./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version cf1a7837 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash d88455bf5089be24833f69dfcbd91003e7e136bcd5efcd63ae18e59d7f59e87d --- Real Ultimate output --- This is Ultimate 0.2.3-dev-cf1a783 [2023-11-12 00:08:05,792 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-12 00:08:05,866 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/config/svcomp-Reach-64bit-Taipan_Default.epf [2023-11-12 00:08:05,872 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-12 00:08:05,873 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-12 00:08:05,899 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-12 00:08:05,900 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-12 00:08:05,901 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-12 00:08:05,902 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-12 00:08:05,903 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-12 00:08:05,903 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-12 00:08:05,904 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-12 00:08:05,905 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-12 00:08:05,905 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-12 00:08:05,906 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-12 00:08:05,907 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-12 00:08:05,907 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-12 00:08:05,908 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-12 00:08:05,909 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-12 00:08:05,909 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-12 00:08:05,910 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-12 00:08:05,911 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-12 00:08:05,912 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-12 00:08:05,913 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-12 00:08:05,913 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-12 00:08:05,914 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-12 00:08:05,914 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-12 00:08:05,915 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-12 00:08:05,916 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-12 00:08:05,916 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-12 00:08:05,917 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-12 00:08:05,918 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-12 00:08:05,918 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-12 00:08:05,919 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 00:08:05,919 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-12 00:08:05,920 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-12 00:08:05,920 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-12 00:08:05,921 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-12 00:08:05,921 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-12 00:08:05,921 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-12 00:08:05,922 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-12 00:08:05,922 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-12 00:08:05,922 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d88455bf5089be24833f69dfcbd91003e7e136bcd5efcd63ae18e59d7f59e87d [2023-11-12 00:08:06,270 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-12 00:08:06,297 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-12 00:08:06,300 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-12 00:08:06,301 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-12 00:08:06,302 INFO L274 PluginConnector]: CDTParser initialized [2023-11-12 00:08:06,303 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i [2023-11-12 00:08:09,386 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-12 00:08:10,131 INFO L384 CDTParser]: Found 1 translation units. [2023-11-12 00:08:10,132 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i [2023-11-12 00:08:10,184 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/data/312f3bec2/3af143456b4b45ab8de84066dc5e5398/FLAGcf312518d [2023-11-12 00:08:10,200 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/data/312f3bec2/3af143456b4b45ab8de84066dc5e5398 [2023-11-12 00:08:10,203 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-12 00:08:10,204 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-12 00:08:10,206 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-12 00:08:10,206 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-12 00:08:10,212 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-12 00:08:10,213 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 12:08:10" (1/1) ... [2023-11-12 00:08:10,214 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@69ce879e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:10, skipping insertion in model container [2023-11-12 00:08:10,214 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.11 12:08:10" (1/1) ... [2023-11-12 00:08:10,425 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-12 00:08:11,552 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i[205251,205264] [2023-11-12 00:08:12,822 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 00:08:12,915 INFO L202 MainTranslator]: Completed pre-run [2023-11-12 00:08:13,143 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [7017-7018] [2023-11-12 00:08:13,152 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i[205251,205264] [2023-11-12 00:08:13,456 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-12 00:08:13,569 WARN L672 CHandler]: The function __VERIFIER_nondet_u32 is called, but not defined or handled by StandardFunctionHandler. [2023-11-12 00:08:13,578 INFO L206 MainTranslator]: Completed translation [2023-11-12 00:08:13,579 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13 WrapperNode [2023-11-12 00:08:13,580 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-12 00:08:13,582 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-12 00:08:13,582 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-12 00:08:13,583 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-12 00:08:13,592 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:13,708 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:14,016 INFO L138 Inliner]: procedures = 239, calls = 3162, calls flagged for inlining = 111, calls inlined = 96, statements flattened = 6029 [2023-11-12 00:08:14,017 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-12 00:08:14,018 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-12 00:08:14,018 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-12 00:08:14,018 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-12 00:08:14,031 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:14,031 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:14,100 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:14,101 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:14,302 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:14,332 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:14,376 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:14,402 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:14,446 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-12 00:08:14,448 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-12 00:08:14,448 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-12 00:08:14,448 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-12 00:08:14,449 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (1/1) ... [2023-11-12 00:08:14,456 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-12 00:08:14,469 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/z3 [2023-11-12 00:08:14,489 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-12 00:08:14,575 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c6f41dbd-bfda-4160-9e31-5c326d738e03/bin/utaipan-verify-NcY6lQBIFX/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-12 00:08:14,612 INFO L130 BoogieDeclarations]: Found specification of procedure at76_hw_scan [2023-11-12 00:08:14,612 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_hw_scan [2023-11-12 00:08:14,613 INFO L130 BoogieDeclarations]: Found specification of procedure at76_dfu_get_status [2023-11-12 00:08:14,613 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_dfu_get_status [2023-11-12 00:08:14,613 INFO L130 BoogieDeclarations]: Found specification of procedure at76_join [2023-11-12 00:08:14,613 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_join [2023-11-12 00:08:14,613 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2023-11-12 00:08:14,613 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2023-11-12 00:08:14,614 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2023-11-12 00:08:14,614 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2023-11-12 00:08:14,614 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2023-11-12 00:08:14,614 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2023-11-12 00:08:14,614 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_dev [2023-11-12 00:08:14,615 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_dev [2023-11-12 00:08:14,615 INFO L130 BoogieDeclarations]: Found specification of procedure at76_submit_rx_urb [2023-11-12 00:08:14,615 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_submit_rx_urb [2023-11-12 00:08:14,615 INFO L130 BoogieDeclarations]: Found specification of procedure at76_add_interface [2023-11-12 00:08:14,615 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_add_interface [2023-11-12 00:08:14,616 INFO L130 BoogieDeclarations]: Found specification of procedure at76_get_timeout [2023-11-12 00:08:14,616 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_get_timeout [2023-11-12 00:08:14,616 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2023-11-12 00:08:14,616 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2023-11-12 00:08:14,616 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2023-11-12 00:08:14,616 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2023-11-12 00:08:14,617 INFO L130 BoogieDeclarations]: Found specification of procedure at76_bss_info_changed [2023-11-12 00:08:14,617 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_bss_info_changed [2023-11-12 00:08:14,617 INFO L130 BoogieDeclarations]: Found specification of procedure dev_printk [2023-11-12 00:08:14,617 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_printk [2023-11-12 00:08:14,617 INFO L130 BoogieDeclarations]: Found specification of procedure at76_wait_completion [2023-11-12 00:08:14,618 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_wait_completion [2023-11-12 00:08:14,618 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2023-11-12 00:08:14,618 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2023-11-12 00:08:14,618 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2023-11-12 00:08:14,618 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2023-11-12 00:08:14,618 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2023-11-12 00:08:14,619 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2023-11-12 00:08:14,619 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2023-11-12 00:08:14,619 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2023-11-12 00:08:14,619 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2023-11-12 00:08:14,619 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2023-11-12 00:08:14,619 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-11-12 00:08:14,620 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2023-11-12 00:08:14,620 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2023-11-12 00:08:14,620 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2023-11-12 00:08:14,620 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2023-11-12 00:08:14,620 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2023-11-12 00:08:14,620 INFO L130 BoogieDeclarations]: Found specification of procedure at76_delete_device [2023-11-12 00:08:14,621 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_delete_device [2023-11-12 00:08:14,621 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2023-11-12 00:08:14,621 INFO L130 BoogieDeclarations]: Found specification of procedure at76_get_mib [2023-11-12 00:08:14,621 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_get_mib [2023-11-12 00:08:14,621 INFO L130 BoogieDeclarations]: Found specification of procedure at76_set_radio [2023-11-12 00:08:14,621 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_set_radio [2023-11-12 00:08:14,622 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-11-12 00:08:14,622 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2023-11-12 00:08:14,622 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2023-11-12 00:08:14,622 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2023-11-12 00:08:14,622 INFO L130 BoogieDeclarations]: Found specification of procedure led_trigger_event [2023-11-12 00:08:14,622 INFO L138 BoogieDeclarations]: Found implementation of procedure led_trigger_event [2023-11-12 00:08:14,623 INFO L130 BoogieDeclarations]: Found specification of procedure at76_set_card_command [2023-11-12 00:08:14,623 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_set_card_command [2023-11-12 00:08:14,623 INFO L130 BoogieDeclarations]: Found specification of procedure at76_get_cmd_status [2023-11-12 00:08:14,623 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_get_cmd_status [2023-11-12 00:08:14,623 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2023-11-12 00:08:14,623 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2023-11-12 00:08:14,624 INFO L130 BoogieDeclarations]: Found specification of procedure cancel_work_sync [2023-11-12 00:08:14,624 INFO L138 BoogieDeclarations]: Found implementation of procedure cancel_work_sync [2023-11-12 00:08:14,624 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2023-11-12 00:08:14,624 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2023-11-12 00:08:14,624 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2023-11-12 00:08:14,625 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2023-11-12 00:08:14,625 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_queue_delayed_work [2023-11-12 00:08:14,625 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_queue_delayed_work [2023-11-12 00:08:14,625 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2023-11-12 00:08:14,625 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2023-11-12 00:08:14,625 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2023-11-12 00:08:14,626 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2023-11-12 00:08:14,626 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2023-11-12 00:08:14,626 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2023-11-12 00:08:14,626 INFO L130 BoogieDeclarations]: Found specification of procedure at76_set_mib [2023-11-12 00:08:14,626 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_set_mib [2023-11-12 00:08:14,626 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2023-11-12 00:08:14,627 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2023-11-12 00:08:14,627 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2023-11-12 00:08:14,627 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2023-11-12 00:08:14,627 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2023-11-12 00:08:14,627 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2023-11-12 00:08:14,627 INFO L130 BoogieDeclarations]: Found specification of procedure at76_set_pm_mode [2023-11-12 00:08:14,628 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_set_pm_mode [2023-11-12 00:08:14,628 INFO L130 BoogieDeclarations]: Found specification of procedure _dev_info [2023-11-12 00:08:14,628 INFO L138 BoogieDeclarations]: Found implementation of procedure _dev_info [2023-11-12 00:08:14,628 INFO L130 BoogieDeclarations]: Found specification of procedure at76_set_key [2023-11-12 00:08:14,628 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_set_key [2023-11-12 00:08:14,628 INFO L130 BoogieDeclarations]: Found specification of procedure at76_is_505a [2023-11-12 00:08:14,629 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_is_505a [2023-11-12 00:08:14,629 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2023-11-12 00:08:14,629 INFO L130 BoogieDeclarations]: Found specification of procedure at76_get_hw_cfg [2023-11-12 00:08:14,629 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_get_hw_cfg [2023-11-12 00:08:14,629 INFO L130 BoogieDeclarations]: Found specification of procedure at76_config [2023-11-12 00:08:14,629 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_config [2023-11-12 00:08:14,629 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2023-11-12 00:08:14,630 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2023-11-12 00:08:14,630 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2023-11-12 00:08:14,630 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2023-11-12 00:08:14,630 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2023-11-12 00:08:14,630 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2023-11-12 00:08:14,630 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2023-11-12 00:08:14,631 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2023-11-12 00:08:14,631 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2023-11-12 00:08:14,631 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2023-11-12 00:08:14,631 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2023-11-12 00:08:14,631 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2023-11-12 00:08:14,631 INFO L130 BoogieDeclarations]: Found specification of procedure at76_get_op_mode [2023-11-12 00:08:14,632 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_get_op_mode [2023-11-12 00:08:14,632 INFO L130 BoogieDeclarations]: Found specification of procedure at76_remove_interface [2023-11-12 00:08:14,632 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_remove_interface [2023-11-12 00:08:14,632 INFO L130 BoogieDeclarations]: Found specification of procedure print_hex_dump [2023-11-12 00:08:14,632 INFO L138 BoogieDeclarations]: Found implementation of procedure print_hex_dump [2023-11-12 00:08:14,632 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2023-11-12 00:08:14,633 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2023-11-12 00:08:14,633 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2023-11-12 00:08:14,633 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2023-11-12 00:08:14,633 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2023-11-12 00:08:14,633 INFO L130 BoogieDeclarations]: Found specification of procedure wiphy_name [2023-11-12 00:08:14,633 INFO L138 BoogieDeclarations]: Found implementation of procedure wiphy_name [2023-11-12 00:08:14,634 INFO L130 BoogieDeclarations]: Found specification of procedure schedule_timeout_interruptible [2023-11-12 00:08:14,634 INFO L138 BoogieDeclarations]: Found implementation of procedure schedule_timeout_interruptible [2023-11-12 00:08:14,634 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2023-11-12 00:08:14,634 INFO L130 BoogieDeclarations]: Found specification of procedure at76_start_monitor [2023-11-12 00:08:14,634 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_start_monitor [2023-11-12 00:08:14,634 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_stop_queues [2023-11-12 00:08:14,635 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_stop_queues [2023-11-12 00:08:14,635 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2023-11-12 00:08:14,635 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2023-11-12 00:08:14,635 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-12 00:08:14,635 INFO L130 BoogieDeclarations]: Found specification of procedure is_valid_ether_addr [2023-11-12 00:08:14,635 INFO L138 BoogieDeclarations]: Found implementation of procedure is_valid_ether_addr [2023-11-12 00:08:14,636 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2023-11-12 00:08:14,636 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2023-11-12 00:08:14,636 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2023-11-12 00:08:14,636 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2023-11-12 00:08:14,636 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2023-11-12 00:08:14,636 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2023-11-12 00:08:14,637 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2023-11-12 00:08:14,637 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2023-11-12 00:08:14,637 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2023-11-12 00:08:14,637 INFO L130 BoogieDeclarations]: Found specification of procedure at76_configure_filter [2023-11-12 00:08:14,637 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_configure_filter [2023-11-12 00:08:14,637 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2023-11-12 00:08:14,638 INFO L138 BoogieDeclarations]: Found implementation of procedure warn_slowpath_null [2023-11-12 00:08:14,638 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_queue_work [2023-11-12 00:08:14,638 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_queue_work [2023-11-12 00:08:14,638 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2023-11-12 00:08:14,638 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2023-11-12 00:08:14,638 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-12 00:08:14,639 INFO L130 BoogieDeclarations]: Found specification of procedure at76_mac80211_tx [2023-11-12 00:08:14,639 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_mac80211_tx [2023-11-12 00:08:14,639 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-12 00:08:14,639 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-12 00:08:14,639 INFO L130 BoogieDeclarations]: Found specification of procedure IEEE80211_SKB_CB [2023-11-12 00:08:14,639 INFO L138 BoogieDeclarations]: Found implementation of procedure IEEE80211_SKB_CB [2023-11-12 00:08:15,394 INFO L236 CfgBuilder]: Building ICFG [2023-11-12 00:08:15,399 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-12 00:08:15,878 INFO L770 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2023-11-12 00:08:28,326 INFO L277 CfgBuilder]: Performing block encoding [2023-11-12 00:08:30,348 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-12 00:08:30,349 INFO L302 CfgBuilder]: Removed 4 assume(true) statements. [2023-11-12 00:08:30,355 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 12:08:30 BoogieIcfgContainer [2023-11-12 00:08:30,356 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-12 00:08:30,359 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-12 00:08:30,359 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-12 00:08:30,362 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-12 00:08:30,362 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.11 12:08:10" (1/3) ... [2023-11-12 00:08:30,364 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1060fbb9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 12:08:30, skipping insertion in model container [2023-11-12 00:08:30,364 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.11 12:08:13" (2/3) ... [2023-11-12 00:08:30,365 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1060fbb9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.11 12:08:30, skipping insertion in model container [2023-11-12 00:08:30,365 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.11 12:08:30" (3/3) ... [2023-11-12 00:08:30,366 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i [2023-11-12 00:08:30,387 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-12 00:08:30,387 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-12 00:08:30,482 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-12 00:08:30,489 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@30501249, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-12 00:08:30,490 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-12 00:08:30,500 INFO L276 IsEmpty]: Start isEmpty. Operand has 1378 states, 880 states have (on average 1.3386363636363636) internal successors, (1178), 904 states have internal predecessors, (1178), 425 states have call successors, (425), 72 states have call predecessors, (425), 71 states have return successors, (420), 419 states have call predecessors, (420), 420 states have call successors, (420) [2023-11-12 00:08:30,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2023-11-12 00:08:30,516 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 00:08:30,517 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 00:08:30,517 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 00:08:30,522 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 00:08:30,523 INFO L85 PathProgramCache]: Analyzing trace with hash -2138607578, now seen corresponding path program 1 times [2023-11-12 00:08:30,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-12 00:08:30,533 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1096759493] [2023-11-12 00:08:30,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 00:08:30,534 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 00:08:31,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 00:08:31,896 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 115 trivial. 0 not checked. [2023-11-12 00:08:31,896 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-12 00:08:31,897 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1096759493] [2023-11-12 00:08:31,897 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1096759493] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 00:08:31,897 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 00:08:31,898 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-12 00:08:31,899 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1941792158] [2023-11-12 00:08:31,900 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 00:08:31,905 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 00:08:31,906 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-12 00:08:31,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 00:08:31,944 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 00:08:31,951 INFO L87 Difference]: Start difference. First operand has 1378 states, 880 states have (on average 1.3386363636363636) internal successors, (1178), 904 states have internal predecessors, (1178), 425 states have call successors, (425), 72 states have call predecessors, (425), 71 states have return successors, (420), 419 states have call predecessors, (420), 420 states have call successors, (420) Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2023-11-12 00:08:37,036 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 00:08:39,221 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 00:08:41,233 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 00:08:41,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 00:08:41,466 INFO L93 Difference]: Finished difference Result 4065 states and 5983 transitions. [2023-11-12 00:08:41,468 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-12 00:08:41,469 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 74 [2023-11-12 00:08:41,471 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 00:08:41,527 INFO L225 Difference]: With dead ends: 4065 [2023-11-12 00:08:41,528 INFO L226 Difference]: Without dead ends: 2694 [2023-11-12 00:08:41,546 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 00:08:41,551 INFO L413 NwaCegarLoop]: 1832 mSDtfsCounter, 1960 mSDsluCounter, 1805 mSDsCounter, 0 mSdLazyCounter, 390 mSolverCounterSat, 9 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1960 SdHoareTripleChecker+Valid, 3637 SdHoareTripleChecker+Invalid, 402 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 390 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.1s IncrementalHoareTripleChecker+Time [2023-11-12 00:08:41,558 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1960 Valid, 3637 Invalid, 402 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [9 Valid, 390 Invalid, 3 Unknown, 0 Unchecked, 9.1s Time] [2023-11-12 00:08:41,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2694 states. [2023-11-12 00:08:42,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2694 to 2694. [2023-11-12 00:08:42,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2694 states, 1731 states have (on average 1.3292894280762566) internal successors, (2301), 1765 states have internal predecessors, (2301), 822 states have call successors, (822), 141 states have call predecessors, (822), 140 states have return successors, (821), 819 states have call predecessors, (821), 821 states have call successors, (821) [2023-11-12 00:08:42,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2694 states to 2694 states and 3944 transitions. [2023-11-12 00:08:42,051 INFO L78 Accepts]: Start accepts. Automaton has 2694 states and 3944 transitions. Word has length 74 [2023-11-12 00:08:42,052 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 00:08:42,053 INFO L495 AbstractCegarLoop]: Abstraction has 2694 states and 3944 transitions. [2023-11-12 00:08:42,053 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2023-11-12 00:08:42,054 INFO L276 IsEmpty]: Start isEmpty. Operand 2694 states and 3944 transitions. [2023-11-12 00:08:42,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2023-11-12 00:08:42,070 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 00:08:42,071 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 00:08:42,071 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-12 00:08:42,072 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 00:08:42,073 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 00:08:42,073 INFO L85 PathProgramCache]: Analyzing trace with hash -219265760, now seen corresponding path program 1 times [2023-11-12 00:08:42,074 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-12 00:08:42,074 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [677698801] [2023-11-12 00:08:42,075 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 00:08:42,075 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 00:08:42,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 00:08:43,441 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2023-11-12 00:08:43,442 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-12 00:08:43,442 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [677698801] [2023-11-12 00:08:43,442 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [677698801] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 00:08:43,442 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 00:08:43,442 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-12 00:08:43,443 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2051468347] [2023-11-12 00:08:43,443 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 00:08:43,444 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-12 00:08:43,445 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-12 00:08:43,445 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-12 00:08:43,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-12 00:08:43,446 INFO L87 Difference]: Start difference. First operand 2694 states and 3944 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2023-11-12 00:08:49,382 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 00:08:51,388 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 00:08:53,441 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 00:08:55,446 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 00:08:57,455 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2023-11-12 00:08:57,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-12 00:08:57,922 INFO L93 Difference]: Finished difference Result 5367 states and 7869 transitions. [2023-11-12 00:08:57,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-12 00:08:57,923 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 88 [2023-11-12 00:08:57,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-12 00:08:57,967 INFO L225 Difference]: With dead ends: 5367 [2023-11-12 00:08:57,968 INFO L226 Difference]: Without dead ends: 5359 [2023-11-12 00:08:57,972 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-12 00:08:57,973 INFO L413 NwaCegarLoop]: 1856 mSDtfsCounter, 1977 mSDsluCounter, 3640 mSDsCounter, 0 mSdLazyCounter, 593 mSolverCounterSat, 1 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1977 SdHoareTripleChecker+Valid, 5496 SdHoareTripleChecker+Invalid, 599 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 593 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.1s IncrementalHoareTripleChecker+Time [2023-11-12 00:08:57,974 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1977 Valid, 5496 Invalid, 599 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 593 Invalid, 5 Unknown, 0 Unchecked, 14.1s Time] [2023-11-12 00:08:57,984 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5359 states. [2023-11-12 00:08:58,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5359 to 5351. [2023-11-12 00:08:58,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5351 states, 3438 states have (on average 1.3298429319371727) internal successors, (4572), 3506 states have internal predecessors, (4572), 1632 states have call successors, (1632), 281 states have call predecessors, (1632), 280 states have return successors, (1643), 1627 states have call predecessors, (1643), 1631 states have call successors, (1643) [2023-11-12 00:08:58,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5351 states to 5351 states and 7847 transitions. [2023-11-12 00:08:58,459 INFO L78 Accepts]: Start accepts. Automaton has 5351 states and 7847 transitions. Word has length 88 [2023-11-12 00:08:58,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-12 00:08:58,464 INFO L495 AbstractCegarLoop]: Abstraction has 5351 states and 7847 transitions. [2023-11-12 00:08:58,465 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2023-11-12 00:08:58,465 INFO L276 IsEmpty]: Start isEmpty. Operand 5351 states and 7847 transitions. [2023-11-12 00:08:58,483 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2023-11-12 00:08:58,484 INFO L187 NwaCegarLoop]: Found error trace [2023-11-12 00:08:58,484 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-12 00:08:58,484 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-12 00:08:58,485 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-12 00:08:58,485 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-12 00:08:58,490 INFO L85 PathProgramCache]: Analyzing trace with hash 455750049, now seen corresponding path program 1 times [2023-11-12 00:08:58,490 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-12 00:08:58,491 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [500565168] [2023-11-12 00:08:58,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-12 00:08:58,491 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-12 00:08:58,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-12 00:08:59,166 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 185 trivial. 0 not checked. [2023-11-12 00:08:59,167 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-12 00:08:59,167 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [500565168] [2023-11-12 00:08:59,167 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [500565168] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-12 00:08:59,168 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-12 00:08:59,168 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-12 00:08:59,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [928569866] [2023-11-12 00:08:59,168 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-12 00:08:59,170 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-12 00:08:59,170 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-12 00:08:59,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-12 00:08:59,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-12 00:08:59,172 INFO L87 Difference]: Start difference. First operand 5351 states and 7847 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 2 states have call successors, (21), 2 states have call predecessors, (21), 1 states have return successors, (20), 2 states have call predecessors, (20), 2 states have call successors, (20)