./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version cf1a7837 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash aa6e6fe2f0ffa3b99fe1d04a5932e9785002708e85a4e6328b8f4c31fc0bed5a --- Real Ultimate output --- This is Ultimate 0.2.3-dev-cf1a783 [2023-11-12 02:33:44,854 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-12 02:33:44,920 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/config/svcomp-Reach-64bit-Automizer_Default.epf [2023-11-12 02:33:44,926 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-12 02:33:44,927 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-12 02:33:44,954 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-12 02:33:44,955 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-12 02:33:44,956 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-12 02:33:44,957 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-12 02:33:44,958 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-12 02:33:44,959 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-12 02:33:44,959 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-12 02:33:44,960 INFO L153 SettingsManager]: * Use SBE=true [2023-11-12 02:33:44,961 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-12 02:33:44,961 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-12 02:33:44,962 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-12 02:33:44,963 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-12 02:33:44,963 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-12 02:33:44,964 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-12 02:33:44,964 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-12 02:33:44,965 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-12 02:33:44,966 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-12 02:33:44,967 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-12 02:33:44,967 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-12 02:33:44,968 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-12 02:33:44,968 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:33:44,969 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-12 02:33:44,970 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-12 02:33:44,970 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-12 02:33:44,971 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-12 02:33:44,971 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-12 02:33:44,972 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-12 02:33:44,972 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-12 02:33:44,973 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-12 02:33:44,973 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-12 02:33:44,973 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-12 02:33:44,974 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> aa6e6fe2f0ffa3b99fe1d04a5932e9785002708e85a4e6328b8f4c31fc0bed5a [2023-11-12 02:33:45,211 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-12 02:33:45,234 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-12 02:33:45,236 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-12 02:33:45,238 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-12 02:33:45,239 INFO L274 PluginConnector]: CDTParser initialized [2023-11-12 02:33:45,240 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i [2023-11-12 02:33:48,586 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-12 02:33:49,234 INFO L384 CDTParser]: Found 1 translation units. [2023-11-12 02:33:49,235 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i [2023-11-12 02:33:49,280 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/data/f2d78db31/e2ab9c0ee09146608cd118343f66e29e/FLAG2427d682d [2023-11-12 02:33:49,295 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/data/f2d78db31/e2ab9c0ee09146608cd118343f66e29e [2023-11-12 02:33:49,298 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-12 02:33:49,300 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-12 02:33:49,301 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-12 02:33:49,302 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-12 02:33:49,308 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-12 02:33:49,308 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:33:49" (1/1) ... [2023-11-12 02:33:49,310 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4b33fe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:49, skipping insertion in model container [2023-11-12 02:33:49,310 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 02:33:49" (1/1) ... [2023-11-12 02:33:49,512 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-12 02:33:50,490 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i[197338,197351] [2023-11-12 02:33:51,983 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:33:52,069 INFO L202 MainTranslator]: Completed pre-run [2023-11-12 02:33:52,200 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [6725] [2023-11-12 02:33:52,210 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i[197338,197351] [2023-11-12 02:33:52,641 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 02:33:52,767 WARN L672 CHandler]: The function __VERIFIER_nondet_u16 is called, but not defined or handled by StandardFunctionHandler. [2023-11-12 02:33:52,767 WARN L672 CHandler]: The function memcmp is called, but not defined or handled by StandardFunctionHandler. [2023-11-12 02:33:52,768 WARN L672 CHandler]: The function __VERIFIER_nondet_u8 is called, but not defined or handled by StandardFunctionHandler. [2023-11-12 02:33:52,768 WARN L672 CHandler]: The function __VERIFIER_nondet_u32 is called, but not defined or handled by StandardFunctionHandler. [2023-11-12 02:33:52,776 INFO L206 MainTranslator]: Completed translation [2023-11-12 02:33:52,777 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52 WrapperNode [2023-11-12 02:33:52,777 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-12 02:33:52,778 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-12 02:33:52,778 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-12 02:33:52,778 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-12 02:33:52,788 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:52,931 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:53,117 INFO L138 Inliner]: procedures = 270, calls = 2836, calls flagged for inlining = 111, calls inlined = 38, statements flattened = 3229 [2023-11-12 02:33:53,118 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-12 02:33:53,119 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-12 02:33:53,119 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-12 02:33:53,119 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-12 02:33:53,129 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:53,129 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:53,230 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:53,231 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:53,342 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:53,369 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:53,410 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:53,430 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:53,465 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-12 02:33:53,467 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-12 02:33:53,467 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-12 02:33:53,467 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-12 02:33:53,468 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (1/1) ... [2023-11-12 02:33:53,475 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 02:33:53,491 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/z3 [2023-11-12 02:33:53,504 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-12 02:33:53,528 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b572f6c7-f2b6-40c6-bdf3-97e309ca2b8c/bin/uautomizer-verify-uTZkv6EMXl/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-12 02:33:53,544 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2023-11-12 02:33:53,544 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2023-11-12 02:33:53,544 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_12 [2023-11-12 02:33:53,544 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_12 [2023-11-12 02:33:53,545 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_load_radio_caps [2023-11-12 02:33:53,545 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_load_radio_caps [2023-11-12 02:33:53,545 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2023-11-12 02:33:53,545 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2023-11-12 02:33:53,545 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2023-11-12 02:33:53,545 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2023-11-12 02:33:53,545 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_conf_filter [2023-11-12 02:33:53,545 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_conf_filter [2023-11-12 02:33:53,546 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_hal_load_key [2023-11-12 02:33:53,546 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_hal_load_key [2023-11-12 02:33:53,546 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_remove_interface [2023-11-12 02:33:53,546 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_remove_interface [2023-11-12 02:33:53,546 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2023-11-12 02:33:53,547 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2023-11-12 02:33:53,547 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_sta_remove [2023-11-12 02:33:53,547 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_sta_remove [2023-11-12 02:33:53,547 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2023-11-12 02:33:53,547 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2023-11-12 02:33:53,548 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_config [2023-11-12 02:33:53,548 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_config [2023-11-12 02:33:53,548 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2023-11-12 02:33:53,548 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2023-11-12 02:33:53,548 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_is_data_qos [2023-11-12 02:33:53,548 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_is_data_qos [2023-11-12 02:33:53,549 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2023-11-12 02:33:53,549 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2023-11-12 02:33:53,549 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2023-11-12 02:33:53,549 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2023-11-12 02:33:53,549 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2023-11-12 02:33:53,549 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2023-11-12 02:33:53,550 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_send_internal_mgmt_frame [2023-11-12 02:33:53,550 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_send_internal_mgmt_frame [2023-11-12 02:33:53,550 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-11-12 02:33:53,550 INFO L130 BoogieDeclarations]: Found specification of procedure memcmp [2023-11-12 02:33:53,550 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2023-11-12 02:33:53,551 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2023-11-12 02:33:53,551 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2023-11-12 02:33:53,551 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_start [2023-11-12 02:33:53,551 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_start [2023-11-12 02:33:53,551 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2023-11-12 02:33:53,551 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2023-11-12 02:33:53,552 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2023-11-12 02:33:53,552 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-11-12 02:33:53,552 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_hal_key_config [2023-11-12 02:33:53,552 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_hal_key_config [2023-11-12 02:33:53,552 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2023-11-12 02:33:53,552 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_tx [2023-11-12 02:33:53,553 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_tx [2023-11-12 02:33:53,553 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2023-11-12 02:33:53,553 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2023-11-12 02:33:53,553 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_set_rts_threshold [2023-11-12 02:33:53,553 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_set_rts_threshold [2023-11-12 02:33:53,553 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_queue_stopped [2023-11-12 02:33:53,554 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_queue_stopped [2023-11-12 02:33:53,554 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2023-11-12 02:33:53,554 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2023-11-12 02:33:53,554 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_set_key [2023-11-12 02:33:53,554 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_set_key [2023-11-12 02:33:53,554 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2023-11-12 02:33:53,555 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2023-11-12 02:33:53,555 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2023-11-12 02:33:53,556 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_add_interface [2023-11-12 02:33:53,556 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_add_interface [2023-11-12 02:33:53,557 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2023-11-12 02:33:53,557 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2023-11-12 02:33:53,557 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2023-11-12 02:33:53,557 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2023-11-12 02:33:53,558 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2023-11-12 02:33:53,559 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2023-11-12 02:33:53,559 INFO L130 BoogieDeclarations]: Found specification of procedure ether_addr_copy [2023-11-12 02:33:53,559 INFO L138 BoogieDeclarations]: Found implementation of procedure ether_addr_copy [2023-11-12 02:33:53,559 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2023-11-12 02:33:53,559 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2023-11-12 02:33:53,559 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2023-11-12 02:33:53,560 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_send_aggregation_params_frame [2023-11-12 02:33:53,560 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_send_aggregation_params_frame [2023-11-12 02:33:53,560 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2023-11-12 02:33:53,560 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_set_rate_mask [2023-11-12 02:33:53,561 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_set_rate_mask [2023-11-12 02:33:53,561 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_hal_send_sta_notify_frame [2023-11-12 02:33:53,561 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_hal_send_sta_notify_frame [2023-11-12 02:33:53,561 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2023-11-12 02:33:53,561 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_sta_add [2023-11-12 02:33:53,561 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_sta_add [2023-11-12 02:33:53,562 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-12 02:33:53,562 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_dbg [2023-11-12 02:33:53,563 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_dbg [2023-11-12 02:33:53,563 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2023-11-12 02:33:53,563 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_ampdu_action [2023-11-12 02:33:53,563 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_ampdu_action [2023-11-12 02:33:53,564 INFO L130 BoogieDeclarations]: Found specification of procedure skb_queue_len [2023-11-12 02:33:53,564 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_queue_len [2023-11-12 02:33:53,564 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_set_event [2023-11-12 02:33:53,564 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_set_event [2023-11-12 02:33:53,565 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_bss_info_changed [2023-11-12 02:33:53,565 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_bss_info_changed [2023-11-12 02:33:53,565 INFO L130 BoogieDeclarations]: Found specification of procedure skb_queue_tail [2023-11-12 02:33:53,565 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_queue_tail [2023-11-12 02:33:53,565 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_conf_tx [2023-11-12 02:33:53,565 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_conf_tx [2023-11-12 02:33:53,565 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2023-11-12 02:33:53,566 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2023-11-12 02:33:53,566 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-12 02:33:53,566 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2023-11-12 02:33:53,566 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-12 02:33:53,566 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-12 02:33:53,566 INFO L130 BoogieDeclarations]: Found specification of procedure IEEE80211_SKB_CB [2023-11-12 02:33:53,566 INFO L138 BoogieDeclarations]: Found implementation of procedure IEEE80211_SKB_CB [2023-11-12 02:33:53,567 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2023-11-12 02:33:53,567 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2023-11-12 02:33:54,056 INFO L236 CfgBuilder]: Building ICFG [2023-11-12 02:33:54,059 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-12 02:33:56,845 INFO L770 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2023-11-12 02:34:01,271 INFO L277 CfgBuilder]: Performing block encoding [2023-11-12 02:34:01,288 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-12 02:34:01,288 INFO L302 CfgBuilder]: Removed 3 assume(true) statements. [2023-11-12 02:34:01,292 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:34:01 BoogieIcfgContainer [2023-11-12 02:34:01,292 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-12 02:34:01,295 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-12 02:34:01,296 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-12 02:34:01,299 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-12 02:34:01,300 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.11 02:33:49" (1/3) ... [2023-11-12 02:34:01,301 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@65e3aeb7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:34:01, skipping insertion in model container [2023-11-12 02:34:01,301 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 02:33:52" (2/3) ... [2023-11-12 02:34:01,301 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@65e3aeb7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 02:34:01, skipping insertion in model container [2023-11-12 02:34:01,302 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 02:34:01" (3/3) ... [2023-11-12 02:34:01,303 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i [2023-11-12 02:34:01,325 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-12 02:34:01,326 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-12 02:34:01,411 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-12 02:34:01,419 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@61caae93, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-12 02:34:01,420 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-12 02:34:01,433 INFO L276 IsEmpty]: Start isEmpty. Operand has 889 states, 657 states have (on average 1.4353120243531203) internal successors, (943), 668 states have internal predecessors, (943), 184 states have call successors, (184), 47 states have call predecessors, (184), 46 states have return successors, (181), 178 states have call predecessors, (181), 181 states have call successors, (181) [2023-11-12 02:34:01,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-12 02:34:01,443 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:34:01,444 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:34:01,445 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:34:01,450 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:34:01,450 INFO L85 PathProgramCache]: Analyzing trace with hash -2035089583, now seen corresponding path program 1 times [2023-11-12 02:34:01,461 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:34:01,461 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [451863825] [2023-11-12 02:34:01,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:34:01,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:34:02,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:34:02,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-12 02:34:02,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:34:02,699 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:34:02,700 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:34:02,700 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [451863825] [2023-11-12 02:34:02,701 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [451863825] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:34:02,701 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:34:02,701 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-12 02:34:02,703 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [446542083] [2023-11-12 02:34:02,715 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:34:02,720 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-12 02:34:02,720 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:34:02,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-12 02:34:02,777 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-12 02:34:02,782 INFO L87 Difference]: Start difference. First operand has 889 states, 657 states have (on average 1.4353120243531203) internal successors, (943), 668 states have internal predecessors, (943), 184 states have call successors, (184), 47 states have call predecessors, (184), 46 states have return successors, (181), 178 states have call predecessors, (181), 181 states have call successors, (181) Second operand has 4 states, 4 states have (on average 5.5) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:34:07,756 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.35s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:09,734 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.60s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:10,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:34:10,011 INFO L93 Difference]: Finished difference Result 2762 states and 4264 transitions. [2023-11-12 02:34:10,013 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-12 02:34:10,014 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-12 02:34:10,015 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:34:10,070 INFO L225 Difference]: With dead ends: 2762 [2023-11-12 02:34:10,071 INFO L226 Difference]: Without dead ends: 1865 [2023-11-12 02:34:10,088 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:34:10,093 INFO L413 NwaCegarLoop]: 1102 mSDtfsCounter, 1584 mSDsluCounter, 1655 mSDsCounter, 0 mSdLazyCounter, 772 mSolverCounterSat, 471 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1682 SdHoareTripleChecker+Valid, 2757 SdHoareTripleChecker+Invalid, 1243 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 471 IncrementalHoareTripleChecker+Valid, 772 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.8s IncrementalHoareTripleChecker+Time [2023-11-12 02:34:10,094 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1682 Valid, 2757 Invalid, 1243 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [471 Valid, 772 Invalid, 0 Unknown, 0 Unchecked, 6.8s Time] [2023-11-12 02:34:10,120 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1865 states. [2023-11-12 02:34:10,353 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1865 to 1735. [2023-11-12 02:34:10,359 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1735 states, 1288 states have (on average 1.3944099378881987) internal successors, (1796), 1300 states have internal predecessors, (1796), 356 states have call successors, (356), 91 states have call predecessors, (356), 90 states have return successors, (355), 349 states have call predecessors, (355), 355 states have call successors, (355) [2023-11-12 02:34:10,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1735 states to 1735 states and 2507 transitions. [2023-11-12 02:34:10,381 INFO L78 Accepts]: Start accepts. Automaton has 1735 states and 2507 transitions. Word has length 25 [2023-11-12 02:34:10,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:34:10,381 INFO L495 AbstractCegarLoop]: Abstraction has 1735 states and 2507 transitions. [2023-11-12 02:34:10,382 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:34:10,382 INFO L276 IsEmpty]: Start isEmpty. Operand 1735 states and 2507 transitions. [2023-11-12 02:34:10,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-12 02:34:10,385 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:34:10,386 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:34:10,386 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-12 02:34:10,386 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:34:10,387 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:34:10,387 INFO L85 PathProgramCache]: Analyzing trace with hash -1866818711, now seen corresponding path program 1 times [2023-11-12 02:34:10,388 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:34:10,388 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1087987476] [2023-11-12 02:34:10,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:34:10,388 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:34:10,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:34:11,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:34:11,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:34:11,069 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-12 02:34:11,070 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:34:11,070 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1087987476] [2023-11-12 02:34:11,072 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1087987476] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:34:11,073 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:34:11,073 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-12 02:34:11,073 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [97241075] [2023-11-12 02:34:11,076 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:34:11,077 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-12 02:34:11,078 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:34:11,078 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-12 02:34:11,078 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-12 02:34:11,079 INFO L87 Difference]: Start difference. First operand 1735 states and 2507 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 4 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:34:15,646 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.98s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:17,665 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:18,932 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.27s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:19,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 02:34:19,367 INFO L93 Difference]: Finished difference Result 3595 states and 5265 transitions. [2023-11-12 02:34:19,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-12 02:34:19,368 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 4 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2023-11-12 02:34:19,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 02:34:19,385 INFO L225 Difference]: With dead ends: 3595 [2023-11-12 02:34:19,385 INFO L226 Difference]: Without dead ends: 1864 [2023-11-12 02:34:19,394 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-12 02:34:19,396 INFO L413 NwaCegarLoop]: 1282 mSDtfsCounter, 1578 mSDsluCounter, 1799 mSDsCounter, 0 mSdLazyCounter, 871 mSolverCounterSat, 352 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1653 SdHoareTripleChecker+Valid, 3081 SdHoareTripleChecker+Invalid, 1224 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 352 IncrementalHoareTripleChecker+Valid, 871 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.0s IncrementalHoareTripleChecker+Time [2023-11-12 02:34:19,396 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1653 Valid, 3081 Invalid, 1224 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [352 Valid, 871 Invalid, 1 Unknown, 0 Unchecked, 8.0s Time] [2023-11-12 02:34:19,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1864 states. [2023-11-12 02:34:19,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1864 to 1734. [2023-11-12 02:34:19,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1734 states, 1287 states have (on average 1.3923853923853924) internal successors, (1792), 1299 states have internal predecessors, (1792), 356 states have call successors, (356), 91 states have call predecessors, (356), 90 states have return successors, (355), 349 states have call predecessors, (355), 355 states have call successors, (355) [2023-11-12 02:34:19,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1734 states to 1734 states and 2503 transitions. [2023-11-12 02:34:19,606 INFO L78 Accepts]: Start accepts. Automaton has 1734 states and 2503 transitions. Word has length 29 [2023-11-12 02:34:19,607 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 02:34:19,607 INFO L495 AbstractCegarLoop]: Abstraction has 1734 states and 2503 transitions. [2023-11-12 02:34:19,607 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 4 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-12 02:34:19,608 INFO L276 IsEmpty]: Start isEmpty. Operand 1734 states and 2503 transitions. [2023-11-12 02:34:19,612 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2023-11-12 02:34:19,612 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 02:34:19,612 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 02:34:19,612 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-12 02:34:19,613 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 02:34:19,613 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 02:34:19,614 INFO L85 PathProgramCache]: Analyzing trace with hash 683988696, now seen corresponding path program 1 times [2023-11-12 02:34:19,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-12 02:34:19,614 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [922858124] [2023-11-12 02:34:19,614 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 02:34:19,614 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 02:34:19,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:34:20,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-12 02:34:20,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:34:20,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-12 02:34:20,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:34:20,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-12 02:34:20,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:34:20,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-12 02:34:20,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:34:20,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2023-11-12 02:34:20,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 02:34:20,602 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2023-11-12 02:34:20,602 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-12 02:34:20,602 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [922858124] [2023-11-12 02:34:20,602 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [922858124] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 02:34:20,603 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 02:34:20,603 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-12 02:34:20,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [766610598] [2023-11-12 02:34:20,603 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 02:34:20,604 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-12 02:34:20,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-12 02:34:20,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-12 02:34:20,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-12 02:34:20,605 INFO L87 Difference]: Start difference. First operand 1734 states and 2503 transitions. Second operand has 7 states, 7 states have (on average 5.142857142857143) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2023-11-12 02:34:26,553 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:28,526 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.97s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:30,534 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:32,545 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:34,555 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:36,539 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.98s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:38,419 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.88s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:40,425 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 02:34:41,987 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.56s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers []