./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version cf1a7837 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-cf1a783 [2023-11-12 02:22:37,895 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-12 02:22:38,012 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-64bit-Automizer_Default.epf [2023-11-12 02:22:38,019 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-12 02:22:38,019 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-12 02:22:38,055 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-12 02:22:38,056 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-12 02:22:38,057 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-12 02:22:38,058 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-12 02:22:38,064 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-12 02:22:38,068 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-12 02:22:38,068 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-12 02:22:38,069 INFO L153 SettingsManager]: * Use SBE=true [2023-11-12 02:22:38,071 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-12 02:22:38,071 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-12 02:22:38,072 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-12 02:22:38,072 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-12 02:22:38,073 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-12 02:22:38,073 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-12 02:22:38,074 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-12 02:22:38,074 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-12 02:22:38,075 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-12 02:22:38,076 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-12 02:22:38,076 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-12 02:22:38,077 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-12 02:22:38,077 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:22:38,078 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-12 02:22:38,078 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-12 02:22:38,079 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-12 02:22:38,079 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-12 02:22:38,080 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-12 02:22:38,081 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-12 02:22:38,081 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-12 02:22:38,081 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-12 02:22:38,082 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-12 02:22:38,082 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-12 02:22:38,082 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2023-11-12 02:22:38,421 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-12 02:22:38,458 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-12 02:22:38,461 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-12 02:22:38,463 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-12 02:22:38,464 INFO L274 PluginConnector]: CDTParser initialized [2023-11-12 02:22:38,465 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2023-11-12 02:22:41,832 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-12 02:22:42,480 INFO L384 CDTParser]: Found 1 translation units. [2023-11-12 02:22:42,481 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2023-11-12 02:22:42,529 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/data/cb98a0e21/346d03eb67e04c348041463c5d9a3007/FLAG1bcc27a57 [2023-11-12 02:22:42,547 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/data/cb98a0e21/346d03eb67e04c348041463c5d9a3007 [2023-11-12 02:22:42,552 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-12 02:22:42,554 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-12 02:22:42,557 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-12 02:22:42,559 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-12 02:22:42,564 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-12 02:22:42,565 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:22:42" (1/1) ... [2023-11-12 02:22:42,566 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@39d24e2f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:42, skipping insertion in model container [2023-11-12 02:22:42,567 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:22:42" (1/1) ... [2023-11-12 02:22:42,720 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-12 02:22:43,853 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2023-11-12 02:22:44,668 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:22:44,712 INFO L202 MainTranslator]: Completed pre-run [2023-11-12 02:22:44,985 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [7172] [2023-11-12 02:22:44,987 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; decl %0": "+m" (v->counter)); [7179] [2023-11-12 02:22:45,001 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2023-11-12 02:22:45,192 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:22:45,303 WARN L672 CHandler]: The function __VERIFIER_nondet_u8 is called, but not defined or handled by StandardFunctionHandler. [2023-11-12 02:22:45,312 INFO L206 MainTranslator]: Completed translation [2023-11-12 02:22:45,313 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45 WrapperNode [2023-11-12 02:22:45,313 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-12 02:22:45,315 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-12 02:22:45,315 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-12 02:22:45,315 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-12 02:22:45,323 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,450 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,600 INFO L138 Inliner]: procedures = 157, calls = 1237, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2444 [2023-11-12 02:22:45,600 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-12 02:22:45,601 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-12 02:22:45,602 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-12 02:22:45,602 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-12 02:22:45,613 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,613 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,662 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,664 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,773 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,787 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,802 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,834 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,861 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-12 02:22:45,869 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-12 02:22:45,869 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-12 02:22:45,870 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-12 02:22:45,870 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (1/1) ... [2023-11-12 02:22:45,877 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:22:45,892 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/z3 [2023-11-12 02:22:45,911 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-12 02:22:45,940 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_575a5e41-5605-4320-a377-b425b99629fb/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-12 02:22:45,960 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2023-11-12 02:22:45,960 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2023-11-12 02:22:45,961 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2023-11-12 02:22:45,961 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2023-11-12 02:22:45,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2023-11-12 02:22:45,961 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2023-11-12 02:22:45,961 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2023-11-12 02:22:45,962 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2023-11-12 02:22:45,962 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2023-11-12 02:22:45,962 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2023-11-12 02:22:45,962 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2023-11-12 02:22:45,962 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2023-11-12 02:22:45,964 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2023-11-12 02:22:45,964 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2023-11-12 02:22:45,964 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2023-11-12 02:22:45,965 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2023-11-12 02:22:45,965 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2023-11-12 02:22:45,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2023-11-12 02:22:45,965 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2023-11-12 02:22:45,965 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2023-11-12 02:22:45,965 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2023-11-12 02:22:45,965 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2023-11-12 02:22:45,966 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2023-11-12 02:22:45,966 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2023-11-12 02:22:45,966 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2023-11-12 02:22:45,967 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2023-11-12 02:22:45,967 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2023-11-12 02:22:45,967 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2023-11-12 02:22:45,967 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2023-11-12 02:22:45,967 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2023-11-12 02:22:45,969 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2023-11-12 02:22:45,969 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2023-11-12 02:22:45,969 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2023-11-12 02:22:45,969 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2023-11-12 02:22:45,970 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2023-11-12 02:22:45,970 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2023-11-12 02:22:45,971 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2023-11-12 02:22:45,971 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2023-11-12 02:22:45,971 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2023-11-12 02:22:45,971 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2023-11-12 02:22:45,971 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2023-11-12 02:22:45,971 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2023-11-12 02:22:45,972 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2023-11-12 02:22:45,972 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2023-11-12 02:22:45,972 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2023-11-12 02:22:45,972 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_dev_dbg [2023-11-12 02:22:45,972 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_dev_dbg [2023-11-12 02:22:45,972 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_pr_debug [2023-11-12 02:22:45,973 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_pr_debug [2023-11-12 02:22:45,973 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2023-11-12 02:22:45,973 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2023-11-12 02:22:45,973 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2023-11-12 02:22:45,973 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2023-11-12 02:22:45,973 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2023-11-12 02:22:45,974 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2023-11-12 02:22:45,974 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2023-11-12 02:22:45,974 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2023-11-12 02:22:45,974 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2023-11-12 02:22:45,974 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2023-11-12 02:22:45,974 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2023-11-12 02:22:45,975 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2023-11-12 02:22:45,975 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2023-11-12 02:22:45,975 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-12 02:22:45,975 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2023-11-12 02:22:45,975 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2023-11-12 02:22:45,975 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-11-12 02:22:45,976 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2023-11-12 02:22:45,977 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2023-11-12 02:22:45,977 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2023-11-12 02:22:45,978 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2023-11-12 02:22:45,978 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2023-11-12 02:22:45,978 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2023-11-12 02:22:45,978 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2023-11-12 02:22:45,979 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2023-11-12 02:22:45,979 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2023-11-12 02:22:45,980 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2023-11-12 02:22:45,980 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-11-12 02:22:45,980 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2023-11-12 02:22:45,980 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2023-11-12 02:22:45,980 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2023-11-12 02:22:45,981 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2023-11-12 02:22:45,981 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2023-11-12 02:22:45,981 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2023-11-12 02:22:45,981 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2023-11-12 02:22:45,981 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2023-11-12 02:22:45,982 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2023-11-12 02:22:45,982 INFO L130 BoogieDeclarations]: Found specification of procedure dev_warn [2023-11-12 02:22:45,982 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_warn [2023-11-12 02:22:45,982 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-12 02:22:45,982 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2023-11-12 02:22:45,982 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2023-11-12 02:22:45,983 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2023-11-12 02:22:45,983 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2023-11-12 02:22:45,984 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2023-11-12 02:22:45,984 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2023-11-12 02:22:45,984 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2023-11-12 02:22:45,984 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2023-11-12 02:22:45,984 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2023-11-12 02:22:45,984 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2023-11-12 02:22:45,984 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-12 02:22:45,985 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-12 02:22:45,985 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2023-11-12 02:22:45,985 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2023-11-12 02:22:46,563 INFO L236 CfgBuilder]: Building ICFG [2023-11-12 02:22:46,565 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-12 02:22:46,676 INFO L770 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2023-11-12 02:22:51,806 INFO L277 CfgBuilder]: Performing block encoding [2023-11-12 02:22:51,830 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-12 02:22:51,831 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-12 02:22:51,836 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:22:51 BoogieIcfgContainer [2023-11-12 02:22:51,836 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-12 02:22:51,840 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-12 02:22:51,840 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-12 02:22:51,844 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-12 02:22:51,844 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.11 02:22:42" (1/3) ... [2023-11-12 02:22:51,845 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8187747 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:22:51, skipping insertion in model container [2023-11-12 02:22:51,846 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:22:45" (2/3) ... [2023-11-12 02:22:51,848 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8187747 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:22:51, skipping insertion in model container [2023-11-12 02:22:51,849 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:22:51" (3/3) ... [2023-11-12 02:22:51,850 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2023-11-12 02:22:51,873 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-12 02:22:51,874 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-12 02:22:51,994 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-12 02:22:52,004 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@43eaba8e, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-12 02:22:52,005 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-12 02:22:52,018 INFO L276 IsEmpty]: Start isEmpty. Operand has 782 states, 564 states have (on average 1.3528368794326242) internal successors, (763), 577 states have internal predecessors, (763), 174 states have call successors, (174), 43 states have call predecessors, (174), 42 states have return successors, (170), 167 states have call predecessors, (170), 170 states have call successors, (170) [2023-11-12 02:22:52,044 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-12 02:22:52,044 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:22:52,045 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:22:52,046 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:22:52,055 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:22:52,055 INFO L85 PathProgramCache]: Analyzing trace with hash 1636781348, now seen corresponding path program 1 times [2023-11-12 02:22:52,066 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:22:52,067 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [602884291] [2023-11-12 02:22:52,067 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:22:52,068 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:22:52,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:22:52,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:22:52,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:22:52,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-12 02:22:52,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:22:52,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-12 02:22:52,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:22:53,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-12 02:22:53,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:22:53,038 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-12 02:22:53,038 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:22:53,039 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [602884291] [2023-11-12 02:22:53,039 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [602884291] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:22:53,041 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:22:53,042 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-12 02:22:53,044 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [343939278] [2023-11-12 02:22:53,046 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:22:53,054 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-12 02:22:53,056 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:22:53,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-12 02:22:53,109 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:22:53,115 INFO L87 Difference]: Start difference. First operand has 782 states, 564 states have (on average 1.3528368794326242) internal successors, (763), 577 states have internal predecessors, (763), 174 states have call successors, (174), 43 states have call predecessors, (174), 42 states have return successors, (170), 167 states have call predecessors, (170), 170 states have call successors, (170) Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2023-11-12 02:22:55,619 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:22:57,629 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:23:02,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:23:02,371 INFO L93 Difference]: Finished difference Result 2433 states and 3554 transitions. [2023-11-12 02:23:02,373 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-12 02:23:02,375 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 45 [2023-11-12 02:23:02,375 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:23:02,421 INFO L225 Difference]: With dead ends: 2433 [2023-11-12 02:23:02,421 INFO L226 Difference]: Without dead ends: 1640 [2023-11-12 02:23:02,432 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-12 02:23:02,435 INFO L413 NwaCegarLoop]: 952 mSDtfsCounter, 1613 mSDsluCounter, 1777 mSDsCounter, 0 mSdLazyCounter, 1072 mSolverCounterSat, 823 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1761 SdHoareTripleChecker+Valid, 2729 SdHoareTripleChecker+Invalid, 1897 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 823 IncrementalHoareTripleChecker+Valid, 1072 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.8s IncrementalHoareTripleChecker+Time [2023-11-12 02:23:02,437 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1761 Valid, 2729 Invalid, 1897 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [823 Valid, 1072 Invalid, 2 Unknown, 0 Unchecked, 8.8s Time] [2023-11-12 02:23:02,463 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1640 states. [2023-11-12 02:23:02,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1640 to 1488. [2023-11-12 02:23:02,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1488 states, 1078 states have (on average 1.3358070500927643) internal successors, (1440), 1092 states have internal predecessors, (1440), 327 states have call successors, (327), 83 states have call predecessors, (327), 82 states have return successors, (326), 320 states have call predecessors, (326), 326 states have call successors, (326) [2023-11-12 02:23:02,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1488 states to 1488 states and 2093 transitions. [2023-11-12 02:23:02,707 INFO L78 Accepts]: Start accepts. Automaton has 1488 states and 2093 transitions. Word has length 45 [2023-11-12 02:23:02,708 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:23:02,708 INFO L495 AbstractCegarLoop]: Abstraction has 1488 states and 2093 transitions. [2023-11-12 02:23:02,709 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2023-11-12 02:23:02,710 INFO L276 IsEmpty]: Start isEmpty. Operand 1488 states and 2093 transitions. [2023-11-12 02:23:02,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2023-11-12 02:23:02,725 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:23:02,726 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:23:02,726 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-12 02:23:02,727 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:23:02,728 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:23:02,728 INFO L85 PathProgramCache]: Analyzing trace with hash -707443587, now seen corresponding path program 1 times [2023-11-12 02:23:02,728 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:23:02,729 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1044673987] [2023-11-12 02:23:02,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:23:02,730 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:23:03,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:03,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:23:03,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:03,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-12 02:23:03,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:03,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-12 02:23:03,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:03,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-12 02:23:03,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:03,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-12 02:23:03,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:03,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-12 02:23:03,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:03,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-12 02:23:03,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:03,858 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2023-11-12 02:23:03,858 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:23:03,859 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1044673987] [2023-11-12 02:23:03,859 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1044673987] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:23:03,859 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:23:03,859 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-12 02:23:03,860 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1466593841] [2023-11-12 02:23:03,861 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:23:03,867 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-12 02:23:03,867 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:23:03,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-12 02:23:03,868 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-12 02:23:03,869 INFO L87 Difference]: Start difference. First operand 1488 states and 2093 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-12 02:23:06,269 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:23:08,275 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:23:12,220 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:23:14,226 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:23:18,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:23:18,006 INFO L93 Difference]: Finished difference Result 4741 states and 6775 transitions. [2023-11-12 02:23:18,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-12 02:23:18,007 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 68 [2023-11-12 02:23:18,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:23:18,038 INFO L225 Difference]: With dead ends: 4741 [2023-11-12 02:23:18,039 INFO L226 Difference]: Without dead ends: 3255 [2023-11-12 02:23:18,047 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2023-11-12 02:23:18,049 INFO L413 NwaCegarLoop]: 1030 mSDtfsCounter, 1587 mSDsluCounter, 3631 mSDsCounter, 0 mSdLazyCounter, 1783 mSolverCounterSat, 789 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1728 SdHoareTripleChecker+Valid, 4661 SdHoareTripleChecker+Invalid, 2576 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 789 IncrementalHoareTripleChecker+Valid, 1783 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.7s IncrementalHoareTripleChecker+Time [2023-11-12 02:23:18,049 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1728 Valid, 4661 Invalid, 2576 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [789 Valid, 1783 Invalid, 4 Unknown, 0 Unchecked, 13.7s Time] [2023-11-12 02:23:18,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3255 states. [2023-11-12 02:23:18,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3255 to 2995. [2023-11-12 02:23:18,298 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2995 states, 2169 states have (on average 1.334716459197787) internal successors, (2895), 2205 states have internal predecessors, (2895), 649 states have call successors, (649), 165 states have call predecessors, (649), 176 states have return successors, (703), 640 states have call predecessors, (703), 648 states have call successors, (703) [2023-11-12 02:23:18,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2995 states to 2995 states and 4247 transitions. [2023-11-12 02:23:18,329 INFO L78 Accepts]: Start accepts. Automaton has 2995 states and 4247 transitions. Word has length 68 [2023-11-12 02:23:18,331 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:23:18,331 INFO L495 AbstractCegarLoop]: Abstraction has 2995 states and 4247 transitions. [2023-11-12 02:23:18,331 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-12 02:23:18,332 INFO L276 IsEmpty]: Start isEmpty. Operand 2995 states and 4247 transitions. [2023-11-12 02:23:18,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2023-11-12 02:23:18,346 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:23:18,346 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:23:18,347 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-12 02:23:18,349 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:23:18,350 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:23:18,350 INFO L85 PathProgramCache]: Analyzing trace with hash -1071087041, now seen corresponding path program 1 times [2023-11-12 02:23:18,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:23:18,353 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [795413332] [2023-11-12 02:23:18,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:23:18,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:23:18,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:18,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-12 02:23:18,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:18,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-12 02:23:18,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:18,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-12 02:23:18,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:18,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-12 02:23:18,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:18,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-12 02:23:18,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:18,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:23:18,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:18,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2023-11-12 02:23:18,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:19,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-12 02:23:19,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:19,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-12 02:23:19,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:19,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-12 02:23:19,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:19,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:23:19,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:19,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-12 02:23:19,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:19,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2023-11-12 02:23:19,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:19,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2023-11-12 02:23:19,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:19,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 121 [2023-11-12 02:23:19,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:23:19,115 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2023-11-12 02:23:19,116 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:23:19,116 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [795413332] [2023-11-12 02:23:19,116 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [795413332] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:23:19,117 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:23:19,117 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-12 02:23:19,118 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1780424248] [2023-11-12 02:23:19,123 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:23:19,124 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-12 02:23:19,124 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:23:19,125 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-12 02:23:19,126 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-12 02:23:19,127 INFO L87 Difference]: Start difference. First operand 2995 states and 4247 transitions. Second operand has 7 states, 7 states have (on average 12.571428571428571) internal successors, (88), 4 states have internal predecessors, (88), 2 states have call successors, (16), 5 states have call predecessors, (16), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2023-11-12 02:23:21,544 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:23:23,558 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:23:25,578 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:23:29,442 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:23:31,448 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:23:33,458 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers []