./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version a0165632 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- This is Ultimate 0.2.5-dev-a016563 [2024-11-09 05:15:14,000 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-09 05:15:14,107 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/config/svcomp-Reach-64bit-Taipan_Default.epf [2024-11-09 05:15:14,115 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-09 05:15:14,115 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-09 05:15:14,165 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-09 05:15:14,166 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-09 05:15:14,168 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-09 05:15:14,169 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-09 05:15:14,169 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-09 05:15:14,170 INFO L153 SettingsManager]: * User list type=DISABLED [2024-11-09 05:15:14,172 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2024-11-09 05:15:14,173 INFO L153 SettingsManager]: * Explicit value domain=true [2024-11-09 05:15:14,173 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2024-11-09 05:15:14,174 INFO L153 SettingsManager]: * Octagon Domain=false [2024-11-09 05:15:14,177 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2024-11-09 05:15:14,177 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2024-11-09 05:15:14,178 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2024-11-09 05:15:14,178 INFO L153 SettingsManager]: * Interval Domain=false [2024-11-09 05:15:14,179 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2024-11-09 05:15:14,179 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2024-11-09 05:15:14,180 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2024-11-09 05:15:14,181 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-09 05:15:14,182 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-09 05:15:14,182 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-09 05:15:14,183 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-09 05:15:14,184 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-09 05:15:14,184 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-09 05:15:14,185 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-09 05:15:14,185 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-09 05:15:14,186 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-09 05:15:14,186 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-09 05:15:14,187 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-09 05:15:14,187 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-09 05:15:14,188 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-09 05:15:14,188 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-09 05:15:14,189 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-09 05:15:14,189 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-09 05:15:14,190 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-09 05:15:14,190 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2024-11-09 05:15:14,191 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-09 05:15:14,192 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-09 05:15:14,192 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2024-11-09 05:15:14,192 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-09 05:15:14,193 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2024-11-09 05:15:14,546 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-09 05:15:14,576 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-09 05:15:14,582 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-09 05:15:14,584 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-09 05:15:14,585 INFO L274 PluginConnector]: CDTParser initialized [2024-11-09 05:15:14,586 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i Unable to find full path for "g++" [2024-11-09 05:15:17,064 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-09 05:15:17,857 INFO L384 CDTParser]: Found 1 translation units. [2024-11-09 05:15:17,858 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2024-11-09 05:15:17,920 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/data/208b0bdca/abdb8dca2b054fe4b38ce0f896ddabdd/FLAG1c68c9703 [2024-11-09 05:15:17,939 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/data/208b0bdca/abdb8dca2b054fe4b38ce0f896ddabdd [2024-11-09 05:15:17,943 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-09 05:15:17,945 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-09 05:15:17,947 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-09 05:15:17,947 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-09 05:15:17,955 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-09 05:15:17,956 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 05:15:17" (1/1) ... [2024-11-09 05:15:17,958 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@388951ff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:17, skipping insertion in model container [2024-11-09 05:15:17,958 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 05:15:17" (1/1) ... [2024-11-09 05:15:18,176 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-09 05:15:19,569 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2024-11-09 05:15:21,070 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 05:15:21,124 INFO L200 MainTranslator]: Completed pre-run [2024-11-09 05:15:21,373 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"./arch/x86/include/asm/paravirt.h"), "i" (804), "i" (12UL)); [7074-7075] [2024-11-09 05:15:21,379 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("771:\n\tcall *%c2;\n772:\n.pushsection .parainstructions,\"a\"\n .balign 8 \n .quad 771b\n .byte %c1\n .byte 772b-771b\n .short %c3\n.popsection\n": "=a" (__eax): [paravirt_typenum] "i" (44UL), [paravirt_opptr] "i" (& pv_irq_ops.save_fl.func), [paravirt_clobber] "i" (1): "memory", "cc"); [7080-7082] [2024-11-09 05:15:21,395 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"include/asm-generic/dma-mapping-common.h"), "i" (19), "i" (12UL)); [7219-7220] [2024-11-09 05:15:21,398 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"include/asm-generic/dma-mapping-common.h"), "i" (36), "i" (12UL)); [7248-7249] [2024-11-09 05:15:21,410 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2024-11-09 05:15:21,866 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 05:15:22,151 INFO L204 MainTranslator]: Completed translation [2024-11-09 05:15:22,151 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22 WrapperNode [2024-11-09 05:15:22,151 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-09 05:15:22,153 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-09 05:15:22,153 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-09 05:15:22,154 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-09 05:15:22,164 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:22,293 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:22,584 INFO L138 Inliner]: procedures = 247, calls = 2754, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 7622 [2024-11-09 05:15:22,588 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-09 05:15:22,589 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-09 05:15:22,589 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-09 05:15:22,590 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-09 05:15:22,614 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:22,614 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:22,657 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:22,658 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:22,926 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:23,068 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:23,108 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:23,137 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:23,186 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-09 05:15:23,188 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-09 05:15:23,190 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-09 05:15:23,190 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-09 05:15:23,191 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (1/1) ... [2024-11-09 05:15:23,199 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-09 05:15:23,214 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 05:15:23,237 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2024-11-09 05:15:23,246 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2024-11-09 05:15:23,285 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2024-11-09 05:15:23,285 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2024-11-09 05:15:23,285 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2024-11-09 05:15:23,285 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2024-11-09 05:15:23,286 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2024-11-09 05:15:23,286 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2024-11-09 05:15:23,286 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2024-11-09 05:15:23,286 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2024-11-09 05:15:23,287 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2024-11-09 05:15:23,287 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2024-11-09 05:15:23,287 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2024-11-09 05:15:23,287 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2024-11-09 05:15:23,287 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2024-11-09 05:15:23,288 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2024-11-09 05:15:23,288 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2024-11-09 05:15:23,288 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2024-11-09 05:15:23,288 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2024-11-09 05:15:23,288 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2024-11-09 05:15:23,289 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2024-11-09 05:15:23,290 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2024-11-09 05:15:23,290 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2024-11-09 05:15:23,290 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2024-11-09 05:15:23,291 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2024-11-09 05:15:23,291 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2024-11-09 05:15:23,291 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2024-11-09 05:15:23,292 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2024-11-09 05:15:23,294 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2024-11-09 05:15:23,294 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2024-11-09 05:15:23,295 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2024-11-09 05:15:23,295 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2024-11-09 05:15:23,295 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2024-11-09 05:15:23,295 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2024-11-09 05:15:23,295 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2024-11-09 05:15:23,295 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2024-11-09 05:15:23,296 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2024-11-09 05:15:23,296 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2024-11-09 05:15:23,296 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2024-11-09 05:15:23,296 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2024-11-09 05:15:23,296 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2024-11-09 05:15:23,296 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2024-11-09 05:15:23,297 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2024-11-09 05:15:23,297 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2024-11-09 05:15:23,297 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-11-09 05:15:23,297 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2024-11-09 05:15:23,297 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2024-11-09 05:15:23,297 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2024-11-09 05:15:23,297 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2024-11-09 05:15:23,297 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2024-11-09 05:15:23,298 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2024-11-09 05:15:23,298 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2024-11-09 05:15:23,298 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-11-09 05:15:23,298 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2024-11-09 05:15:23,298 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2024-11-09 05:15:23,298 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2024-11-09 05:15:23,298 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2024-11-09 05:15:23,299 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2024-11-09 05:15:23,299 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2024-11-09 05:15:23,299 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2024-11-09 05:15:23,299 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2024-11-09 05:15:23,299 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2024-11-09 05:15:23,299 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2024-11-09 05:15:23,299 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2024-11-09 05:15:23,299 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2024-11-09 05:15:23,300 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2024-11-09 05:15:23,300 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2024-11-09 05:15:23,300 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2024-11-09 05:15:23,302 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2024-11-09 05:15:23,303 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2024-11-09 05:15:23,303 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2024-11-09 05:15:23,303 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2024-11-09 05:15:23,303 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2024-11-09 05:15:23,303 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2024-11-09 05:15:23,304 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2024-11-09 05:15:23,304 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2024-11-09 05:15:23,304 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2024-11-09 05:15:23,304 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2024-11-09 05:15:23,304 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2024-11-09 05:15:23,304 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2024-11-09 05:15:23,305 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2024-11-09 05:15:23,305 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2024-11-09 05:15:23,305 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2024-11-09 05:15:23,305 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2024-11-09 05:15:23,306 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2024-11-09 05:15:23,307 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2024-11-09 05:15:23,307 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2024-11-09 05:15:23,308 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2024-11-09 05:15:23,308 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2024-11-09 05:15:23,308 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2024-11-09 05:15:23,308 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2024-11-09 05:15:23,309 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2024-11-09 05:15:23,309 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2024-11-09 05:15:23,310 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2024-11-09 05:15:23,310 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2024-11-09 05:15:23,310 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2024-11-09 05:15:23,310 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2024-11-09 05:15:23,310 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2024-11-09 05:15:23,311 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2024-11-09 05:15:23,311 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2024-11-09 05:15:23,311 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2024-11-09 05:15:23,311 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2024-11-09 05:15:23,311 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2024-11-09 05:15:23,313 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2024-11-09 05:15:23,313 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_dev_dbg [2024-11-09 05:15:23,313 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_dev_dbg [2024-11-09 05:15:23,314 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2024-11-09 05:15:23,314 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2024-11-09 05:15:23,314 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2024-11-09 05:15:23,314 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2024-11-09 05:15:23,314 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_pr_debug [2024-11-09 05:15:23,314 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_pr_debug [2024-11-09 05:15:23,314 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2024-11-09 05:15:23,314 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2024-11-09 05:15:23,314 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2024-11-09 05:15:23,315 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2024-11-09 05:15:23,315 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2024-11-09 05:15:23,315 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2024-11-09 05:15:23,315 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2024-11-09 05:15:23,315 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-09 05:15:23,315 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2024-11-09 05:15:23,315 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2024-11-09 05:15:23,315 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2024-11-09 05:15:23,316 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2024-11-09 05:15:23,316 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2024-11-09 05:15:23,316 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2024-11-09 05:15:23,316 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2024-11-09 05:15:23,316 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2024-11-09 05:15:23,316 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2024-11-09 05:15:23,316 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2024-11-09 05:15:23,316 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2024-11-09 05:15:23,317 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2024-11-09 05:15:23,317 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2024-11-09 05:15:23,317 INFO L130 BoogieDeclarations]: Found specification of procedure dev_warn [2024-11-09 05:15:23,317 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_warn [2024-11-09 05:15:23,319 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2024-11-09 05:15:23,319 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-09 05:15:23,319 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-09 05:15:23,319 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2024-11-09 05:15:23,319 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2024-11-09 05:15:23,320 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2024-11-09 05:15:23,320 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2024-11-09 05:15:24,482 INFO L238 CfgBuilder]: Building ICFG [2024-11-09 05:15:24,486 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-09 05:15:25,654 INFO L735 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2024-11-09 05:15:44,148 INFO L? ?]: Removed 2604 outVars from TransFormulas that were not future-live. [2024-11-09 05:15:44,149 INFO L287 CfgBuilder]: Performing block encoding [2024-11-09 05:15:47,014 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-09 05:15:47,018 INFO L316 CfgBuilder]: Removed 2 assume(true) statements. [2024-11-09 05:15:47,019 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 05:15:47 BoogieIcfgContainer [2024-11-09 05:15:47,019 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-09 05:15:47,021 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-09 05:15:47,023 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-09 05:15:47,027 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-09 05:15:47,028 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 09.11 05:15:17" (1/3) ... [2024-11-09 05:15:47,029 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@640759b2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 09.11 05:15:47, skipping insertion in model container [2024-11-09 05:15:47,029 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:15:22" (2/3) ... [2024-11-09 05:15:47,029 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@640759b2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 09.11 05:15:47, skipping insertion in model container [2024-11-09 05:15:47,030 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 05:15:47" (3/3) ... [2024-11-09 05:15:47,031 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2024-11-09 05:15:47,055 INFO L214 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-09 05:15:47,055 INFO L154 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-11-09 05:15:47,204 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-09 05:15:47,213 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3f6aefd9, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-09 05:15:47,214 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-09 05:15:47,229 INFO L276 IsEmpty]: Start isEmpty. Operand has 1519 states, 1014 states have (on average 1.3678500986193294) internal successors, (1387), 1037 states have internal predecessors, (1387), 442 states have call successors, (442), 62 states have call predecessors, (442), 61 states have return successors, (435), 435 states have call predecessors, (435), 435 states have call successors, (435) [2024-11-09 05:15:47,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2024-11-09 05:15:47,243 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:15:47,244 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:15:47,244 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:15:47,252 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:15:47,253 INFO L85 PathProgramCache]: Analyzing trace with hash 265686033, now seen corresponding path program 1 times [2024-11-09 05:15:47,263 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:15:47,264 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1225464938] [2024-11-09 05:15:47,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:15:47,265 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:15:50,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:15:52,549 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-11-09 05:15:52,550 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 05:15:52,550 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1225464938] [2024-11-09 05:15:52,551 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1225464938] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:15:52,551 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:15:52,551 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 05:15:52,553 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [502781845] [2024-11-09 05:15:52,554 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:15:52,559 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-11-09 05:15:52,559 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 05:15:52,585 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-09 05:15:52,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2024-11-09 05:15:52,592 INFO L87 Difference]: Start difference. First operand has 1519 states, 1014 states have (on average 1.3678500986193294) internal successors, (1387), 1037 states have internal predecessors, (1387), 442 states have call successors, (442), 62 states have call predecessors, (442), 61 states have return successors, (435), 435 states have call predecessors, (435), 435 states have call successors, (435) Second operand has 6 states, 6 states have (on average 2.8333333333333335) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-11-09 05:15:54,708 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.10s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:15:56,896 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.19s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:15:59,096 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.20s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:02,251 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:04,260 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:17,208 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:26,609 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:28,021 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.41s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:30,390 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.25s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:33,241 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.97s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:34,297 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.06s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:39,678 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:41,688 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:44,592 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:48,345 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:50,355 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:53,247 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.69s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:55,646 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:57,657 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:16:59,663 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:01,671 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:03,681 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:05,712 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:07,720 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:09,730 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:11,406 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.57s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:12,957 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.55s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:14,993 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:15,171 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:17:15,172 INFO L93 Difference]: Finished difference Result 5988 states and 8950 transitions. [2024-11-09 05:17:15,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-09 05:17:15,177 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 2.8333333333333335) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 30 [2024-11-09 05:17:15,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:17:15,231 INFO L225 Difference]: With dead ends: 5988 [2024-11-09 05:17:15,231 INFO L226 Difference]: Without dead ends: 4441 [2024-11-09 05:17:15,248 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=24, Invalid=32, Unknown=0, NotChecked=0, Total=56 [2024-11-09 05:17:15,253 INFO L432 NwaCegarLoop]: 2076 mSDtfsCounter, 5791 mSDsluCounter, 6434 mSDsCounter, 0 mSdLazyCounter, 2662 mSolverCounterSat, 880 mSolverCounterUnsat, 20 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 79.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5791 SdHoareTripleChecker+Valid, 8510 SdHoareTripleChecker+Invalid, 3562 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 880 IncrementalHoareTripleChecker+Valid, 2662 IncrementalHoareTripleChecker+Invalid, 20 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 81.7s IncrementalHoareTripleChecker+Time [2024-11-09 05:17:15,256 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [5791 Valid, 8510 Invalid, 3562 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [880 Valid, 2662 Invalid, 20 Unknown, 0 Unchecked, 81.7s Time] [2024-11-09 05:17:15,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4441 states. [2024-11-09 05:17:15,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4441 to 4441. [2024-11-09 05:17:15,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4441 states, 2981 states have (on average 1.3565917477356593) internal successors, (4044), 3023 states have internal predecessors, (4044), 1279 states have call successors, (1279), 181 states have call predecessors, (1279), 180 states have return successors, (1278), 1278 states have call predecessors, (1278), 1278 states have call successors, (1278) [2024-11-09 05:17:15,667 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4441 states to 4441 states and 6601 transitions. [2024-11-09 05:17:15,672 INFO L78 Accepts]: Start accepts. Automaton has 4441 states and 6601 transitions. Word has length 30 [2024-11-09 05:17:15,673 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:17:15,673 INFO L471 AbstractCegarLoop]: Abstraction has 4441 states and 6601 transitions. [2024-11-09 05:17:15,674 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 2.8333333333333335) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-11-09 05:17:15,674 INFO L276 IsEmpty]: Start isEmpty. Operand 4441 states and 6601 transitions. [2024-11-09 05:17:15,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-11-09 05:17:15,680 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:17:15,681 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:17:15,681 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-09 05:17:15,681 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:17:15,682 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:17:15,682 INFO L85 PathProgramCache]: Analyzing trace with hash -1369462760, now seen corresponding path program 1 times [2024-11-09 05:17:15,682 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:17:15,682 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1528628404] [2024-11-09 05:17:15,682 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:17:15,683 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:17:18,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:17:19,598 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-11-09 05:17:19,598 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 05:17:19,599 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1528628404] [2024-11-09 05:17:19,599 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1528628404] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:17:19,599 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:17:19,599 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 05:17:19,599 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1262029614] [2024-11-09 05:17:19,599 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:17:19,601 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-09 05:17:19,601 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 05:17:19,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 05:17:19,603 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 05:17:19,603 INFO L87 Difference]: Start difference. First operand 4441 states and 6601 transitions. Second operand has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 3 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-11-09 05:17:21,669 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.06s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:23,851 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:26,290 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:28,302 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:34,674 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:36,680 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:38,685 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:41,908 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:43,917 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:46,184 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:48,415 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.48s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:51,510 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:53,445 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.93s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:56,285 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:17:58,346 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:00,353 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:02,360 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:04,366 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:06,372 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:08,987 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.20s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:09,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:18:09,024 INFO L93 Difference]: Finished difference Result 8875 states and 13210 transitions. [2024-11-09 05:18:09,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 05:18:09,029 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 3 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 44 [2024-11-09 05:18:09,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:18:09,086 INFO L225 Difference]: With dead ends: 8875 [2024-11-09 05:18:09,087 INFO L226 Difference]: Without dead ends: 8870 [2024-11-09 05:18:09,094 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-11-09 05:18:09,095 INFO L432 NwaCegarLoop]: 2296 mSDtfsCounter, 2214 mSDsluCounter, 4345 mSDsCounter, 0 mSdLazyCounter, 547 mSolverCounterSat, 1 mSolverCounterUnsat, 17 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 48.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2214 SdHoareTripleChecker+Valid, 6641 SdHoareTripleChecker+Invalid, 565 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 547 IncrementalHoareTripleChecker+Invalid, 17 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 49.0s IncrementalHoareTripleChecker+Time [2024-11-09 05:18:09,095 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [2214 Valid, 6641 Invalid, 565 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 547 Invalid, 17 Unknown, 0 Unchecked, 49.0s Time] [2024-11-09 05:18:09,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8870 states. [2024-11-09 05:18:09,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8870 to 8867. [2024-11-09 05:18:09,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8867 states, 5952 states have (on average 1.3568548387096775) internal successors, (8076), 6036 states have internal predecessors, (8076), 2554 states have call successors, (2554), 361 states have call predecessors, (2554), 360 states have return successors, (2571), 2553 states have call predecessors, (2571), 2553 states have call successors, (2571) [2024-11-09 05:18:09,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8867 states to 8867 states and 13201 transitions. [2024-11-09 05:18:09,564 INFO L78 Accepts]: Start accepts. Automaton has 8867 states and 13201 transitions. Word has length 44 [2024-11-09 05:18:09,564 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:18:09,565 INFO L471 AbstractCegarLoop]: Abstraction has 8867 states and 13201 transitions. [2024-11-09 05:18:09,565 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.75) internal successors, (27), 4 states have internal predecessors, (27), 3 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-11-09 05:18:09,565 INFO L276 IsEmpty]: Start isEmpty. Operand 8867 states and 13201 transitions. [2024-11-09 05:18:09,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2024-11-09 05:18:09,587 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:18:09,588 INFO L215 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:18:09,588 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-09 05:18:09,588 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:18:09,589 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:18:09,591 INFO L85 PathProgramCache]: Analyzing trace with hash 1872724611, now seen corresponding path program 1 times [2024-11-09 05:18:09,591 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:18:09,591 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2049857081] [2024-11-09 05:18:09,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:18:09,592 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:18:12,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:18:12,564 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-11-09 05:18:12,565 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 05:18:12,565 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2049857081] [2024-11-09 05:18:12,565 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2049857081] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:18:12,565 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:18:12,565 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 05:18:12,566 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2026416631] [2024-11-09 05:18:12,566 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:18:12,567 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-09 05:18:12,567 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 05:18:12,568 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 05:18:12,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 05:18:12,569 INFO L87 Difference]: Start difference. First operand 8867 states and 13201 transitions. Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2024-11-09 05:18:14,641 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.07s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:16,931 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:19,539 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:21,543 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:25,867 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.21s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:27,479 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.12s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:29,311 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.36s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:31,325 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:33,431 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:35,439 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:36,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:18:36,451 INFO L93 Difference]: Finished difference Result 19350 states and 28715 transitions. [2024-11-09 05:18:36,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 05:18:36,452 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 108 [2024-11-09 05:18:36,452 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:18:36,521 INFO L225 Difference]: With dead ends: 19350 [2024-11-09 05:18:36,522 INFO L226 Difference]: Without dead ends: 10490 [2024-11-09 05:18:36,562 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 05:18:36,563 INFO L432 NwaCegarLoop]: 2064 mSDtfsCounter, 416 mSDsluCounter, 2008 mSDsCounter, 0 mSdLazyCounter, 393 mSolverCounterSat, 2 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 23.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 416 SdHoareTripleChecker+Valid, 4072 SdHoareTripleChecker+Invalid, 402 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 393 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 23.6s IncrementalHoareTripleChecker+Time [2024-11-09 05:18:36,564 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [416 Valid, 4072 Invalid, 402 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 393 Invalid, 7 Unknown, 0 Unchecked, 23.6s Time] [2024-11-09 05:18:36,577 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10490 states. [2024-11-09 05:18:37,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10490 to 10485. [2024-11-09 05:18:37,081 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10485 states, 7132 states have (on average 1.369461581604038) internal successors, (9767), 7216 states have internal predecessors, (9767), 2865 states have call successors, (2865), 488 states have call predecessors, (2865), 487 states have return successors, (2882), 2864 states have call predecessors, (2882), 2864 states have call successors, (2882) [2024-11-09 05:18:37,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10485 states to 10485 states and 15514 transitions. [2024-11-09 05:18:37,139 INFO L78 Accepts]: Start accepts. Automaton has 10485 states and 15514 transitions. Word has length 108 [2024-11-09 05:18:37,141 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:18:37,142 INFO L471 AbstractCegarLoop]: Abstraction has 10485 states and 15514 transitions. [2024-11-09 05:18:37,142 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 3 states have internal predecessors, (73), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2024-11-09 05:18:37,142 INFO L276 IsEmpty]: Start isEmpty. Operand 10485 states and 15514 transitions. [2024-11-09 05:18:37,162 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 141 [2024-11-09 05:18:37,163 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:18:37,163 INFO L215 NwaCegarLoop]: trace histogram [8, 8, 8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:18:37,163 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-11-09 05:18:37,163 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:18:37,164 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:18:37,164 INFO L85 PathProgramCache]: Analyzing trace with hash -1086990730, now seen corresponding path program 1 times [2024-11-09 05:18:37,164 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:18:37,164 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [843186371] [2024-11-09 05:18:37,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:18:37,165 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:18:40,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:18:41,304 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-09 05:18:41,304 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 05:18:41,304 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [843186371] [2024-11-09 05:18:41,304 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [843186371] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:18:41,305 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:18:41,305 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 05:18:41,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1857594481] [2024-11-09 05:18:41,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:18:41,306 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-09 05:18:41,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 05:18:41,308 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 05:18:41,308 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 05:18:41,308 INFO L87 Difference]: Start difference. First operand 10485 states and 15514 transitions. Second operand has 5 states, 5 states have (on average 16.8) internal successors, (84), 4 states have internal predecessors, (84), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2024-11-09 05:18:43,359 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:45,509 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.15s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:47,676 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:49,834 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.16s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:52,400 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:54,407 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:56,413 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:18:58,422 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:06,077 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:08,084 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:10,879 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.98s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:14,925 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:16,464 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.54s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:18,480 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:20,487 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:22,629 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:24,639 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:26,651 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:28,660 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:30,709 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:32,717 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:34,332 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:19:34,333 INFO L93 Difference]: Finished difference Result 20983 states and 31107 transitions. [2024-11-09 05:19:34,333 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 05:19:34,333 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 16.8) internal successors, (84), 4 states have internal predecessors, (84), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) Word has length 140 [2024-11-09 05:19:34,334 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:19:34,481 INFO L225 Difference]: With dead ends: 20983 [2024-11-09 05:19:34,482 INFO L226 Difference]: Without dead ends: 10511 [2024-11-09 05:19:34,511 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 05:19:34,512 INFO L432 NwaCegarLoop]: 2057 mSDtfsCounter, 0 mSDsluCounter, 6166 mSDsCounter, 0 mSdLazyCounter, 705 mSolverCounterSat, 0 mSolverCounterUnsat, 19 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 51.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 8223 SdHoareTripleChecker+Invalid, 724 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 705 IncrementalHoareTripleChecker+Invalid, 19 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 52.7s IncrementalHoareTripleChecker+Time [2024-11-09 05:19:34,512 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 8223 Invalid, 724 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 705 Invalid, 19 Unknown, 0 Unchecked, 52.7s Time] [2024-11-09 05:19:34,524 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10511 states. [2024-11-09 05:19:34,962 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10511 to 10509. [2024-11-09 05:19:34,986 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10509 states, 7150 states have (on average 1.3685314685314685) internal successors, (9785), 7234 states have internal predecessors, (9785), 2865 states have call successors, (2865), 488 states have call predecessors, (2865), 493 states have return successors, (2896), 2870 states have call predecessors, (2896), 2864 states have call successors, (2896) [2024-11-09 05:19:35,029 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10509 states to 10509 states and 15546 transitions. [2024-11-09 05:19:35,042 INFO L78 Accepts]: Start accepts. Automaton has 10509 states and 15546 transitions. Word has length 140 [2024-11-09 05:19:35,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:19:35,044 INFO L471 AbstractCegarLoop]: Abstraction has 10509 states and 15546 transitions. [2024-11-09 05:19:35,045 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 16.8) internal successors, (84), 4 states have internal predecessors, (84), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 2 states have call successors, (16) [2024-11-09 05:19:35,045 INFO L276 IsEmpty]: Start isEmpty. Operand 10509 states and 15546 transitions. [2024-11-09 05:19:35,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2024-11-09 05:19:35,069 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:19:35,069 INFO L215 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:19:35,069 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-11-09 05:19:35,070 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:19:35,070 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:19:35,070 INFO L85 PathProgramCache]: Analyzing trace with hash -1804245829, now seen corresponding path program 1 times [2024-11-09 05:19:35,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:19:35,071 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1445448375] [2024-11-09 05:19:35,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:19:35,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:19:37,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:19:39,364 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-09 05:19:39,365 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 05:19:39,365 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1445448375] [2024-11-09 05:19:39,366 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1445448375] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:19:39,366 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:19:39,366 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 05:19:39,366 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134461957] [2024-11-09 05:19:39,366 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:19:39,367 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-09 05:19:39,367 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 05:19:39,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 05:19:39,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 05:19:39,368 INFO L87 Difference]: Start difference. First operand 10509 states and 15546 transitions. Second operand has 5 states, 5 states have (on average 17.0) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 2 states have call successors, (17) [2024-11-09 05:19:41,438 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.07s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:43,609 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:45,759 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.15s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:47,928 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:50,458 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:52,462 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:54,470 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:19:56,477 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:05,531 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:07,535 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:08,694 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.16s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:12,860 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:14,866 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:16,874 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:18,883 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:21,035 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:23,045 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:25,057 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:27,061 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:29,112 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:31,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:20:31,461 INFO L93 Difference]: Finished difference Result 21053 states and 31285 transitions. [2024-11-09 05:20:31,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 05:20:31,462 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 17.0) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 2 states have call successors, (17) Word has length 144 [2024-11-09 05:20:31,462 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:20:31,515 INFO L225 Difference]: With dead ends: 21053 [2024-11-09 05:20:31,516 INFO L226 Difference]: Without dead ends: 10557 [2024-11-09 05:20:31,554 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 05:20:31,555 INFO L432 NwaCegarLoop]: 2057 mSDtfsCounter, 0 mSDsluCounter, 6166 mSDsCounter, 0 mSdLazyCounter, 704 mSolverCounterSat, 1 mSolverCounterUnsat, 19 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 50.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 8223 SdHoareTripleChecker+Invalid, 724 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 704 IncrementalHoareTripleChecker+Invalid, 19 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 51.8s IncrementalHoareTripleChecker+Time [2024-11-09 05:20:31,555 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 8223 Invalid, 724 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 704 Invalid, 19 Unknown, 0 Unchecked, 51.8s Time] [2024-11-09 05:20:31,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10557 states. [2024-11-09 05:20:32,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10557 to 10557. [2024-11-09 05:20:32,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10557 states, 7186 states have (on average 1.366685221263568) internal successors, (9821), 7270 states have internal predecessors, (9821), 2865 states have call successors, (2865), 488 states have call predecessors, (2865), 505 states have return successors, (2992), 2882 states have call predecessors, (2992), 2864 states have call successors, (2992) [2024-11-09 05:20:32,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10557 states to 10557 states and 15678 transitions. [2024-11-09 05:20:32,226 INFO L78 Accepts]: Start accepts. Automaton has 10557 states and 15678 transitions. Word has length 144 [2024-11-09 05:20:32,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:20:32,227 INFO L471 AbstractCegarLoop]: Abstraction has 10557 states and 15678 transitions. [2024-11-09 05:20:32,228 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 17.0) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 2 states have call successors, (17) [2024-11-09 05:20:32,228 INFO L276 IsEmpty]: Start isEmpty. Operand 10557 states and 15678 transitions. [2024-11-09 05:20:32,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 147 [2024-11-09 05:20:32,251 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:20:32,252 INFO L215 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:20:32,252 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-11-09 05:20:32,253 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:20:32,254 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:20:32,254 INFO L85 PathProgramCache]: Analyzing trace with hash 2086102750, now seen corresponding path program 1 times [2024-11-09 05:20:32,254 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:20:32,254 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1584707180] [2024-11-09 05:20:32,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:20:32,255 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:20:36,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:20:37,167 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2024-11-09 05:20:37,167 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 05:20:37,167 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1584707180] [2024-11-09 05:20:37,168 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1584707180] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:20:37,168 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:20:37,168 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 05:20:37,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1939577116] [2024-11-09 05:20:37,168 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:20:37,169 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-09 05:20:37,170 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 05:20:37,170 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 05:20:37,170 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 05:20:37,171 INFO L87 Difference]: Start difference. First operand 10557 states and 15678 transitions. Second operand has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2024-11-09 05:20:39,241 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.07s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:41,376 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.13s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:43,555 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.18s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:46,046 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:48,050 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:50,055 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:53,011 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:20:55,016 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:04,065 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.98s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:05,520 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.22s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:07,729 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:09,737 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:11,056 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.09s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:13,383 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.34s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:16,938 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:19,132 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.57s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:21,215 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:23,224 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:25,399 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:27,416 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:29,424 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:31,474 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:33,482 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:37,043 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:38,644 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.57s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:40,657 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:40,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:21:40,713 INFO L93 Difference]: Finished difference Result 21463 states and 31838 transitions. [2024-11-09 05:21:40,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 05:21:40,714 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 146 [2024-11-09 05:21:40,714 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:21:40,788 INFO L225 Difference]: With dead ends: 21463 [2024-11-09 05:21:40,788 INFO L226 Difference]: Without dead ends: 10903 [2024-11-09 05:21:40,833 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-11-09 05:21:40,834 INFO L432 NwaCegarLoop]: 4082 mSDtfsCounter, 2207 mSDsluCounter, 6128 mSDsCounter, 0 mSdLazyCounter, 870 mSolverCounterSat, 3 mSolverCounterUnsat, 20 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 62.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2207 SdHoareTripleChecker+Valid, 10210 SdHoareTripleChecker+Invalid, 893 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 870 IncrementalHoareTripleChecker+Invalid, 20 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 63.1s IncrementalHoareTripleChecker+Time [2024-11-09 05:21:40,834 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [2207 Valid, 10210 Invalid, 893 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 870 Invalid, 20 Unknown, 0 Unchecked, 63.1s Time] [2024-11-09 05:21:40,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10903 states. [2024-11-09 05:21:41,561 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10903 to 10602. [2024-11-09 05:21:41,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10602 states, 7213 states have (on average 1.3661444613891585) internal successors, (9854), 7302 states have internal predecessors, (9854), 2876 states have call successors, (2876), 495 states have call predecessors, (2876), 512 states have return successors, (3003), 2888 states have call predecessors, (3003), 2875 states have call successors, (3003) [2024-11-09 05:21:41,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10602 states to 10602 states and 15733 transitions. [2024-11-09 05:21:41,650 INFO L78 Accepts]: Start accepts. Automaton has 10602 states and 15733 transitions. Word has length 146 [2024-11-09 05:21:41,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:21:41,651 INFO L471 AbstractCegarLoop]: Abstraction has 10602 states and 15733 transitions. [2024-11-09 05:21:41,651 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 21.75) internal successors, (87), 4 states have internal predecessors, (87), 3 states have call successors, (18), 2 states have call predecessors, (18), 1 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2024-11-09 05:21:41,655 INFO L276 IsEmpty]: Start isEmpty. Operand 10602 states and 15733 transitions. [2024-11-09 05:21:41,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 148 [2024-11-09 05:21:41,679 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:21:41,679 INFO L215 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:21:41,679 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2024-11-09 05:21:41,680 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:21:41,680 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:21:41,680 INFO L85 PathProgramCache]: Analyzing trace with hash 142571514, now seen corresponding path program 1 times [2024-11-09 05:21:41,681 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:21:41,681 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292644881] [2024-11-09 05:21:41,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:21:41,681 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:21:45,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:21:51,412 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2024-11-09 05:21:51,413 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 05:21:51,413 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292644881] [2024-11-09 05:21:51,413 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [292644881] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:21:51,413 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:21:51,414 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2024-11-09 05:21:51,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1648838869] [2024-11-09 05:21:51,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:21:51,415 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-11-09 05:21:51,415 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 05:21:51,416 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-11-09 05:21:51,416 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2024-11-09 05:21:51,417 INFO L87 Difference]: Start difference. First operand 10602 states and 15733 transitions. Second operand has 13 states, 10 states have (on average 8.8) internal successors, (88), 9 states have internal predecessors, (88), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2024-11-09 05:21:53,480 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.06s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:55,663 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.18s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:57,826 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.16s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:21:59,987 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.16s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:02,151 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.16s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:04,316 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.16s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:06,495 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.18s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:08,655 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.16s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:10,828 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:13,015 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.19s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:15,171 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.15s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:17,332 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.16s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:20,730 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:22,752 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:24,757 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:26,764 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:28,770 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:30,775 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:32,783 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:34,790 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:36,794 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:38,808 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:40,815 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:22:42,823 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:04,310 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:05,641 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.33s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:19,100 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:22,602 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:24,612 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:26,622 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:27,743 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.12s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:29,751 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:31,457 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.71s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:33,467 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:36,570 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:38,581 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:40,593 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:42,601 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:44,607 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:46,617 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:48,632 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:50,637 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:52,653 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:54,668 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:56,677 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:23:58,687 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:00,795 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:02,763 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.97s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:04,772 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:06,323 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.55s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:08,336 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:10,342 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:12,360 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:14,370 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:18,069 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.10s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:18,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:24:18,176 INFO L93 Difference]: Finished difference Result 21799 states and 32449 transitions. [2024-11-09 05:24:18,177 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-11-09 05:24:18,177 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 8.8) internal successors, (88), 9 states have internal predecessors, (88), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) Word has length 147 [2024-11-09 05:24:18,178 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:24:18,242 INFO L225 Difference]: With dead ends: 21799 [2024-11-09 05:24:18,242 INFO L226 Difference]: Without dead ends: 11210 [2024-11-09 05:24:18,282 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=24, Invalid=132, Unknown=0, NotChecked=0, Total=156 [2024-11-09 05:24:18,283 INFO L432 NwaCegarLoop]: 2110 mSDtfsCounter, 86 mSDsluCounter, 21040 mSDsCounter, 0 mSdLazyCounter, 2073 mSolverCounterSat, 1 mSolverCounterUnsat, 49 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 143.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 119 SdHoareTripleChecker+Valid, 23150 SdHoareTripleChecker+Invalid, 2123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2073 IncrementalHoareTripleChecker+Invalid, 49 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 146.2s IncrementalHoareTripleChecker+Time [2024-11-09 05:24:18,283 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [119 Valid, 23150 Invalid, 2123 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1 Valid, 2073 Invalid, 49 Unknown, 0 Unchecked, 146.2s Time] [2024-11-09 05:24:18,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11210 states. [2024-11-09 05:24:18,931 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11210 to 10638. [2024-11-09 05:24:18,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10638 states, 7237 states have (on average 1.364101146884068) internal successors, (9872), 7326 states have internal predecessors, (9872), 2876 states have call successors, (2876), 495 states have call predecessors, (2876), 524 states have return successors, (3039), 2900 states have call predecessors, (3039), 2875 states have call successors, (3039) [2024-11-09 05:24:18,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10638 states to 10638 states and 15787 transitions. [2024-11-09 05:24:19,006 INFO L78 Accepts]: Start accepts. Automaton has 10638 states and 15787 transitions. Word has length 147 [2024-11-09 05:24:19,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:24:19,007 INFO L471 AbstractCegarLoop]: Abstraction has 10638 states and 15787 transitions. [2024-11-09 05:24:19,007 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 8.8) internal successors, (88), 9 states have internal predecessors, (88), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2024-11-09 05:24:19,007 INFO L276 IsEmpty]: Start isEmpty. Operand 10638 states and 15787 transitions. [2024-11-09 05:24:19,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2024-11-09 05:24:19,030 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:24:19,030 INFO L215 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:24:19,030 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-11-09 05:24:19,031 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:24:19,031 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:24:19,031 INFO L85 PathProgramCache]: Analyzing trace with hash -1123059089, now seen corresponding path program 1 times [2024-11-09 05:24:19,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:24:19,032 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1682224201] [2024-11-09 05:24:19,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:24:19,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:24:22,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:24:23,861 INFO L134 CoverageAnalysis]: Checked inductivity of 138 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2024-11-09 05:24:23,861 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 05:24:23,861 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1682224201] [2024-11-09 05:24:23,861 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1682224201] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:24:23,862 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:24:23,862 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-09 05:24:23,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [356868326] [2024-11-09 05:24:23,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:24:23,863 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-09 05:24:23,863 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 05:24:23,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 05:24:23,864 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2024-11-09 05:24:23,864 INFO L87 Difference]: Start difference. First operand 10638 states and 15787 transitions. Second operand has 4 states, 4 states have (on average 23.25) internal successors, (93), 4 states have internal predecessors, (93), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2024-11-09 05:24:25,944 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.08s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:28,115 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:30,280 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.16s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:32,787 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:34,801 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:36,809 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:43,627 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:45,635 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:47,641 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:51,256 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:52,339 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.08s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:53,666 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.33s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:56,059 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:24:58,073 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:00,086 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:02,135 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:04,146 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:05,456 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.31s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:05,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:25:05,506 INFO L93 Difference]: Finished difference Result 21839 states and 32457 transitions. [2024-11-09 05:25:05,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 05:25:05,507 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 23.25) internal successors, (93), 4 states have internal predecessors, (93), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 156 [2024-11-09 05:25:05,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:25:05,573 INFO L225 Difference]: With dead ends: 21839 [2024-11-09 05:25:05,573 INFO L226 Difference]: Without dead ends: 11214 [2024-11-09 05:25:05,611 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2024-11-09 05:25:05,612 INFO L432 NwaCegarLoop]: 2057 mSDtfsCounter, 86 mSDsluCounter, 4067 mSDsCounter, 0 mSdLazyCounter, 537 mSolverCounterSat, 0 mSolverCounterUnsat, 15 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 40.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 6124 SdHoareTripleChecker+Invalid, 552 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 537 IncrementalHoareTripleChecker+Invalid, 15 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 41.3s IncrementalHoareTripleChecker+Time [2024-11-09 05:25:05,613 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 6124 Invalid, 552 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 537 Invalid, 15 Unknown, 0 Unchecked, 41.3s Time] [2024-11-09 05:25:05,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11214 states. [2024-11-09 05:25:06,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11214 to 10650. [2024-11-09 05:25:06,170 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10650 states, 7249 states have (on average 1.363498413574286) internal successors, (9884), 7338 states have internal predecessors, (9884), 2876 states have call successors, (2876), 495 states have call predecessors, (2876), 524 states have return successors, (3039), 2900 states have call predecessors, (3039), 2875 states have call successors, (3039) [2024-11-09 05:25:06,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10650 states to 10650 states and 15799 transitions. [2024-11-09 05:25:06,242 INFO L78 Accepts]: Start accepts. Automaton has 10650 states and 15799 transitions. Word has length 156 [2024-11-09 05:25:06,243 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:25:06,243 INFO L471 AbstractCegarLoop]: Abstraction has 10650 states and 15799 transitions. [2024-11-09 05:25:06,243 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 23.25) internal successors, (93), 4 states have internal predecessors, (93), 3 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2024-11-09 05:25:06,243 INFO L276 IsEmpty]: Start isEmpty. Operand 10650 states and 15799 transitions. [2024-11-09 05:25:06,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2024-11-09 05:25:06,277 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:25:06,277 INFO L215 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:25:06,277 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-11-09 05:25:06,277 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:25:06,278 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:25:06,278 INFO L85 PathProgramCache]: Analyzing trace with hash 1197709943, now seen corresponding path program 1 times [2024-11-09 05:25:06,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:25:06,278 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1240527044] [2024-11-09 05:25:06,279 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:25:06,279 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:25:09,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:25:09,776 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 122 trivial. 0 not checked. [2024-11-09 05:25:09,776 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 05:25:09,776 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1240527044] [2024-11-09 05:25:09,777 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1240527044] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:25:09,777 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:25:09,777 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 05:25:09,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [214411894] [2024-11-09 05:25:09,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:25:09,778 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-09 05:25:09,779 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 05:25:09,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 05:25:09,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 05:25:09,782 INFO L87 Difference]: Start difference. First operand 10650 states and 15799 transitions. Second operand has 3 states, 3 states have (on average 31.666666666666668) internal successors, (95), 3 states have internal predecessors, (95), 2 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2024-11-09 05:25:11,864 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.08s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:14,027 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.16s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:16,481 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:18,490 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:23,804 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:25,814 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:30,041 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:32,056 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:35,005 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:35,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:25:35,053 INFO L93 Difference]: Finished difference Result 21857 states and 32475 transitions. [2024-11-09 05:25:35,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 05:25:35,054 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 31.666666666666668) internal successors, (95), 3 states have internal predecessors, (95), 2 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 157 [2024-11-09 05:25:35,054 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:25:35,119 INFO L225 Difference]: With dead ends: 21857 [2024-11-09 05:25:35,119 INFO L226 Difference]: Without dead ends: 11220 [2024-11-09 05:25:35,155 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 05:25:35,156 INFO L432 NwaCegarLoop]: 2075 mSDtfsCounter, 79 mSDsluCounter, 2056 mSDsCounter, 0 mSdLazyCounter, 354 mSolverCounterSat, 0 mSolverCounterUnsat, 9 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 24.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 4131 SdHoareTripleChecker+Invalid, 363 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 354 IncrementalHoareTripleChecker+Invalid, 9 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 24.9s IncrementalHoareTripleChecker+Time [2024-11-09 05:25:35,156 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 4131 Invalid, 363 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 354 Invalid, 9 Unknown, 0 Unchecked, 24.9s Time] [2024-11-09 05:25:35,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11220 states. [2024-11-09 05:25:35,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11220 to 10656. [2024-11-09 05:25:35,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10656 states, 7255 states have (on average 1.363197794624397) internal successors, (9890), 7344 states have internal predecessors, (9890), 2876 states have call successors, (2876), 495 states have call predecessors, (2876), 524 states have return successors, (3039), 2900 states have call predecessors, (3039), 2875 states have call successors, (3039) [2024-11-09 05:25:35,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10656 states to 10656 states and 15805 transitions. [2024-11-09 05:25:35,746 INFO L78 Accepts]: Start accepts. Automaton has 10656 states and 15805 transitions. Word has length 157 [2024-11-09 05:25:35,747 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:25:35,747 INFO L471 AbstractCegarLoop]: Abstraction has 10656 states and 15805 transitions. [2024-11-09 05:25:35,747 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 31.666666666666668) internal successors, (95), 3 states have internal predecessors, (95), 2 states have call successors, (19), 2 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2024-11-09 05:25:35,748 INFO L276 IsEmpty]: Start isEmpty. Operand 10656 states and 15805 transitions. [2024-11-09 05:25:35,768 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 160 [2024-11-09 05:25:35,769 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:25:35,769 INFO L215 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:25:35,769 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-11-09 05:25:35,769 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:25:35,773 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:25:35,773 INFO L85 PathProgramCache]: Analyzing trace with hash 2019298961, now seen corresponding path program 1 times [2024-11-09 05:25:35,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:25:35,774 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [608797281] [2024-11-09 05:25:35,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:25:35,774 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:25:38,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:25:39,277 INFO L134 CoverageAnalysis]: Checked inductivity of 132 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 122 trivial. 0 not checked. [2024-11-09 05:25:39,278 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 05:25:39,278 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [608797281] [2024-11-09 05:25:39,278 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [608797281] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:25:39,278 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:25:39,278 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 05:25:39,278 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1375516579] [2024-11-09 05:25:39,278 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:25:39,279 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-09 05:25:39,279 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 05:25:39,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 05:25:39,280 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 05:25:39,280 INFO L87 Difference]: Start difference. First operand 10656 states and 15805 transitions. Second operand has 5 states, 4 states have (on average 23.75) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) [2024-11-09 05:25:41,338 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.06s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:43,505 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:45,667 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.16s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:47,838 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:50,422 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:52,429 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:54,436 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:25:56,440 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:04,861 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:06,528 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.67s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:08,534 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:12,927 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:14,082 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.15s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:16,090 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:18,382 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:20,393 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:22,397 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:24,405 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:26,066 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.61s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:28,079 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:29,817 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.74s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:31,833 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:26:31,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:26:31,884 INFO L93 Difference]: Finished difference Result 21299 states and 31593 transitions. [2024-11-09 05:26:31,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 05:26:31,885 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 23.75) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) Word has length 159 [2024-11-09 05:26:31,885 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:26:31,947 INFO L225 Difference]: With dead ends: 21299 [2024-11-09 05:26:31,947 INFO L226 Difference]: Without dead ends: 10656 [2024-11-09 05:26:31,984 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 05:26:31,985 INFO L432 NwaCegarLoop]: 2055 mSDtfsCounter, 0 mSDsluCounter, 6152 mSDsCounter, 0 mSdLazyCounter, 714 mSolverCounterSat, 1 mSolverCounterUnsat, 18 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 51.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 8207 SdHoareTripleChecker+Invalid, 733 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 714 IncrementalHoareTripleChecker+Invalid, 18 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 52.2s IncrementalHoareTripleChecker+Time [2024-11-09 05:26:31,986 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 8207 Invalid, 733 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 714 Invalid, 18 Unknown, 0 Unchecked, 52.2s Time] [2024-11-09 05:26:31,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10656 states. [2024-11-09 05:26:32,481 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10656 to 10644. [2024-11-09 05:26:32,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10644 states, 7249 states have (on average 1.362670713201821) internal successors, (9878), 7338 states have internal predecessors, (9878), 2870 states have call successors, (2870), 495 states have call predecessors, (2870), 524 states have return successors, (3033), 2894 states have call predecessors, (3033), 2869 states have call successors, (3033) [2024-11-09 05:26:32,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10644 states to 10644 states and 15781 transitions. [2024-11-09 05:26:32,567 INFO L78 Accepts]: Start accepts. Automaton has 10644 states and 15781 transitions. Word has length 159 [2024-11-09 05:26:32,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:26:32,568 INFO L471 AbstractCegarLoop]: Abstraction has 10644 states and 15781 transitions. [2024-11-09 05:26:32,568 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 23.75) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (20), 2 states have call predecessors, (20), 2 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) [2024-11-09 05:26:32,568 INFO L276 IsEmpty]: Start isEmpty. Operand 10644 states and 15781 transitions. [2024-11-09 05:26:32,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2024-11-09 05:26:32,593 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:26:32,594 INFO L215 NwaCegarLoop]: trace histogram [8, 8, 7, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:26:32,594 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2024-11-09 05:26:32,594 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:26:32,595 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:26:32,595 INFO L85 PathProgramCache]: Analyzing trace with hash -1860806923, now seen corresponding path program 1 times [2024-11-09 05:26:32,595 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 05:26:32,595 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1227694600] [2024-11-09 05:26:32,596 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:26:32,596 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 05:26:42,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-09 05:26:42,081 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-09 05:26:45,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-09 05:26:45,580 INFO L130 FreeRefinementEngine]: Strategy SIFA_TAIPAN found a feasible trace [2024-11-09 05:26:45,580 INFO L325 BasicCegarLoop]: Counterexample is feasible [2024-11-09 05:26:45,581 INFO L782 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-11-09 05:26:45,583 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2024-11-09 05:26:45,585 INFO L407 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:26:45,948 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2024-11-09 05:26:45,951 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 09.11 05:26:45 BoogieIcfgContainer [2024-11-09 05:26:45,951 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-11-09 05:26:45,951 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-11-09 05:26:45,952 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-11-09 05:26:45,952 INFO L274 PluginConnector]: Witness Printer initialized [2024-11-09 05:26:45,953 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 05:15:47" (3/4) ... [2024-11-09 05:26:45,955 INFO L145 WitnessPrinter]: No result that supports witness generation found [2024-11-09 05:26:45,957 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-11-09 05:26:45,961 INFO L158 Benchmark]: Toolchain (without parser) took 688012.79ms. Allocated memory was 172.0MB in the beginning and 1.3GB in the end (delta: 1.1GB). Free memory was 119.6MB in the beginning and 705.0MB in the end (delta: -585.4MB). Peak memory consumption was 502.7MB. Max. memory is 16.1GB. [2024-11-09 05:26:45,961 INFO L158 Benchmark]: CDTParser took 0.42ms. Allocated memory is still 127.9MB. Free memory is still 74.6MB. There was no memory consumed. Max. memory is 16.1GB. [2024-11-09 05:26:45,962 INFO L158 Benchmark]: CACSL2BoogieTranslator took 4205.00ms. Allocated memory was 172.0MB in the beginning and 247.5MB in the end (delta: 75.5MB). Free memory was 119.6MB in the beginning and 143.1MB in the end (delta: -23.5MB). Peak memory consumption was 106.7MB. Max. memory is 16.1GB. [2024-11-09 05:26:45,962 INFO L158 Benchmark]: Boogie Procedure Inliner took 435.96ms. Allocated memory is still 247.5MB. Free memory was 143.1MB in the beginning and 101.2MB in the end (delta: 41.9MB). Peak memory consumption was 41.9MB. Max. memory is 16.1GB. [2024-11-09 05:26:45,962 INFO L158 Benchmark]: Boogie Preprocessor took 598.02ms. Allocated memory is still 247.5MB. Free memory was 101.2MB in the beginning and 124.9MB in the end (delta: -23.7MB). Peak memory consumption was 45.6MB. Max. memory is 16.1GB. [2024-11-09 05:26:45,962 INFO L158 Benchmark]: RCFGBuilder took 23830.51ms. Allocated memory was 247.5MB in the beginning and 717.2MB in the end (delta: 469.8MB). Free memory was 124.9MB in the beginning and 286.9MB in the end (delta: -162.0MB). Peak memory consumption was 359.1MB. Max. memory is 16.1GB. [2024-11-09 05:26:45,962 INFO L158 Benchmark]: TraceAbstraction took 658929.90ms. Allocated memory was 717.2MB in the beginning and 1.3GB in the end (delta: 541.1MB). Free memory was 285.8MB in the beginning and 705.0MB in the end (delta: -419.2MB). Peak memory consumption was 668.7MB. Max. memory is 16.1GB. [2024-11-09 05:26:45,963 INFO L158 Benchmark]: Witness Printer took 5.38ms. Allocated memory is still 1.3GB. Free memory is still 705.0MB. There was no memory consumed. Max. memory is 16.1GB. [2024-11-09 05:26:45,964 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.42ms. Allocated memory is still 127.9MB. Free memory is still 74.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 4205.00ms. Allocated memory was 172.0MB in the beginning and 247.5MB in the end (delta: 75.5MB). Free memory was 119.6MB in the beginning and 143.1MB in the end (delta: -23.5MB). Peak memory consumption was 106.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 435.96ms. Allocated memory is still 247.5MB. Free memory was 143.1MB in the beginning and 101.2MB in the end (delta: 41.9MB). Peak memory consumption was 41.9MB. Max. memory is 16.1GB. * Boogie Preprocessor took 598.02ms. Allocated memory is still 247.5MB. Free memory was 101.2MB in the beginning and 124.9MB in the end (delta: -23.7MB). Peak memory consumption was 45.6MB. Max. memory is 16.1GB. * RCFGBuilder took 23830.51ms. Allocated memory was 247.5MB in the beginning and 717.2MB in the end (delta: 469.8MB). Free memory was 124.9MB in the beginning and 286.9MB in the end (delta: -162.0MB). Peak memory consumption was 359.1MB. Max. memory is 16.1GB. * TraceAbstraction took 658929.90ms. Allocated memory was 717.2MB in the beginning and 1.3GB in the end (delta: 541.1MB). Free memory was 285.8MB in the beginning and 705.0MB in the end (delta: -419.2MB). Peak memory consumption was 668.7MB. Max. memory is 16.1GB. * Witness Printer took 5.38ms. Allocated memory is still 1.3GB. Free memory is still 705.0MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 7074]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"./arch/x86/include/asm/paravirt.h"), "i" (804), "i" (12UL)); [7074-7075] - GenericResultAtLocation [Line: 7080]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("771:\n\tcall *%c2;\n772:\n.pushsection .parainstructions,\"a\"\n .balign 8 \n .quad 771b\n .byte %c1\n .byte 772b-771b\n .short %c3\n.popsection\n": "=a" (__eax): [paravirt_typenum] "i" (44UL), [paravirt_opptr] "i" (& pv_irq_ops.save_fl.func), [paravirt_clobber] "i" (1): "memory", "cc"); [7080-7082] - GenericResultAtLocation [Line: 7219]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"include/asm-generic/dma-mapping-common.h"), "i" (19), "i" (12UL)); [7219-7220] - GenericResultAtLocation [Line: 7248]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"include/asm-generic/dma-mapping-common.h"), "i" (36), "i" (12UL)); [7248-7249] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7474]: Unable to prove that a call to reach_error is unreachable Unable to prove that a call to reach_error is unreachable Reason: overapproximation of large string literal at line 9995. Possible FailurePath: [L7497] int ldv_irq_1_3 = 0; [L7498] void *ldv_irq_data_1_1 ; [L7499] int ldv_irq_1_0 = 0; [L7500] void *ldv_irq_data_1_0 ; [L7501] int ldv_state_variable_0 ; [L7502] int ldv_state_variable_2 ; [L7503] void *ldv_irq_data_1_3 ; [L7504] struct sk_buff *pcie_ops_group1 ; [L7505] struct device *mwifiex_pcie_pm_ops_group1 ; [L7506] void *ldv_irq_data_1_2 ; [L7507] struct mwifiex_adapter *pcie_ops_group0 ; [L7508] int ldv_irq_1_2 = 0; [L7509] int LDV_IN_INTERRUPT = 1; [L7510] int ldv_irq_1_1 = 0; [L7511] int ldv_irq_line_1_3 ; [L7512] int ldv_state_variable_3 ; [L7513] int ldv_irq_line_1_0 ; [L7514] int ref_cnt ; [L7515] int ldv_irq_line_1_1 ; [L7516] int ldv_state_variable_1 ; [L7517] int ldv_irq_line_1_2 ; [L7518] int ldv_state_variable_4 ; [L7519] struct pci_dev *mwifiex_pcie_group0 ; [L7687-L7689] static struct mwifiex_pcie_card_reg const mwifiex_reg_8766 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 3288U, 3292U, 3296U, 3300U, 3304U, 3308U, 3312U, 0U, 63U, 0U, 63U, 0U, 128U, 128U, 128U, 0U, 0U, 0U, 0U, 0U, 0U, 1U}; [L7690-L7693] static struct mwifiex_pcie_card_reg const mwifiex_reg_8897 = {3088U, 3092U, 3140U, 3136U, 3280U, 3284U, 49292U, 49244U, 49244U, 49292U, 3304U, 3308U, 3312U, 16U, 67043328U, 134152192U, 1023U, 2047U, 67108864U, 1024U, 128U, 1U, 2U, 4U, 8U, 65536U, 1U, 0U}; [L7694] static struct mwifiex_pcie_device const mwifiex_pcie8766 = {"mrvl/pcie8766_uapsta.bin", & mwifiex_reg_8766, 256U, 2048U}; [L7695] static struct mwifiex_pcie_device const mwifiex_pcie8897 = {"mrvl/pcie8897_uapsta.bin", & mwifiex_reg_8897, 256U, 4096U}; [L7779] static u8 user_rmmod ; [L7781] static struct semaphore add_remove_card_sem ; [L8010-L8012] static struct pci_device_id const mwifiex_ids[3U] = { {4523U, 11056U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8766)}, {4523U, 11064U, 4294967295U, 4294967295U, 0U, 0U, (unsigned long )(& mwifiex_pcie8897)}}; [L8013] struct pci_device_id const __mod_pci__mwifiex_ids_device_table ; [L8014-L8017] static struct dev_pm_ops const mwifiex_pcie_pm_ops = {0, 0, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, & mwifiex_pcie_suspend, & mwifiex_pcie_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L8018-L8034] static struct pci_driver mwifiex_pcie = {{0, 0}, "mwifiex_pcie", (struct pci_device_id const *)(& mwifiex_ids), & mwifiex_pcie_probe, & mwifiex_pcie_remove, 0, 0, 0, 0, & mwifiex_pcie_shutdown, 0, 0, {0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, & mwifiex_pcie_pm_ops, 0}, {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}; [L10694-L10700] static struct mwifiex_if_ops pcie_ops = {& mwifiex_pcie_init, & mwifiex_pcie_cleanup, & mwifiex_check_fw_status, & mwifiex_prog_fw_w_helper, & mwifiex_register_dev, & mwifiex_unregister_dev, & mwifiex_pcie_enable_host_int, 0, & mwifiex_process_int_status, & mwifiex_pcie_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, (void (*)(struct mwifiex_adapter * , u16 ))0, (void (*)(struct mwifiex_adapter * ))0, & mwifiex_pcie_cmdrsp_complete, & mwifiex_pcie_event_complete, 0, & mwifiex_pcie_init_fw_port, 0, 0, 0, & mwifiex_clean_pcie_ring_buf}; [L10755] int ldv_retval_20 ; [L10757] int ldv_retval_18 ; [L10758] int ldv_retval_2 ; [L10759] int ldv_retval_5 ; [L10760] int ldv_retval_0 ; [L10762] int ldv_retval_11 ; [L10763] int ldv_retval_1 ; [L10765] int ldv_retval_15 ; [L10766] int ldv_retval_16 ; [L10771] int ldv_retval_8 ; [L10772] int ldv_retval_7 ; [L10773] int ldv_retval_19 ; [L10775] int ldv_retval_14 ; [L10776] int ldv_retval_17 ; [L10779] int ldv_retval_12 ; [L10781] int ldv_retval_6 ; [L10784] int ldv_retval_13 ; [L10785] int ldv_retval_9 ; [L10786] int ldv_retval_10 ; [L10788] int ldv_retval_4 ; [L10790] int ldv_retval_3 ; [L11484] Element set_impl[15] ; [L11485] int last_index = 0; [L11619] Set LDV_SKBS ; [L10945] struct pci_device_id *ldvarg0 ; [L10946] void *tmp ; [L10947] struct mwifiex_tx_param *ldvarg1 ; [L10948] void *tmp___0 ; [L10949] u32 ldvarg4 ; [L10950] u32 tmp___1 ; [L10951] struct mwifiex_fw_image *ldvarg3 ; [L10952] void *tmp___2 ; [L10953] u8 ldvarg2 ; [L10954] u8 tmp___3 ; [L10955] int tmp___4 ; [L10956] int tmp___5 ; [L10957] int tmp___6 ; [L10958] int tmp___7 ; [L10959] int tmp___8 ; VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10961] CALL, EXPR ldv_zalloc(32UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(size)=32, \result={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=32, user_rmmod=0] [L10961] RET, EXPR ldv_zalloc(32UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10961] tmp = ldv_zalloc(32UL) [L10962] ldvarg0 = (struct pci_device_id *)tmp VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10963] CALL, EXPR ldv_zalloc(4UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(size)=4, \result={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=4, user_rmmod=0] [L10963] RET, EXPR ldv_zalloc(4UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10963] tmp___0 = ldv_zalloc(4UL) [L10964] ldvarg1 = (struct mwifiex_tx_param *)tmp___0 [L10965] tmp___1 = __VERIFIER_nondet_u32() [L10966] ldvarg4 = tmp___1 VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10967] CALL, EXPR ldv_zalloc(32UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(size)=32, \result={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=32, user_rmmod=0] [L10967] RET, EXPR ldv_zalloc(32UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10967] tmp___2 = ldv_zalloc(32UL) [L10968] ldvarg3 = (struct mwifiex_fw_image *)tmp___2 [L10969] tmp___3 = __VERIFIER_nondet_u8() [L10970] ldvarg2 = tmp___3 [L10971] CALL ldv_initialize() [L11638] CALL ldv_set_init(LDV_SKBS) [L11490] set = set_impl [L11491] last_index = 0 [L11638] RET ldv_set_init(LDV_SKBS) [L10971] RET ldv_initialize() [L10972] ldv_state_variable_4 = 0 [L10973] ldv_state_variable_1 = 1 [L10974] ref_cnt = 0 [L10975] ldv_state_variable_0 = 1 [L10976] ldv_state_variable_3 = 0 [L10977] ldv_state_variable_2 = 0 VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___4=2, tmp___6=1, user_rmmod=0] [L11197] case 2: [L11209] case 1: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___4=2, user_rmmod=0] [L11197] case 2: [L11211] CALL, EXPR mwifiex_pcie_init_module() [L10703] int ret ; [L10704] struct _ddebug descriptor ; [L10705] long tmp ; [L10706] struct _ddebug descriptor___0 ; [L10707] long tmp___0 ; [L10709] descriptor.modname = "mwifiex_pcie" [L10710] descriptor.function = "mwifiex_pcie_init_module" [L10711] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10712] descriptor.format = "Marvell PCIe Driver\n" [L10713] descriptor.lineno = 2464U [L10714] descriptor.flags = 0U [L10715] EXPR descriptor.flags VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor___0={372:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(c)=0, \old(exp)=0, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); [L10715] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor___0={372:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10715] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L10716] COND FALSE !(tmp != 0L) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor___0={372:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10720] CALL sema_init(& add_remove_card_sem, 1) [L7532] struct lock_class_key __key ; [L7533] struct semaphore __constr_expr_0 ; [L7535] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7536] __constr_expr_0.lock.magic = 3735899821U [L7537] __constr_expr_0.lock.owner_cpu = 4294967295U [L7538] __constr_expr_0.lock.owner = (void *)-1 [L7539] __constr_expr_0.lock.dep_map.key = 0 [L7540] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7541] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7542] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7543] __constr_expr_0.lock.dep_map.cpu = 0 [L7544] __constr_expr_0.lock.dep_map.ip = 0UL [L7545] __constr_expr_0.count = (unsigned int )val [L7546] __constr_expr_0.wait_list.next = & sem->wait_list [L7547] __constr_expr_0.wait_list.prev = & sem->wait_list [L7548] *sem = __constr_expr_0 [L7549] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7550] return; [L7550] return; [L10720] RET sema_init(& add_remove_card_sem, 1) [L10721] user_rmmod = 0U [L10722] CALL, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L11712] return __VERIFIER_nondet_int(); [L10722] RET, EXPR __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10722] ret = __pci_register_driver(& mwifiex_pcie, & __this_module, "mwifiex_pcie") [L10723] COND FALSE !(ret != 0) [L10726] descriptor___0.modname = "mwifiex_pcie" [L10727] descriptor___0.function = "mwifiex_pcie_init_module" [L10728] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L10729] descriptor___0.format = "info: Driver registered successfully!\n" [L10730] descriptor___0.lineno = 2475U [L10731] descriptor___0.flags = 0U [L10732] EXPR descriptor___0.flags VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor___0={372:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, user_rmmod=0] [L10732] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(c)=0, \old(exp)=0, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); [L10732] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor___0={372:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, user_rmmod=0] [L10732] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L10733] COND FALSE !(tmp___0 != 0L) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, descriptor={373:0}, descriptor___0={372:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, ret=0, set_impl={370:0}, user_rmmod=0] [L10738] return (ret); [L10738] return (ret); [L10738] return (ret); [L11211] RET, EXPR mwifiex_pcie_init_module() [L11211] ldv_retval_19 = mwifiex_pcie_init_module() [L11197] case 2: [L11218] ldv_state_variable_0 = 2 [L11219] ldv_state_variable_2 = 1 [L11220] CALL ldv_initialize_mwifiex_if_ops_2() [L10899] void *tmp ; [L10900] void *tmp___0 ; VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10902] CALL, EXPR ldv_zalloc(6864UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(size)=6864, \result={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=6864, user_rmmod=0] [L10902] RET, EXPR ldv_zalloc(6864UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10902] tmp = ldv_zalloc(6864UL) [L10903] pcie_ops_group0 = (struct mwifiex_adapter *)tmp VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10904] CALL, EXPR ldv_zalloc(232UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(size)=232, \result={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=232, user_rmmod=0] [L10904] RET, EXPR ldv_zalloc(232UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10904] tmp___0 = ldv_zalloc(232UL) [L10905] pcie_ops_group1 = (struct sk_buff *)tmp___0 [L11220] RET ldv_initialize_mwifiex_if_ops_2() [L11221] ldv_state_variable_3 = 1 [L11222] CALL ldv_initialize_pci_driver_3() [L10890] void *tmp ; VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10892] CALL, EXPR ldv_zalloc(2976UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(size)=2976, \result={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=2976, user_rmmod=0] [L10892] RET, EXPR ldv_zalloc(2976UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10892] tmp = ldv_zalloc(2976UL) [L10893] mwifiex_pcie_group0 = (struct pci_dev *)tmp [L11222] RET ldv_initialize_pci_driver_3() [L11223] ldv_state_variable_4 = 1 [L11224] CALL ldv_dev_pm_ops_4() [L10911] void *tmp ; VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10913] CALL, EXPR ldv_zalloc(1416UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND TRUE tmp___0 != 0 [L7445] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(size)=1416, \result={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, size=1416, user_rmmod=0] [L10913] RET, EXPR ldv_zalloc(1416UL) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L10913] tmp = ldv_zalloc(1416UL) [L10914] mwifiex_pcie_pm_ops_group1 = (struct device *)tmp [L11224] RET ldv_dev_pm_ops_4() [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: [L11237] case 3: [L11280] case 4: [L11282] tmp___8 = __VERIFIER_nondet_int() [L11284] case 0: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L11280] case 4: [L11291] case 1: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L11280] case 4: [L11298] case 2: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L11280] case 4: [L11305] case 3: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L11280] case 4: [L11312] case 4: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L11280] case 4: [L11319] case 5: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L11280] case 4: [L11326] case 6: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L11280] case 4: [L11333] case 7: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L11280] case 4: [L11340] case 8: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L11280] case 4: [L11347] case 9: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L11280] case 4: [L11349] CALL mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L9904] int ret ; [L9905] u8 *firmware ; [L9906] u32 firmware_len ; [L9907] u32 offset ; [L9908] struct sk_buff *skb ; [L9909] u32 txlen ; [L9910] u32 tx_blocks ; [L9911] u32 tries ; [L9912] u32 len ; [L9913] u32 block_retry_cnt ; [L9914] struct pcie_service_card *card ; [L9915] struct mwifiex_pcie_card_reg const *reg ; [L9916] struct _ddebug descriptor ; [L9917] long tmp ; [L9918] int tmp___0 ; [L9919] u32 ireg_intr ; [L9920] struct _ddebug descriptor___0 ; [L9921] long tmp___1 ; [L9922] int tmp___2 ; [L9923] int tmp___3 ; [L9924] struct _ddebug descriptor___1 ; [L9925] long tmp___4 ; [L9927] EXPR fw->fw_buf [L9927] firmware = fw->fw_buf [L9928] EXPR fw->fw_len [L9928] firmware_len = fw->fw_len [L9929] offset = 0U [L9930] tx_blocks = 0U [L9931] block_retry_cnt = 0U [L9932] EXPR adapter->card [L9932] card = (struct pcie_service_card *)adapter->card [L9933] EXPR card->pcie.reg [L9933] reg = card->pcie.reg [L9934] COND FALSE !((unsigned long )firmware == (unsigned long )((u8 *)0U) || firmware_len == 0U) [L9939] descriptor.modname = "mwifiex_pcie" [L9940] descriptor.function = "mwifiex_prog_fw_w_helper" [L9941] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/513/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/pcie.o.c.prepared" [L9942] descriptor.format = "info: Downloading FW image (%d bytes)\n" [L9943] descriptor.lineno = 1857U [L9944] descriptor.flags = 0U [L9945] EXPR descriptor.flags VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9945] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(c)=0, \old(exp)=0, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7487] return (exp); [L9945] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9945] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L9946] COND FALSE !(tmp != 0L) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9951] CALL, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(adapter)={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8209] int tmp ; [L8210] bool tmp___0 ; VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(adapter)={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] CALL, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(adapter)={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7823] u32 *cookie_addr ; [L7824] struct pcie_service_card *card ; [L7825] struct mwifiex_pcie_card_reg const *reg ; [L7826] struct _ddebug descriptor ; [L7827] long tmp ; [L7829] EXPR adapter->card [L7829] card = (struct pcie_service_card *)adapter->card [L7830] EXPR card->pcie.reg [L7830] reg = card->pcie.reg [L7831] EXPR reg->sleep_cookie VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(adapter)={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={18446744073709551506U:-28}, descriptor={381:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7831] COND FALSE !((unsigned int )((unsigned char )reg->sleep_cookie) == 0U) [L7835] EXPR card->sleep_cookie_vbase VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(adapter)={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, card={18446744073709551506U:-28}, descriptor={381:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7835] COND FALSE !((unsigned long )card->sleep_cookie_vbase != (unsigned long )((u8 *)0U)) [L7855] return (0); [L7855] return (0); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(adapter)={0:0}, \result=0, adapter={0:0}, add_remove_card_sem={365:0}, card={18446744073709551506U:-28}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] RET, EXPR mwifiex_pcie_ok_to_access_hw(adapter) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(adapter)={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8212] tmp___0 = mwifiex_pcie_ok_to_access_hw(adapter) [L8213] COND FALSE !((int )tmp___0) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(adapter)={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8222] return (0); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(adapter)={0:0}, \result=0, adapter={0:0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L9951] RET, EXPR mwifiex_pcie_disable_host_int(adapter) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9951] tmp___0 = mwifiex_pcie_disable_host_int(adapter) [L9952] COND FALSE !(tmp___0 != 0) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9958] CALL, EXPR ldv_dev_alloc_skb_14(2312U) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, \old(length)=2312, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11450] struct sk_buff *tmp ; VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, \old(length)=2312, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11452] CALL, EXPR ldv_skb_alloc() VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11622] void *skb ; [L11623] void *tmp___7 ; VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7439] void *p ; [L7440] void *tmp ; [L7441] int tmp___0 ; [L7443] tmp___0 = __VERIFIER_nondet_int() [L7444] COND FALSE !(tmp___0 != 0) [L7447] EXPR, FCALL calloc(1UL, size) [L7447] tmp = calloc(1UL, size) [L7448] p = tmp VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, \old(size)=248, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-(((__int128) 0 << 64) | 18446744073709551615U):0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7449] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(cond)=1, \old(last_index)=0, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7418] COND FALSE !(!cond) [L7449] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, \old(size)=248, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, p={-(((__int128) 0 << 64) | 18446744073709551615U):0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7450] return (p); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, \old(size)=248, \result={-(((__int128) 0 << 64) | 18446744073709551615U):0}, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11625] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L11626] skb = (struct sk_buff___0 *)tmp___7 VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, add_remove_card_sem={365:0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, user_rmmod=0] [L11627] COND FALSE !(! skb) [L11630] CALL ldv_set_add(LDV_SKBS, skb) [L11498] int i ; [L11500] i = 0 VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, add_remove_card_sem={365:0}, e={-(((__int128) 0 << 64) | 18446744073709551615U):0}, i=0, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11501] COND TRUE 1 VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, add_remove_card_sem={365:0}, e={-(((__int128) 0 << 64) | 18446744073709551615U):0}, i=0, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11502] COND FALSE !(i < last_index) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, add_remove_card_sem={365:0}, e={-(((__int128) 0 << 64) | 18446744073709551615U):0}, last_index=0, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11512] COND TRUE last_index < 15 [L11513] set_impl[last_index] = e [L11514] last_index = last_index + 1 VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11630] RET ldv_set_add(LDV_SKBS, skb) [L11631] return (skb); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, \result={-(((__int128) 0 << 64) | 18446744073709551615U):0}, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11452] RET, EXPR ldv_skb_alloc() VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(last_index)=0, \old(length)=2312, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11452] tmp = ldv_skb_alloc() [L11453] return (tmp); [L9958] RET, EXPR ldv_dev_alloc_skb_14(2312U) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, tx_blocks=0, user_rmmod=0] [L9958] skb = ldv_dev_alloc_skb_14(2312U) [L9959] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tx_blocks=0, user_rmmod=0] [L9965] ireg_intr = 0U VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tx_blocks=0, user_rmmod=0] [L9966] COND FALSE !(offset >= firmware_len) [L9970] tries = 0U VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L9986] COND TRUE tries <= 99U [L9973] EXPR reg->cmd_size VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L9973] CALL, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L8046] struct pcie_service_card *card ; [L8048] EXPR adapter->card [L8048] card = (struct pcie_service_card *)adapter->card [L8049] EXPR card->pci_mmap1 [L8049] CALL, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L11765] return __VERIFIER_nondet_uint(); [L8049] RET, EXPR ioread32(card->pci_mmap1 + (unsigned long )reg) [L8049] *data = ioread32(card->pci_mmap1 + (unsigned long )reg) [L8050] return (0); [L9973] RET, EXPR mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L9973] ret = mwifiex_read_reg(adapter, (int )reg->cmd_size, & len) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, ret=0, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L9974] COND FALSE !(ret != 0) [L9979] EXPR \read(len) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L9979] COND TRUE len != 0U [L9991] EXPR \read(len) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L9991] COND FALSE !(len == 0U) [L9994] EXPR \read(len) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, len={376:0}, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L9994] COND TRUE len > 2312U [L9996] EXPR \read(len) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L9995-L9996] CALL printk("\vmwifiex_pcie: FW download failure @ %d, invalid length %d\n", offset, len) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \old(arg0)={250:0}, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L11898] return __VERIFIER_nondet_int(); [L9995-L9996] RET printk("\vmwifiex_pcie: FW download failure @ %d, invalid length %d\n", offset, len) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L9997] ret = -1 VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, ret=-1, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L10076] CALL dev_kfree_skb_any(skb) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=0] [L7578] FCALL __dev_kfree_skb_any(skb, 1) [L10076] RET dev_kfree_skb_any(skb) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, descriptor={375:0}, descriptor___0={377:0}, descriptor___1={379:0}, firmware={380:-379}, firmware_len=4294967297, ireg_intr={378:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, ret=-1, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); [L10077] return (ret); VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, \result=-1, adapter={0:0}, add_remove_card_sem={365:0}, block_retry_cnt=0, card={18446744073709551506U:-28}, firmware={380:-379}, firmware_len=4294967297, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, offset=0, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, reg={378:-67}, set_impl={370:0}, skb={-(((__int128) 0 << 64) | 18446744073709551615U):0}, tries=0, tx_blocks=0, user_rmmod=0] [L11349] RET mwifiex_prog_fw_w_helper(pcie_ops_group0, ldvarg3) [L11350] ldv_state_variable_2 = 1 VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___8=9, user_rmmod=0] [L10979] tmp___4 = __VERIFIER_nondet_int() [L10981] case 0: [L11191] case 1: [L11197] case 2: [L11199] tmp___6 = __VERIFIER_nondet_int() [L11201] case 0: VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=0] [L11197] case 2: [L11203] CALL mwifiex_pcie_cleanup_module() [L10743] int tmp ; [L10745] CALL, EXPR down_interruptible(& add_remove_card_sem) [L11758] return __VERIFIER_nondet_int(); [L10745] RET, EXPR down_interruptible(& add_remove_card_sem) [L10745] tmp = down_interruptible(& add_remove_card_sem) [L10746] COND FALSE !(tmp == 0) [L10750] user_rmmod = 1U [L10751] FCALL pci_unregister_driver(& mwifiex_pcie) [L11203] RET mwifiex_pcie_cleanup_module() [L11204] ldv_state_variable_0 = 3 VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=18446744073709551350U, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, tmp___4=2, tmp___6=0, tmp___8=9, user_rmmod=1] [L11402] CALL ldv_check_final_state() [L11689] int tmp___7 ; [L11691] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L11580] return (last_index == 0); [L11691] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L11691] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L11692] COND FALSE !(\read(tmp___7)) VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] [L11694] CALL ldv_error() VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] [L7474] reach_error() VAL [LDV_IN_INTERRUPT=1, LDV_SKBS={0:0}, add_remove_card_sem={365:0}, last_index=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_10=0, ldv_retval_11=0, ldv_retval_12=0, ldv_retval_13=0, ldv_retval_14=0, ldv_retval_15=0, ldv_retval_16=0, ldv_retval_17=0, ldv_retval_18=0, ldv_retval_19=0, ldv_retval_1=0, ldv_retval_20=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, mwifiex_ids={366:0}, mwifiex_pcie8766={363:0}, mwifiex_pcie8897={364:0}, mwifiex_pcie={368:0}, mwifiex_pcie_group0={0:0}, mwifiex_pcie_pm_ops={367:0}, mwifiex_pcie_pm_ops_group1={0:0}, mwifiex_reg_8766={361:0}, mwifiex_reg_8897={362:0}, pcie_ops={369:0}, pcie_ops_group0={0:0}, pcie_ops_group1={0:0}, ref_cnt=0, set_impl={370:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 63 procedures, 1520 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 658.5s, OverallIterations: 11, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.3s, AutomataDifference: 592.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.1s, HoareTripleCheckerStatistics: 193 mSolverCounterUnknown, 10982 SdHoareTripleChecker+Valid, 586.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 10879 mSDsluCounter, 87491 SdHoareTripleChecker+Invalid, 574.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 64562 mSDsCounter, 889 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 9559 IncrementalHoareTripleChecker+Invalid, 10641 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 889 mSolverCounterUnsat, 22929 mSDtfsCounter, 9559 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 193 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 57 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 2.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=10656occurred in iteration=9, InterpolantAutomatonStates: 54, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.8s AutomataMinimizationTime, 10 MinimizatonAttempts, 2023 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 11.8s SatisfiabilityAnalysisTime, 14.5s InterpolantComputationTime, 1394 NumberOfCodeBlocks, 1394 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 1221 ConstructedInterpolants, 0 QuantifiedInterpolants, 1596 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 10 InterpolantComputations, 10 PerfectInterpolantSequences, 972/972 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2024-11-09 05:26:46,191 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2024-11-09 05:26:46,247 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/config/svcomp-Reach-64bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- This is Ultimate 0.2.5-dev-a016563 [2024-11-09 05:26:48,601 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-09 05:26:48,675 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/config/svcomp-Reach-64bit-Taipan_Bitvector.epf [2024-11-09 05:26:48,680 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-09 05:26:48,681 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-09 05:26:48,706 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-09 05:26:48,707 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-09 05:26:48,708 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-09 05:26:48,708 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-09 05:26:48,709 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-09 05:26:48,709 INFO L153 SettingsManager]: * User list type=DISABLED [2024-11-09 05:26:48,709 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2024-11-09 05:26:48,710 INFO L153 SettingsManager]: * Explicit value domain=true [2024-11-09 05:26:48,710 INFO L153 SettingsManager]: * Octagon Domain=false [2024-11-09 05:26:48,711 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2024-11-09 05:26:48,711 INFO L153 SettingsManager]: * Interval Domain=false [2024-11-09 05:26:48,712 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-09 05:26:48,712 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-09 05:26:48,713 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-09 05:26:48,713 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-09 05:26:48,714 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-09 05:26:48,714 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-09 05:26:48,714 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2024-11-09 05:26:48,715 INFO L153 SettingsManager]: * Use bitvectors instead of ints=true [2024-11-09 05:26:48,715 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-09 05:26:48,716 INFO L153 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2024-11-09 05:26:48,716 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-09 05:26:48,716 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-09 05:26:48,717 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-09 05:26:48,717 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-09 05:26:48,717 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-09 05:26:48,718 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-09 05:26:48,718 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-09 05:26:48,718 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-09 05:26:48,719 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-09 05:26:48,719 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-09 05:26:48,719 INFO L153 SettingsManager]: * Trace refinement strategy=WALRUS [2024-11-09 05:26:48,720 INFO L153 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2024-11-09 05:26:48,720 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-09 05:26:48,720 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2024-11-09 05:26:48,721 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2024-11-09 05:26:49,108 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-09 05:26:49,140 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-09 05:26:49,144 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-09 05:26:49,147 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-09 05:26:49,147 INFO L274 PluginConnector]: CDTParser initialized [2024-11-09 05:26:49,149 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i Unable to find full path for "g++" [2024-11-09 05:26:51,306 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-09 05:26:52,146 INFO L384 CDTParser]: Found 1 translation units. [2024-11-09 05:26:52,147 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2024-11-09 05:26:52,228 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/data/bf5edcf9f/ab392ae2204d4dd1b70a3ff41d578fc4/FLAGc3a9a24df [2024-11-09 05:26:52,418 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/data/bf5edcf9f/ab392ae2204d4dd1b70a3ff41d578fc4 [2024-11-09 05:26:52,424 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-09 05:26:52,426 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-09 05:26:52,428 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-09 05:26:52,431 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-09 05:26:52,439 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-09 05:26:52,440 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 05:26:52" (1/1) ... [2024-11-09 05:26:52,441 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@238b13e7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:52, skipping insertion in model container [2024-11-09 05:26:52,444 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 05:26:52" (1/1) ... [2024-11-09 05:26:52,700 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-09 05:26:53,704 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,020 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2024-11-09 05:26:54,165 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,167 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,168 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,169 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,379 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,380 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,384 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,388 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,388 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,389 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,396 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,407 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,442 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,462 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,480 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,482 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,483 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,490 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,506 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,513 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,526 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,537 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,569 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,571 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,572 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,572 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,573 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,574 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,574 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,581 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,583 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,587 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,588 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,590 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,591 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,602 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,603 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,607 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,608 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,615 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,616 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,617 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,618 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,619 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,625 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,626 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,628 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,628 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,630 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,636 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,637 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,638 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,648 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,653 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,666 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,668 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,679 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,683 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,696 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,698 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,705 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,708 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,725 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,726 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,733 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,741 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,749 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,750 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,766 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,771 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,777 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,789 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,804 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,804 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,805 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,805 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,814 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,820 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,825 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,839 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,839 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,847 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,856 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,857 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,870 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,880 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,887 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,900 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,905 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,906 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,914 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,922 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,932 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,932 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,934 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,934 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,935 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,935 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,937 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,938 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,944 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,948 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,962 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,989 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:54,989 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,002 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,018 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,019 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,046 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,047 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,059 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,061 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,067 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,068 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,075 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,076 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,173 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,174 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,174 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,175 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,182 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,183 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,183 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,293 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,389 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,390 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 05:26:55,427 INFO L197 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2024-11-09 05:26:55,499 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-09 05:26:55,644 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,657 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2024-11-09 05:26:55,662 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,662 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,663 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,663 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,673 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,674 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,675 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,675 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,675 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,676 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,676 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,677 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,680 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,682 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,685 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,686 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,686 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,687 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,690 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,690 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,692 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,694 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,700 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,701 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,701 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,701 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,702 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,702 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,703 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,704 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,704 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,708 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,709 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,710 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,710 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,711 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,712 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,714 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,714 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,715 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,716 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,717 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,717 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,718 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,719 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,720 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,720 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,721 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,722 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,723 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,742 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,743 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,744 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,746 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,749 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,750 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,751 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,753 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,756 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,757 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,758 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,760 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,763 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,764 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,765 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,766 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,768 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,768 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,771 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,772 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,772 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,774 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,778 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,779 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,779 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,780 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,784 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,788 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,789 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,796 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,797 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,799 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,805 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,806 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,813 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,816 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,818 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,824 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,828 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,829 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,831 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,833 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,840 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,840 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,841 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,842 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,842 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,843 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,845 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,846 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,847 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,850 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,856 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,863 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,863 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,868 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,874 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,876 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,889 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,890 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,896 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,899 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,900 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,900 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,902 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,903 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,910 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,910 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,911 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,911 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,913 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,913 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,913 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,929 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,938 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 05:26:55,939 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 05:26:55,990 INFO L200 MainTranslator]: Completed pre-run [2024-11-09 05:26:56,176 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"./arch/x86/include/asm/paravirt.h"), "i" (804), "i" (12UL)); [7074-7075] [2024-11-09 05:26:56,178 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("771:\n\tcall *%c2;\n772:\n.pushsection .parainstructions,\"a\"\n .balign 8 \n .quad 771b\n .byte %c1\n .byte 772b-771b\n .short %c3\n.popsection\n": "=a" (__eax): [paravirt_typenum] "i" (44UL), [paravirt_opptr] "i" (& pv_irq_ops.save_fl.func), [paravirt_clobber] "i" (1): "memory", "cc"); [7080-7082] [2024-11-09 05:26:56,186 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"include/asm-generic/dma-mapping-common.h"), "i" (19), "i" (12UL)); [7219-7220] [2024-11-09 05:26:56,191 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"include/asm-generic/dma-mapping-common.h"), "i" (36), "i" (12UL)); [7248-7249] [2024-11-09 05:26:56,198 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2024-11-09 05:26:56,623 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 05:26:56,965 INFO L204 MainTranslator]: Completed translation [2024-11-09 05:26:56,965 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56 WrapperNode [2024-11-09 05:26:56,965 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-09 05:26:56,966 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-09 05:26:56,967 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-09 05:26:56,967 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-09 05:26:56,975 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,091 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,305 INFO L138 Inliner]: procedures = 262, calls = 2754, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6922 [2024-11-09 05:26:57,306 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-09 05:26:57,307 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-09 05:26:57,307 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-09 05:26:57,307 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-09 05:26:57,320 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,321 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,360 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,361 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,551 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,595 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,625 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,709 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,749 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-09 05:26:57,750 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-09 05:26:57,750 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-09 05:26:57,751 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-09 05:26:57,752 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (1/1) ... [2024-11-09 05:26:57,758 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-09 05:26:57,772 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 05:26:57,790 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2024-11-09 05:26:57,794 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2024-11-09 05:26:57,831 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2024-11-09 05:26:57,832 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2024-11-09 05:26:57,832 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2024-11-09 05:26:57,832 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2024-11-09 05:26:57,832 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2024-11-09 05:26:57,832 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2024-11-09 05:26:57,833 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2024-11-09 05:26:57,833 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2024-11-09 05:26:57,833 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2024-11-09 05:26:57,833 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2024-11-09 05:26:57,833 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2024-11-09 05:26:57,833 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2024-11-09 05:26:57,833 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2024-11-09 05:26:57,833 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2024-11-09 05:26:57,833 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2024-11-09 05:26:57,833 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2024-11-09 05:26:57,834 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2024-11-09 05:26:57,834 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2024-11-09 05:26:57,834 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2024-11-09 05:26:57,834 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2024-11-09 05:26:57,834 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2024-11-09 05:26:57,834 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2024-11-09 05:26:57,834 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2024-11-09 05:26:57,834 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2024-11-09 05:26:57,834 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2024-11-09 05:26:57,834 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2024-11-09 05:26:57,834 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2024-11-09 05:26:57,835 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2024-11-09 05:26:57,835 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2024-11-09 05:26:57,835 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2024-11-09 05:26:57,835 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2024-11-09 05:26:57,835 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2024-11-09 05:26:57,838 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2024-11-09 05:26:57,838 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2024-11-09 05:26:57,839 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2024-11-09 05:26:57,839 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2024-11-09 05:26:57,839 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2024-11-09 05:26:57,839 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2024-11-09 05:26:57,839 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2024-11-09 05:26:57,839 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2024-11-09 05:26:57,839 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2024-11-09 05:26:57,840 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2024-11-09 05:26:57,840 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2024-11-09 05:26:57,840 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2024-11-09 05:26:57,840 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2024-11-09 05:26:57,840 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2024-11-09 05:26:57,840 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-11-09 05:26:57,841 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2024-11-09 05:26:57,841 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2024-11-09 05:26:57,841 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2024-11-09 05:26:57,841 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2024-11-09 05:26:57,841 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2024-11-09 05:26:57,841 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2024-11-09 05:26:57,841 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2024-11-09 05:26:57,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2024-11-09 05:26:57,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2024-11-09 05:26:57,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2024-11-09 05:26:57,842 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-11-09 05:26:57,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2024-11-09 05:26:57,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2024-11-09 05:26:57,843 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2024-11-09 05:26:57,843 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2024-11-09 05:26:57,843 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2024-11-09 05:26:57,843 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2024-11-09 05:26:57,843 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2024-11-09 05:26:57,843 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2024-11-09 05:26:57,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2024-11-09 05:26:57,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2024-11-09 05:26:57,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2024-11-09 05:26:57,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2024-11-09 05:26:57,844 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2024-11-09 05:26:57,844 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2024-11-09 05:26:57,844 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2024-11-09 05:26:57,844 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2024-11-09 05:26:57,844 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2024-11-09 05:26:57,844 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2024-11-09 05:26:57,844 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2024-11-09 05:26:57,844 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2024-11-09 05:26:57,844 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2024-11-09 05:26:57,844 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2024-11-09 05:26:57,845 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2024-11-09 05:26:57,845 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2024-11-09 05:26:57,845 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2024-11-09 05:26:57,845 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2024-11-09 05:26:57,845 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2024-11-09 05:26:57,845 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2024-11-09 05:26:57,845 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2024-11-09 05:26:57,845 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2024-11-09 05:26:57,845 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2024-11-09 05:26:57,845 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2024-11-09 05:26:57,846 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2024-11-09 05:26:57,846 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2024-11-09 05:26:57,846 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2024-11-09 05:26:57,846 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2024-11-09 05:26:57,848 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2024-11-09 05:26:57,848 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2024-11-09 05:26:57,848 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2024-11-09 05:26:57,848 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2024-11-09 05:26:57,848 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2024-11-09 05:26:57,849 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2024-11-09 05:26:57,849 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2024-11-09 05:26:57,849 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2024-11-09 05:26:57,849 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2024-11-09 05:26:57,849 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2024-11-09 05:26:57,849 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2024-11-09 05:26:57,849 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2024-11-09 05:26:57,850 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2024-11-09 05:26:57,850 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2024-11-09 05:26:57,850 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2024-11-09 05:26:57,850 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2024-11-09 05:26:57,850 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_dev_dbg [2024-11-09 05:26:57,851 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_dev_dbg [2024-11-09 05:26:57,851 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2024-11-09 05:26:57,851 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2024-11-09 05:26:57,851 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2024-11-09 05:26:57,851 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2024-11-09 05:26:57,851 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_pr_debug [2024-11-09 05:26:57,852 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_pr_debug [2024-11-09 05:26:57,852 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2024-11-09 05:26:57,853 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2024-11-09 05:26:57,853 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2024-11-09 05:26:57,853 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2024-11-09 05:26:57,854 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2024-11-09 05:26:57,854 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2024-11-09 05:26:57,854 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2024-11-09 05:26:57,854 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2024-11-09 05:26:57,854 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2024-11-09 05:26:57,854 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2024-11-09 05:26:57,854 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2024-11-09 05:26:57,855 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-09 05:26:57,855 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2024-11-09 05:26:57,855 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2024-11-09 05:26:57,855 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2024-11-09 05:26:57,855 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2024-11-09 05:26:57,856 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2024-11-09 05:26:57,856 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2024-11-09 05:26:57,856 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2024-11-09 05:26:57,856 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2024-11-09 05:26:57,856 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2024-11-09 05:26:57,856 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2024-11-09 05:26:57,857 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2024-11-09 05:26:57,857 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2024-11-09 05:26:57,857 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2024-11-09 05:26:57,857 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2024-11-09 05:26:57,857 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2024-11-09 05:26:57,857 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2024-11-09 05:26:57,857 INFO L130 BoogieDeclarations]: Found specification of procedure dev_warn [2024-11-09 05:26:57,858 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_warn [2024-11-09 05:26:57,858 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2024-11-09 05:26:57,858 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-09 05:26:57,858 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-09 05:26:57,858 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2024-11-09 05:26:57,858 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2024-11-09 05:26:57,858 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2024-11-09 05:26:57,858 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2024-11-09 05:26:59,007 INFO L238 CfgBuilder]: Building ICFG [2024-11-09 05:26:59,011 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-09 05:27:09,031 INFO L735 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2024-11-09 05:28:12,368 INFO L? ?]: Removed 2448 outVars from TransFormulas that were not future-live. [2024-11-09 05:28:12,369 INFO L287 CfgBuilder]: Performing block encoding [2024-11-09 05:28:12,422 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-09 05:28:12,423 INFO L316 CfgBuilder]: Removed 2 assume(true) statements. [2024-11-09 05:28:12,423 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 05:28:12 BoogieIcfgContainer [2024-11-09 05:28:12,423 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-09 05:28:12,425 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-09 05:28:12,428 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-09 05:28:12,431 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-09 05:28:12,431 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 09.11 05:26:52" (1/3) ... [2024-11-09 05:28:12,432 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@13fe94fb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 09.11 05:28:12, skipping insertion in model container [2024-11-09 05:28:12,432 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 05:26:56" (2/3) ... [2024-11-09 05:28:12,432 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@13fe94fb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 09.11 05:28:12, skipping insertion in model container [2024-11-09 05:28:12,433 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 05:28:12" (3/3) ... [2024-11-09 05:28:12,434 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2024-11-09 05:28:12,456 INFO L214 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-09 05:28:12,458 INFO L154 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-11-09 05:28:12,616 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-09 05:28:12,622 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@72c13020, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-09 05:28:12,622 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-09 05:28:12,631 INFO L276 IsEmpty]: Start isEmpty. Operand has 1812 states, 1307 states have (on average 1.3718439173680184) internal successors, (1793), 1334 states have internal predecessors, (1793), 442 states have call successors, (442), 62 states have call predecessors, (442), 61 states have return successors, (435), 435 states have call predecessors, (435), 435 states have call successors, (435) [2024-11-09 05:28:12,648 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2024-11-09 05:28:12,649 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:28:12,650 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:28:12,650 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:28:12,656 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:28:12,656 INFO L85 PathProgramCache]: Analyzing trace with hash -1317198439, now seen corresponding path program 1 times [2024-11-09 05:28:12,677 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2024-11-09 05:28:12,677 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [401456076] [2024-11-09 05:28:12,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:28:12,678 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-11-09 05:28:12,678 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat [2024-11-09 05:28:12,682 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2024-11-09 05:28:12,684 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2024-11-09 05:28:25,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:28:25,195 INFO L255 TraceCheckSpWp]: Trace formula consists of 2395 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-09 05:28:25,202 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 05:28:25,348 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-11-09 05:28:25,348 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-09 05:28:25,349 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2024-11-09 05:28:25,349 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [401456076] [2024-11-09 05:28:25,350 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [401456076] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:28:25,350 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:28:25,350 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 05:28:25,353 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1577384936] [2024-11-09 05:28:25,353 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:28:25,359 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-09 05:28:25,359 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2024-11-09 05:28:25,399 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 05:28:25,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 05:28:25,408 INFO L87 Difference]: Start difference. First operand has 1812 states, 1307 states have (on average 1.3718439173680184) internal successors, (1793), 1334 states have internal predecessors, (1793), 442 states have call successors, (442), 62 states have call predecessors, (442), 61 states have return successors, (435), 435 states have call predecessors, (435), 435 states have call successors, (435) Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-11-09 05:28:27,690 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.26s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-11-09 05:28:28,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:28:28,387 INFO L93 Difference]: Finished difference Result 5371 states and 7980 transitions. [2024-11-09 05:28:28,389 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 05:28:28,391 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 39 [2024-11-09 05:28:28,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:28:28,456 INFO L225 Difference]: With dead ends: 5371 [2024-11-09 05:28:28,456 INFO L226 Difference]: Without dead ends: 3536 [2024-11-09 05:28:28,472 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 05:28:28,476 INFO L432 NwaCegarLoop]: 2671 mSDtfsCounter, 2608 mSDsluCounter, 2623 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 3 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2608 SdHoareTripleChecker+Valid, 5294 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2024-11-09 05:28:28,477 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [2608 Valid, 5294 Invalid, 15 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3 Valid, 11 Invalid, 1 Unknown, 0 Unchecked, 2.6s Time] [2024-11-09 05:28:28,512 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3536 states. [2024-11-09 05:28:28,798 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3536 to 3536. [2024-11-09 05:28:28,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3536 states, 2558 states have (on average 1.3639562157935887) internal successors, (3489), 2594 states have internal predecessors, (3489), 857 states have call successors, (857), 121 states have call predecessors, (857), 120 states have return successors, (856), 856 states have call predecessors, (856), 856 states have call successors, (856) [2024-11-09 05:28:28,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3536 states to 3536 states and 5202 transitions. [2024-11-09 05:28:28,843 INFO L78 Accepts]: Start accepts. Automaton has 3536 states and 5202 transitions. Word has length 39 [2024-11-09 05:28:28,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:28:28,844 INFO L471 AbstractCegarLoop]: Abstraction has 3536 states and 5202 transitions. [2024-11-09 05:28:28,844 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-11-09 05:28:28,845 INFO L276 IsEmpty]: Start isEmpty. Operand 3536 states and 5202 transitions. [2024-11-09 05:28:28,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-11-09 05:28:28,853 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:28:28,853 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:28:28,909 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Ended with exit code 0 [2024-11-09 05:28:29,054 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-11-09 05:28:29,055 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:28:29,055 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:28:29,057 INFO L85 PathProgramCache]: Analyzing trace with hash -713759910, now seen corresponding path program 1 times [2024-11-09 05:28:29,060 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2024-11-09 05:28:29,061 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1566176136] [2024-11-09 05:28:29,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:28:29,062 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-11-09 05:28:29,062 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat [2024-11-09 05:28:29,065 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2024-11-09 05:28:29,069 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2024-11-09 05:28:42,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 05:28:42,455 INFO L255 TraceCheckSpWp]: Trace formula consists of 2836 conjuncts, 4 conjuncts are in the unsatisfiable core [2024-11-09 05:28:42,460 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 05:28:43,365 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-11-09 05:28:43,366 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-09 05:28:43,366 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2024-11-09 05:28:43,366 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1566176136] [2024-11-09 05:28:43,367 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1566176136] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 05:28:43,367 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 05:28:43,367 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 05:28:43,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1888815426] [2024-11-09 05:28:43,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 05:28:43,369 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-09 05:28:43,370 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2024-11-09 05:28:43,370 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 05:28:43,371 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 05:28:43,371 INFO L87 Difference]: Start difference. First operand 3536 states and 5202 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-11-09 05:28:44,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 05:28:44,668 INFO L93 Difference]: Finished difference Result 10585 states and 15602 transitions. [2024-11-09 05:28:44,669 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 05:28:44,669 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 54 [2024-11-09 05:28:44,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 05:28:44,731 INFO L225 Difference]: With dead ends: 10585 [2024-11-09 05:28:44,731 INFO L226 Difference]: Without dead ends: 7050 [2024-11-09 05:28:44,752 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2024-11-09 05:28:44,754 INFO L432 NwaCegarLoop]: 2905 mSDtfsCounter, 2602 mSDsluCounter, 8429 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2602 SdHoareTripleChecker+Valid, 11334 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-11-09 05:28:44,756 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [2602 Valid, 11334 Invalid, 23 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-11-09 05:28:44,770 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7050 states. [2024-11-09 05:28:45,187 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7050 to 7050. [2024-11-09 05:28:45,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7050 states, 5099 states have (on average 1.36418905667778) internal successors, (6956), 5171 states have internal predecessors, (6956), 1710 states have call successors, (1710), 241 states have call predecessors, (1710), 240 states have return successors, (1721), 1709 states have call predecessors, (1721), 1709 states have call successors, (1721) [2024-11-09 05:28:45,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7050 states to 7050 states and 10387 transitions. [2024-11-09 05:28:45,265 INFO L78 Accepts]: Start accepts. Automaton has 7050 states and 10387 transitions. Word has length 54 [2024-11-09 05:28:45,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 05:28:45,266 INFO L471 AbstractCegarLoop]: Abstraction has 7050 states and 10387 transitions. [2024-11-09 05:28:45,266 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-11-09 05:28:45,266 INFO L276 IsEmpty]: Start isEmpty. Operand 7050 states and 10387 transitions. [2024-11-09 05:28:45,290 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2024-11-09 05:28:45,291 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 05:28:45,292 INFO L215 NwaCegarLoop]: trace histogram [4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 05:28:45,374 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Ended with exit code 0 [2024-11-09 05:28:45,492 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-11-09 05:28:45,493 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-09 05:28:45,493 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 05:28:45,494 INFO L85 PathProgramCache]: Analyzing trace with hash 1497330915, now seen corresponding path program 1 times [2024-11-09 05:28:45,497 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2024-11-09 05:28:45,498 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1779543231] [2024-11-09 05:28:45,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 05:28:45,498 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-11-09 05:28:45,498 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat [2024-11-09 05:28:45,502 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2024-11-09 05:28:45,503 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fb2cd47-bcb5-4296-a346-5b046d9e929a/bin/utaipan-verify-YMUCfTKeje/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Waiting until timeout for monitored process