./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash aa6e6fe2f0ffa3b99fe1d04a5932e9785002708e85a4e6328b8f4c31fc0bed5a --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:06:29,559 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:06:29,697 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Reach-64bit-Automizer_Default.epf [2023-11-21 22:06:29,712 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:06:29,713 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:06:29,759 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:06:29,760 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:06:29,761 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:06:29,762 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:06:29,768 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:06:29,768 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:06:29,770 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:06:29,771 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:06:29,773 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:06:29,773 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:06:29,774 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:06:29,774 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-21 22:06:29,775 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:06:29,775 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:06:29,776 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-21 22:06:29,776 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:06:29,777 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-21 22:06:29,777 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:06:29,778 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:06:29,779 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:06:29,779 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:06:29,779 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:06:29,780 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:06:29,780 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:06:29,781 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:06:29,782 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:06:29,783 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-21 22:06:29,783 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:06:29,783 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:06:29,783 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:06:29,784 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:06:29,784 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-21 22:06:29,784 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:06:29,785 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:06:29,785 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> aa6e6fe2f0ffa3b99fe1d04a5932e9785002708e85a4e6328b8f4c31fc0bed5a [2023-11-21 22:06:30,183 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:06:30,215 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:06:30,217 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:06:30,219 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:06:30,219 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:06:30,221 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i [2023-11-21 22:06:33,218 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:06:33,965 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:06:33,965 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i [2023-11-21 22:06:34,023 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/data/026411f20/1c6c753b8b4249d6aa547b411a3be8d6/FLAGf814323b7 [2023-11-21 22:06:34,042 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/data/026411f20/1c6c753b8b4249d6aa547b411a3be8d6 [2023-11-21 22:06:34,049 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:06:34,051 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:06:34,055 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:06:34,055 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:06:34,061 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:06:34,062 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:06:34" (1/1) ... [2023-11-21 22:06:34,063 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@317edfa3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:34, skipping insertion in model container [2023-11-21 22:06:34,063 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:06:34" (1/1) ... [2023-11-21 22:06:34,234 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:06:35,341 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i[197338,197351] [2023-11-21 22:06:36,725 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:06:36,791 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:06:36,988 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [6725] [2023-11-21 22:06:37,000 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i[197338,197351] [2023-11-21 22:06:37,418 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:06:37,550 WARN L675 CHandler]: The function __VERIFIER_nondet_u16 is called, but not defined or handled by StandardFunctionHandler. [2023-11-21 22:06:37,550 WARN L675 CHandler]: The function memcmp is called, but not defined or handled by StandardFunctionHandler. [2023-11-21 22:06:37,551 WARN L675 CHandler]: The function __VERIFIER_nondet_u8 is called, but not defined or handled by StandardFunctionHandler. [2023-11-21 22:06:37,551 WARN L675 CHandler]: The function __VERIFIER_nondet_u32 is called, but not defined or handled by StandardFunctionHandler. [2023-11-21 22:06:37,559 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:06:37,560 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37 WrapperNode [2023-11-21 22:06:37,560 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:06:37,561 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:06:37,562 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:06:37,562 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:06:37,570 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:37,682 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:37,927 INFO L138 Inliner]: procedures = 270, calls = 2836, calls flagged for inlining = 111, calls inlined = 38, statements flattened = 3229 [2023-11-21 22:06:37,927 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:06:37,928 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:06:37,928 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:06:37,929 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:06:37,939 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:37,940 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:37,987 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:38,331 WARN L106 HeapSplitter]: Omit memory slicing because it failed with the following exception: Unsupported: Procedure #Ultimate.C_memset is not part of the Ultimate memory model but has specification other that is not a ModifiesSpecification [2023-11-21 22:06:38,332 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:38,332 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:38,429 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:38,447 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:38,464 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:38,487 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:38,525 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:06:38,526 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:06:38,526 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:06:38,527 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:06:38,527 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (1/1) ... [2023-11-21 22:06:38,538 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:06:38,551 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:06:38,573 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:06:38,604 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a67c1ef4-7743-48fe-b350-ad79591f8fe7/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:06:38,624 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2023-11-21 22:06:38,625 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2023-11-21 22:06:38,625 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_12 [2023-11-21 22:06:38,625 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_12 [2023-11-21 22:06:38,625 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_load_radio_caps [2023-11-21 22:06:38,625 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_load_radio_caps [2023-11-21 22:06:38,627 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2023-11-21 22:06:38,628 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2023-11-21 22:06:38,628 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2023-11-21 22:06:38,628 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2023-11-21 22:06:38,628 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_conf_filter [2023-11-21 22:06:38,628 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_conf_filter [2023-11-21 22:06:38,629 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_hal_load_key [2023-11-21 22:06:38,629 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_hal_load_key [2023-11-21 22:06:38,629 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_remove_interface [2023-11-21 22:06:38,629 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_remove_interface [2023-11-21 22:06:38,629 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2023-11-21 22:06:38,630 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2023-11-21 22:06:38,631 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_sta_remove [2023-11-21 22:06:38,631 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_sta_remove [2023-11-21 22:06:38,631 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2023-11-21 22:06:38,631 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2023-11-21 22:06:38,631 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_config [2023-11-21 22:06:38,632 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_config [2023-11-21 22:06:38,632 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2023-11-21 22:06:38,633 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2023-11-21 22:06:38,633 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_is_data_qos [2023-11-21 22:06:38,634 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_is_data_qos [2023-11-21 22:06:38,634 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2023-11-21 22:06:38,634 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2023-11-21 22:06:38,634 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2023-11-21 22:06:38,634 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2023-11-21 22:06:38,634 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2023-11-21 22:06:38,635 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2023-11-21 22:06:38,635 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_send_internal_mgmt_frame [2023-11-21 22:06:38,635 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_send_internal_mgmt_frame [2023-11-21 22:06:38,635 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-11-21 22:06:38,635 INFO L130 BoogieDeclarations]: Found specification of procedure memcmp [2023-11-21 22:06:38,635 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2023-11-21 22:06:38,636 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2023-11-21 22:06:38,636 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2023-11-21 22:06:38,636 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_start [2023-11-21 22:06:38,636 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_start [2023-11-21 22:06:38,636 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2023-11-21 22:06:38,636 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2023-11-21 22:06:38,636 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2023-11-21 22:06:38,637 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-11-21 22:06:38,637 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_hal_key_config [2023-11-21 22:06:38,637 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_hal_key_config [2023-11-21 22:06:38,637 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2023-11-21 22:06:38,637 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_tx [2023-11-21 22:06:38,637 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_tx [2023-11-21 22:06:38,638 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2023-11-21 22:06:38,638 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2023-11-21 22:06:38,638 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_set_rts_threshold [2023-11-21 22:06:38,638 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_set_rts_threshold [2023-11-21 22:06:38,639 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_queue_stopped [2023-11-21 22:06:38,639 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_queue_stopped [2023-11-21 22:06:38,639 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2023-11-21 22:06:38,639 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2023-11-21 22:06:38,640 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_set_key [2023-11-21 22:06:38,641 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_set_key [2023-11-21 22:06:38,641 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2023-11-21 22:06:38,641 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2023-11-21 22:06:38,641 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2023-11-21 22:06:38,641 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_add_interface [2023-11-21 22:06:38,641 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_add_interface [2023-11-21 22:06:38,642 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2023-11-21 22:06:38,642 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2023-11-21 22:06:38,642 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2023-11-21 22:06:38,643 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2023-11-21 22:06:38,643 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2023-11-21 22:06:38,643 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2023-11-21 22:06:38,643 INFO L130 BoogieDeclarations]: Found specification of procedure ether_addr_copy [2023-11-21 22:06:38,643 INFO L138 BoogieDeclarations]: Found implementation of procedure ether_addr_copy [2023-11-21 22:06:38,643 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2023-11-21 22:06:38,644 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2023-11-21 22:06:38,644 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2023-11-21 22:06:38,644 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_send_aggregation_params_frame [2023-11-21 22:06:38,644 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_send_aggregation_params_frame [2023-11-21 22:06:38,644 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2023-11-21 22:06:38,644 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_set_rate_mask [2023-11-21 22:06:38,645 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_set_rate_mask [2023-11-21 22:06:38,645 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_hal_send_sta_notify_frame [2023-11-21 22:06:38,646 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_hal_send_sta_notify_frame [2023-11-21 22:06:38,646 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2023-11-21 22:06:38,646 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_sta_add [2023-11-21 22:06:38,646 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_sta_add [2023-11-21 22:06:38,646 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:06:38,646 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_dbg [2023-11-21 22:06:38,647 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_dbg [2023-11-21 22:06:38,647 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2023-11-21 22:06:38,647 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_ampdu_action [2023-11-21 22:06:38,647 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_ampdu_action [2023-11-21 22:06:38,647 INFO L130 BoogieDeclarations]: Found specification of procedure skb_queue_len [2023-11-21 22:06:38,647 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_queue_len [2023-11-21 22:06:38,647 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_set_event [2023-11-21 22:06:38,648 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_set_event [2023-11-21 22:06:38,648 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_bss_info_changed [2023-11-21 22:06:38,648 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_bss_info_changed [2023-11-21 22:06:38,648 INFO L130 BoogieDeclarations]: Found specification of procedure skb_queue_tail [2023-11-21 22:06:38,648 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_queue_tail [2023-11-21 22:06:38,648 INFO L130 BoogieDeclarations]: Found specification of procedure rsi_mac80211_conf_tx [2023-11-21 22:06:38,649 INFO L138 BoogieDeclarations]: Found implementation of procedure rsi_mac80211_conf_tx [2023-11-21 22:06:38,649 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2023-11-21 22:06:38,649 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2023-11-21 22:06:38,649 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-21 22:06:38,650 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2023-11-21 22:06:38,650 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:06:38,650 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:06:38,650 INFO L130 BoogieDeclarations]: Found specification of procedure IEEE80211_SKB_CB [2023-11-21 22:06:38,651 INFO L138 BoogieDeclarations]: Found implementation of procedure IEEE80211_SKB_CB [2023-11-21 22:06:38,651 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2023-11-21 22:06:38,651 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2023-11-21 22:06:39,364 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:06:39,370 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:06:41,856 INFO L774 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2023-11-21 22:06:46,198 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:06:48,187 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:06:48,187 INFO L308 CfgBuilder]: Removed 3 assume(true) statements. [2023-11-21 22:06:48,189 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:06:48 BoogieIcfgContainer [2023-11-21 22:06:48,189 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:06:48,192 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:06:48,192 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:06:48,195 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:06:48,196 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:06:34" (1/3) ... [2023-11-21 22:06:48,198 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@471c742b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:06:48, skipping insertion in model container [2023-11-21 22:06:48,198 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:06:37" (2/3) ... [2023-11-21 22:06:48,199 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@471c742b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:06:48, skipping insertion in model container [2023-11-21 22:06:48,199 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:06:48" (3/3) ... [2023-11-21 22:06:48,200 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--rsi--rsi_91x.ko-entry_point.cil.out.i [2023-11-21 22:06:48,220 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:06:48,220 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-21 22:06:48,305 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:06:48,313 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@622976f8, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:06:48,314 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-21 22:06:48,324 INFO L276 IsEmpty]: Start isEmpty. Operand has 622 states, 390 states have (on average 1.3717948717948718) internal successors, (535), 401 states have internal predecessors, (535), 184 states have call successors, (184), 47 states have call predecessors, (184), 46 states have return successors, (181), 178 states have call predecessors, (181), 181 states have call successors, (181) [2023-11-21 22:06:48,333 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2023-11-21 22:06:48,334 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:06:48,334 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:06:48,335 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:06:48,342 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:06:48,343 INFO L85 PathProgramCache]: Analyzing trace with hash 1922038645, now seen corresponding path program 1 times [2023-11-21 22:06:48,352 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:06:48,353 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1829101134] [2023-11-21 22:06:48,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:06:48,356 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:06:48,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:06:49,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-21 22:06:49,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:06:49,417 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:06:49,418 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:06:49,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1829101134] [2023-11-21 22:06:49,419 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1829101134] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:06:49,419 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:06:49,420 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:06:49,421 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [486518899] [2023-11-21 22:06:49,422 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:06:49,426 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:06:49,427 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:06:49,454 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:06:49,455 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:06:49,459 INFO L87 Difference]: Start difference. First operand has 622 states, 390 states have (on average 1.3717948717948718) internal successors, (535), 401 states have internal predecessors, (535), 184 states have call successors, (184), 47 states have call predecessors, (184), 46 states have return successors, (181), 178 states have call predecessors, (181), 181 states have call successors, (181) Second operand has 4 states, 4 states have (on average 3.0) internal successors, (12), 3 states have internal predecessors, (12), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:06:55,926 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.77s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-21 22:06:57,935 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-21 22:07:01,286 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.80s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-21 22:07:02,934 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.65s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-21 22:07:03,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:03,360 INFO L93 Difference]: Finished difference Result 1946 states and 2966 transitions. [2023-11-21 22:07:03,361 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-21 22:07:03,363 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.0) internal successors, (12), 3 states have internal predecessors, (12), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 15 [2023-11-21 22:07:03,364 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:03,412 INFO L225 Difference]: With dead ends: 1946 [2023-11-21 22:07:03,413 INFO L226 Difference]: Without dead ends: 1315 [2023-11-21 22:07:03,431 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:07:03,435 INFO L413 NwaCegarLoop]: 696 mSDtfsCounter, 1055 mSDsluCounter, 1011 mSDsCounter, 0 mSdLazyCounter, 713 mSolverCounterSat, 479 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1148 SdHoareTripleChecker+Valid, 1707 SdHoareTripleChecker+Invalid, 1193 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 479 IncrementalHoareTripleChecker+Valid, 713 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.6s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:03,437 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1148 Valid, 1707 Invalid, 1193 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [479 Valid, 713 Invalid, 1 Unknown, 0 Unchecked, 13.6s Time] [2023-11-21 22:07:03,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1315 states. [2023-11-21 22:07:03,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1315 to 1213. [2023-11-21 22:07:03,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1213 states, 766 states have (on average 1.3524804177545693) internal successors, (1036), 778 states have internal predecessors, (1036), 356 states have call successors, (356), 91 states have call predecessors, (356), 90 states have return successors, (355), 349 states have call predecessors, (355), 355 states have call successors, (355) [2023-11-21 22:07:03,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1213 states to 1213 states and 1747 transitions. [2023-11-21 22:07:03,709 INFO L78 Accepts]: Start accepts. Automaton has 1213 states and 1747 transitions. Word has length 15 [2023-11-21 22:07:03,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:03,709 INFO L495 AbstractCegarLoop]: Abstraction has 1213 states and 1747 transitions. [2023-11-21 22:07:03,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.0) internal successors, (12), 3 states have internal predecessors, (12), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:07:03,710 INFO L276 IsEmpty]: Start isEmpty. Operand 1213 states and 1747 transitions. [2023-11-21 22:07:03,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-21 22:07:03,713 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:03,713 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:03,713 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:07:03,714 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:03,714 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:03,714 INFO L85 PathProgramCache]: Analyzing trace with hash 414281674, now seen corresponding path program 1 times [2023-11-21 22:07:03,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:03,720 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [765132445] [2023-11-21 22:07:03,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:03,721 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:03,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:04,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:07:04,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:04,487 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:07:04,487 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:04,488 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [765132445] [2023-11-21 22:07:04,488 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [765132445] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:07:04,488 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:07:04,488 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:07:04,489 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [214628833] [2023-11-21 22:07:04,489 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:07:04,490 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:07:04,490 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:04,491 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:07:04,491 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:07:04,492 INFO L87 Difference]: Start difference. First operand 1213 states and 1747 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:07:08,637 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.46s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-21 22:07:09,974 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.34s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-21 22:07:10,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:07:10,985 INFO L93 Difference]: Finished difference Result 2526 states and 3712 transitions. [2023-11-21 22:07:10,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:07:10,986 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 18 [2023-11-21 22:07:10,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:07:11,002 INFO L225 Difference]: With dead ends: 2526 [2023-11-21 22:07:11,002 INFO L226 Difference]: Without dead ends: 1314 [2023-11-21 22:07:11,010 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:07:11,012 INFO L413 NwaCegarLoop]: 686 mSDtfsCounter, 960 mSDsluCounter, 367 mSDsCounter, 0 mSdLazyCounter, 452 mSolverCounterSat, 278 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1036 SdHoareTripleChecker+Valid, 1053 SdHoareTripleChecker+Invalid, 730 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 278 IncrementalHoareTripleChecker+Valid, 452 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.3s IncrementalHoareTripleChecker+Time [2023-11-21 22:07:11,013 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1036 Valid, 1053 Invalid, 730 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [278 Valid, 452 Invalid, 0 Unknown, 0 Unchecked, 6.3s Time] [2023-11-21 22:07:11,017 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1314 states. [2023-11-21 22:07:11,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1314 to 1212. [2023-11-21 22:07:11,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1212 states, 765 states have (on average 1.3490196078431373) internal successors, (1032), 777 states have internal predecessors, (1032), 356 states have call successors, (356), 91 states have call predecessors, (356), 90 states have return successors, (355), 349 states have call predecessors, (355), 355 states have call successors, (355) [2023-11-21 22:07:11,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1212 states to 1212 states and 1743 transitions. [2023-11-21 22:07:11,146 INFO L78 Accepts]: Start accepts. Automaton has 1212 states and 1743 transitions. Word has length 18 [2023-11-21 22:07:11,146 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:07:11,147 INFO L495 AbstractCegarLoop]: Abstraction has 1212 states and 1743 transitions. [2023-11-21 22:07:11,147 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:07:11,147 INFO L276 IsEmpty]: Start isEmpty. Operand 1212 states and 1743 transitions. [2023-11-21 22:07:11,151 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-21 22:07:11,151 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:07:11,151 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:07:11,152 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:07:11,152 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-21 22:07:11,153 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:07:11,153 INFO L85 PathProgramCache]: Analyzing trace with hash 1976125810, now seen corresponding path program 1 times [2023-11-21 22:07:11,153 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:07:11,153 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [514393148] [2023-11-21 22:07:11,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:07:11,154 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:07:11,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-21 22:07:12,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-21 22:07:12,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-21 22:07:12,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-21 22:07:12,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-21 22:07:12,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:07:12,357 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2023-11-21 22:07:12,357 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:07:12,358 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [514393148] [2023-11-21 22:07:12,358 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [514393148] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:07:12,358 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:07:12,358 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-21 22:07:12,359 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134309681] [2023-11-21 22:07:12,359 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:07:12,359 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-21 22:07:12,360 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:07:12,360 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-21 22:07:12,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:07:12,361 INFO L87 Difference]: Start difference. First operand 1212 states and 1743 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 4 states have internal predecessors, (24), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5)