. Second operand has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-23 14:31:46,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:31:46,237 INFO L93 Difference]: Finished difference Result 14837 states and 21909 transitions. [2022-11-23 14:31:46,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 14:31:46,238 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 165 [2022-11-23 14:31:46,238 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:31:46,266 INFO L225 Difference]: With dead ends: 14837 [2022-11-23 14:31:46,266 INFO L226 Difference]: Without dead ends: 7440 [2022-11-23 14:31:46,283 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 161 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:31:46,286 INFO L413 NwaCegarLoop]: 2249 mSDtfsCounter, 2 mSDsluCounter, 6734 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 8983 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:31:46,286 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 8983 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:31:46,293 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7440 states. [2022-11-23 14:31:46,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7440 to 7434. [2022-11-23 14:31:46,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7434 states, 5760 states have (on average 1.4118055555555555) internal successors, (8132), 5813 states have internal predecessors, (8132), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 306 states have return successors, (1456), 1375 states have call predecessors, (1456), 1366 states have call successors, (1456) [2022-11-23 14:31:46,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7434 states to 7434 states and 10955 transitions. [2022-11-23 14:31:46,763 INFO L78 Accepts]: Start accepts. Automaton has 7434 states and 10955 transitions. Word has length 165 [2022-11-23 14:31:46,764 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:31:46,764 INFO L495 AbstractCegarLoop]: Abstraction has 7434 states and 10955 transitions. [2022-11-23 14:31:46,764 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.2) internal successors, (106), 4 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2022-11-23 14:31:46,764 INFO L276 IsEmpty]: Start isEmpty. Operand 7434 states and 10955 transitions. [2022-11-23 14:31:46,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2022-11-23 14:31:46,777 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:31:46,777 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:31:46,829 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-11-23 14:31:47,001 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:47,002 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:31:47,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:31:47,002 INFO L85 PathProgramCache]: Analyzing trace with hash 409548996, now seen corresponding path program 1 times [2022-11-23 14:31:47,005 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:31:47,005 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [219293085] [2022-11-23 14:31:47,005 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:31:47,005 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:47,005 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:31:47,019 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:31:47,041 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-11-23 14:31:49,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:31:49,885 INFO L263 TraceCheckSpWp]: Trace formula consists of 2328 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-23 14:31:49,889 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:31:51,205 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2022-11-23 14:31:51,205 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:31:51,206 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:31:51,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [219293085] [2022-11-23 14:31:51,206 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [219293085] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:31:51,206 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:31:51,206 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-11-23 14:31:51,206 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1057283125] [2022-11-23 14:31:51,207 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:31:51,207 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-23 14:31:51,207 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:31:51,208 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-23 14:31:51,208 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2022-11-23 14:31:51,208 INFO L87 Difference]: Start difference. First operand 7434 states and 10955 transitions. Second operand has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-23 14:31:54,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:31:54,471 INFO L93 Difference]: Finished difference Result 18955 states and 28538 transitions. [2022-11-23 14:31:54,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-23 14:31:54,473 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) Word has length 172 [2022-11-23 14:31:54,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:31:54,511 INFO L225 Difference]: With dead ends: 18955 [2022-11-23 14:31:54,512 INFO L226 Difference]: Without dead ends: 11538 [2022-11-23 14:31:54,536 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 175 GetRequests, 161 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2022-11-23 14:31:54,537 INFO L413 NwaCegarLoop]: 3625 mSDtfsCounter, 1086 mSDsluCounter, 38484 mSDsCounter, 0 mSdLazyCounter, 242 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1297 SdHoareTripleChecker+Valid, 42109 SdHoareTripleChecker+Invalid, 244 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 242 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:31:54,537 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1297 Valid, 42109 Invalid, 244 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2 Valid, 242 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2022-11-23 14:31:54,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11538 states. [2022-11-23 14:31:55,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11538 to 7458. [2022-11-23 14:31:55,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7458 states, 5778 states have (on average 1.4098303911388024) internal successors, (8146), 5829 states have internal predecessors, (8146), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-23 14:31:55,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7458 states to 7458 states and 10991 transitions. [2022-11-23 14:31:55,322 INFO L78 Accepts]: Start accepts. Automaton has 7458 states and 10991 transitions. Word has length 172 [2022-11-23 14:31:55,323 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:31:55,323 INFO L495 AbstractCegarLoop]: Abstraction has 7458 states and 10991 transitions. [2022-11-23 14:31:55,323 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 8.538461538461538) internal successors, (111), 9 states have internal predecessors, (111), 2 states have call successors, (18), 2 states have call predecessors, (18), 6 states have return successors, (17), 6 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-23 14:31:55,323 INFO L276 IsEmpty]: Start isEmpty. Operand 7458 states and 10991 transitions. [2022-11-23 14:31:55,372 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2022-11-23 14:31:55,372 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:31:55,372 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:31:55,422 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-11-23 14:31:55,572 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:55,573 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:31:55,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:31:55,574 INFO L85 PathProgramCache]: Analyzing trace with hash -112393712, now seen corresponding path program 1 times [2022-11-23 14:31:55,576 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:31:55,576 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1875206458] [2022-11-23 14:31:55,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:31:55,576 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:31:55,576 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:31:55,578 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:31:55,621 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-11-23 14:31:58,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:31:58,685 INFO L263 TraceCheckSpWp]: Trace formula consists of 2353 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-23 14:31:58,688 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:31:58,724 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2022-11-23 14:31:58,724 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:31:58,724 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:31:58,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1875206458] [2022-11-23 14:31:58,725 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1875206458] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:31:58,725 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:31:58,725 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 14:31:58,725 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [195238206] [2022-11-23 14:31:58,725 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:31:58,726 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 14:31:58,726 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:31:58,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 14:31:58,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:31:58,727 INFO L87 Difference]: Start difference. First operand 7458 states and 10991 transitions. Second operand has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-23 14:31:59,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:31:59,393 INFO L93 Difference]: Finished difference Result 19261 states and 28974 transitions. [2022-11-23 14:31:59,397 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 14:31:59,397 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 178 [2022-11-23 14:31:59,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:31:59,434 INFO L225 Difference]: With dead ends: 19261 [2022-11-23 14:31:59,435 INFO L226 Difference]: Without dead ends: 11820 [2022-11-23 14:31:59,456 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 176 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 14:31:59,457 INFO L413 NwaCegarLoop]: 3655 mSDtfsCounter, 1072 mSDsluCounter, 2436 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1279 SdHoareTripleChecker+Valid, 6091 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:31:59,458 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1279 Valid, 6091 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 14:31:59,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11820 states. [2022-11-23 14:32:00,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11820 to 7462. [2022-11-23 14:32:00,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7462 states, 5782 states have (on average 1.4095468695952957) internal successors, (8150), 5833 states have internal predecessors, (8150), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-23 14:32:00,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7462 states to 7462 states and 10995 transitions. [2022-11-23 14:32:00,301 INFO L78 Accepts]: Start accepts. Automaton has 7462 states and 10995 transitions. Word has length 178 [2022-11-23 14:32:00,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:32:00,302 INFO L495 AbstractCegarLoop]: Abstraction has 7462 states and 10995 transitions. [2022-11-23 14:32:00,302 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-11-23 14:32:00,303 INFO L276 IsEmpty]: Start isEmpty. Operand 7462 states and 10995 transitions. [2022-11-23 14:32:00,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2022-11-23 14:32:00,317 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:32:00,317 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:32:00,373 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-11-23 14:32:00,541 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:32:00,542 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:32:00,542 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:32:00,543 INFO L85 PathProgramCache]: Analyzing trace with hash 1396355311, now seen corresponding path program 1 times [2022-11-23 14:32:00,545 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:32:00,545 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [618691541] [2022-11-23 14:32:00,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:32:00,545 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:32:00,545 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:32:00,547 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:32:00,569 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2022-11-23 14:32:03,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:32:03,520 INFO L263 TraceCheckSpWp]: Trace formula consists of 2404 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-23 14:32:03,526 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:32:03,731 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2022-11-23 14:32:03,731 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:32:03,731 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:32:03,731 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [618691541] [2022-11-23 14:32:03,732 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [618691541] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:32:03,732 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:32:03,732 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 14:32:03,732 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1819381745] [2022-11-23 14:32:03,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:32:03,733 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 14:32:03,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:32:03,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 14:32:03,733 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 14:32:03,734 INFO L87 Difference]: Start difference. First operand 7462 states and 10995 transitions. Second operand has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-23 14:32:07,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:32:07,793 INFO L93 Difference]: Finished difference Result 18985 states and 28530 transitions. [2022-11-23 14:32:07,793 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 14:32:07,794 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 182 [2022-11-23 14:32:07,794 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:32:07,820 INFO L225 Difference]: With dead ends: 18985 [2022-11-23 14:32:07,821 INFO L226 Difference]: Without dead ends: 11540 [2022-11-23 14:32:07,839 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 182 GetRequests, 177 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-23 14:32:07,840 INFO L413 NwaCegarLoop]: 3515 mSDtfsCounter, 1002 mSDsluCounter, 12814 mSDsCounter, 0 mSdLazyCounter, 558 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1191 SdHoareTripleChecker+Valid, 16329 SdHoareTripleChecker+Invalid, 558 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 558 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2022-11-23 14:32:07,840 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1191 Valid, 16329 Invalid, 558 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 558 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2022-11-23 14:32:07,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11540 states. [2022-11-23 14:32:08,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11540 to 7462. [2022-11-23 14:32:08,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7462 states, 5782 states have (on average 1.408855067450709) internal successors, (8146), 5833 states have internal predecessors, (8146), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-23 14:32:08,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7462 states to 7462 states and 10991 transitions. [2022-11-23 14:32:08,567 INFO L78 Accepts]: Start accepts. Automaton has 7462 states and 10991 transitions. Word has length 182 [2022-11-23 14:32:08,568 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:32:08,568 INFO L495 AbstractCegarLoop]: Abstraction has 7462 states and 10991 transitions. [2022-11-23 14:32:08,568 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-23 14:32:08,568 INFO L276 IsEmpty]: Start isEmpty. Operand 7462 states and 10991 transitions. [2022-11-23 14:32:08,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2022-11-23 14:32:08,583 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:32:08,583 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:32:08,638 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2022-11-23 14:32:08,805 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:32:08,806 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:32:08,806 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:32:08,807 INFO L85 PathProgramCache]: Analyzing trace with hash 1458394925, now seen corresponding path program 1 times [2022-11-23 14:32:08,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:32:08,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1419099022] [2022-11-23 14:32:08,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:32:08,809 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:32:08,809 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:32:08,811 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:32:08,855 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2022-11-23 14:32:12,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:32:12,774 INFO L263 TraceCheckSpWp]: Trace formula consists of 2404 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-23 14:32:12,778 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:32:13,156 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2022-11-23 14:32:13,156 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:32:13,156 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:32:13,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1419099022] [2022-11-23 14:32:13,157 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1419099022] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:32:13,157 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:32:13,157 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 14:32:13,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [296950507] [2022-11-23 14:32:13,157 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:32:13,158 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-23 14:32:13,158 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:32:13,158 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-23 14:32:13,159 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:32:13,159 INFO L87 Difference]: Start difference. First operand 7462 states and 10991 transitions. Second operand has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-23 14:32:16,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:32:16,756 INFO L93 Difference]: Finished difference Result 23343 states and 35523 transitions. [2022-11-23 14:32:16,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-23 14:32:16,757 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 182 [2022-11-23 14:32:16,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:32:16,810 INFO L225 Difference]: With dead ends: 23343 [2022-11-23 14:32:16,810 INFO L226 Difference]: Without dead ends: 15898 [2022-11-23 14:32:16,833 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-23 14:32:16,833 INFO L413 NwaCegarLoop]: 4911 mSDtfsCounter, 2171 mSDsluCounter, 3587 mSDsCounter, 0 mSdLazyCounter, 202 mSolverCounterSat, 210 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2565 SdHoareTripleChecker+Valid, 8498 SdHoareTripleChecker+Invalid, 412 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 210 IncrementalHoareTripleChecker+Valid, 202 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2022-11-23 14:32:16,834 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2565 Valid, 8498 Invalid, 412 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [210 Valid, 202 Invalid, 0 Unknown, 0 Unchecked, 2.3s Time] [2022-11-23 14:32:16,848 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15898 states. [2022-11-23 14:32:17,638 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15898 to 7470. [2022-11-23 14:32:17,643 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7470 states, 5790 states have (on average 1.4082901554404146) internal successors, (8154), 5841 states have internal predecessors, (8154), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-23 14:32:17,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7470 states to 7470 states and 10999 transitions. [2022-11-23 14:32:17,668 INFO L78 Accepts]: Start accepts. Automaton has 7470 states and 10999 transitions. Word has length 182 [2022-11-23 14:32:17,668 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:32:17,669 INFO L495 AbstractCegarLoop]: Abstraction has 7470 states and 10999 transitions. [2022-11-23 14:32:17,669 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 29.5) internal successors, (118), 4 states have internal predecessors, (118), 3 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-11-23 14:32:17,669 INFO L276 IsEmpty]: Start isEmpty. Operand 7470 states and 10999 transitions. [2022-11-23 14:32:17,681 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 184 [2022-11-23 14:32:17,681 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:32:17,681 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:32:17,737 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2022-11-23 14:32:17,898 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:32:17,898 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:32:17,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:32:17,899 INFO L85 PathProgramCache]: Analyzing trace with hash -1049777951, now seen corresponding path program 1 times [2022-11-23 14:32:17,901 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:32:17,901 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [670705179] [2022-11-23 14:32:17,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:32:17,902 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:32:17,902 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:32:17,903 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:32:17,947 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2022-11-23 14:32:20,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 14:32:20,912 INFO L263 TraceCheckSpWp]: Trace formula consists of 2396 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-23 14:32:20,916 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 14:32:21,063 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 125 trivial. 0 not checked. [2022-11-23 14:32:21,063 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 14:32:21,063 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-23 14:32:21,063 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [670705179] [2022-11-23 14:32:21,063 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [670705179] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 14:32:21,063 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 14:32:21,064 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 14:32:21,064 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1097887453] [2022-11-23 14:32:21,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 14:32:21,064 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 14:32:21,065 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-23 14:32:21,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 14:32:21,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 14:32:21,066 INFO L87 Difference]: Start difference. First operand 7470 states and 10999 transitions. Second operand has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-23 14:32:22,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 14:32:22,369 INFO L93 Difference]: Finished difference Result 19017 states and 28558 transitions. [2022-11-23 14:32:22,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 14:32:22,371 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 183 [2022-11-23 14:32:22,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 14:32:22,401 INFO L225 Difference]: With dead ends: 19017 [2022-11-23 14:32:22,401 INFO L226 Difference]: Without dead ends: 11564 [2022-11-23 14:32:22,416 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-11-23 14:32:22,416 INFO L413 NwaCegarLoop]: 3630 mSDtfsCounter, 1067 mSDsluCounter, 9583 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1274 SdHoareTripleChecker+Valid, 13213 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 14:32:22,416 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1274 Valid, 13213 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 14:32:22,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11564 states. [2022-11-23 14:32:23,131 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11564 to 7470. [2022-11-23 14:32:23,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7470 states, 5790 states have (on average 1.4075993091537133) internal successors, (8150), 5841 states have internal predecessors, (8150), 1367 states have call successors, (1367), 293 states have call predecessors, (1367), 312 states have return successors, (1478), 1383 states have call predecessors, (1478), 1366 states have call successors, (1478) [2022-11-23 14:32:23,156 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7470 states to 7470 states and 10995 transitions. [2022-11-23 14:32:23,157 INFO L78 Accepts]: Start accepts. Automaton has 7470 states and 10995 transitions. Word has length 183 [2022-11-23 14:32:23,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 14:32:23,158 INFO L495 AbstractCegarLoop]: Abstraction has 7470 states and 10995 transitions. [2022-11-23 14:32:23,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.8) internal successors, (119), 4 states have internal predecessors, (119), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-11-23 14:32:23,158 INFO L276 IsEmpty]: Start isEmpty. Operand 7470 states and 10995 transitions. [2022-11-23 14:32:23,166 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2022-11-23 14:32:23,166 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 14:32:23,167 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 14:32:23,207 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2022-11-23 14:32:23,382 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:32:23,382 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 14:32:23,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 14:32:23,382 INFO L85 PathProgramCache]: Analyzing trace with hash 750340242, now seen corresponding path program 1 times [2022-11-23 14:32:23,384 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-23 14:32:23,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [684902694] [2022-11-23 14:32:23,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 14:32:23,385 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-23 14:32:23,385 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat [2022-11-23 14:32:23,386 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-23 14:32:23,387 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d9ea1824-900f-4997-aa9b-4d0b0b15bcd8/bin/utaipan-Q6hlc19bkW/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (16)] Waiting until timeout for monitored process