./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 826ab2ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/config/TaipanReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/config/svcomp-Reach-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash d88455bf5089be24833f69dfcbd91003e7e136bcd5efcd63ae18e59d7f59e87d --- Real Ultimate output --- This is Ultimate 0.3.0-dev-826ab2b [2024-11-14 04:00:46,226 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-14 04:00:46,316 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/config/svcomp-Reach-64bit-Taipan_Default.epf [2024-11-14 04:00:46,324 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-14 04:00:46,325 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-14 04:00:46,361 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-14 04:00:46,362 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-14 04:00:46,362 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-14 04:00:46,362 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-14 04:00:46,362 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-14 04:00:46,363 INFO L153 SettingsManager]: * User list type=DISABLED [2024-11-14 04:00:46,363 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2024-11-14 04:00:46,363 INFO L153 SettingsManager]: * Explicit value domain=true [2024-11-14 04:00:46,363 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2024-11-14 04:00:46,363 INFO L153 SettingsManager]: * Octagon Domain=false [2024-11-14 04:00:46,363 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2024-11-14 04:00:46,363 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2024-11-14 04:00:46,363 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2024-11-14 04:00:46,363 INFO L153 SettingsManager]: * Interval Domain=false [2024-11-14 04:00:46,363 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2024-11-14 04:00:46,363 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2024-11-14 04:00:46,364 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2024-11-14 04:00:46,364 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-14 04:00:46,364 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-11-14 04:00:46,364 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-14 04:00:46,364 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-14 04:00:46,364 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-11-14 04:00:46,364 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-14 04:00:46,364 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-11-14 04:00:46,365 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-14 04:00:46,365 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-14 04:00:46,365 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-14 04:00:46,365 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-14 04:00:46,365 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-14 04:00:46,365 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-14 04:00:46,368 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-14 04:00:46,368 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-14 04:00:46,368 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-14 04:00:46,368 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-11-14 04:00:46,368 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2024-11-14 04:00:46,368 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-14 04:00:46,369 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-14 04:00:46,369 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2024-11-14 04:00:46,369 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-14 04:00:46,369 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d88455bf5089be24833f69dfcbd91003e7e136bcd5efcd63ae18e59d7f59e87d [2024-11-14 04:00:46,734 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-14 04:00:46,744 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-14 04:00:46,748 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-14 04:00:46,749 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-14 04:00:46,750 INFO L274 PluginConnector]: CDTParser initialized [2024-11-14 04:00:46,753 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i Unable to find full path for "g++" [2024-11-14 04:00:48,920 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-14 04:00:49,670 INFO L384 CDTParser]: Found 1 translation units. [2024-11-14 04:00:49,673 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i [2024-11-14 04:00:49,734 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/data/391170eaa/ab3262f6b1d34a01894742b24caa6109/FLAGebe2fb9a2 [2024-11-14 04:00:50,011 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/data/391170eaa/ab3262f6b1d34a01894742b24caa6109 [2024-11-14 04:00:50,014 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-14 04:00:50,016 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-14 04:00:50,023 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-14 04:00:50,023 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-14 04:00:50,032 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-14 04:00:50,034 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 04:00:50" (1/1) ... [2024-11-14 04:00:50,035 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5eae1713 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:50, skipping insertion in model container [2024-11-14 04:00:50,035 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.11 04:00:50" (1/1) ... [2024-11-14 04:00:50,176 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-14 04:00:51,307 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i[205251,205264] [2024-11-14 04:00:52,553 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-14 04:00:52,644 INFO L200 MainTranslator]: Completed pre-run [2024-11-14 04:00:52,844 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [7017-7018] [2024-11-14 04:00:52,859 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i[205251,205264] [2024-11-14 04:00:53,178 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-14 04:00:53,304 INFO L204 MainTranslator]: Completed translation [2024-11-14 04:00:53,305 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53 WrapperNode [2024-11-14 04:00:53,306 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-14 04:00:53,308 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-14 04:00:53,308 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-14 04:00:53,309 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-14 04:00:53,316 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:53,452 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:53,700 INFO L138 Inliner]: procedures = 239, calls = 3184, calls flagged for inlining = 111, calls inlined = 96, statements flattened = 6433 [2024-11-14 04:00:53,700 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-14 04:00:53,701 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-14 04:00:53,701 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-14 04:00:53,702 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-14 04:00:53,712 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:53,712 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:53,777 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:53,778 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:54,067 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:54,140 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:54,243 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:54,284 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:54,342 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-14 04:00:54,345 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-14 04:00:54,346 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-14 04:00:54,346 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-14 04:00:54,347 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (1/1) ... [2024-11-14 04:00:54,358 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-14 04:00:54,375 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/z3 [2024-11-14 04:00:54,392 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2024-11-14 04:00:54,399 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7fdb947f-feb9-4dee-b1e6-2b7ea6661b14/bin/utaipan-verify-sOmjnqqW8E/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2024-11-14 04:00:54,426 INFO L130 BoogieDeclarations]: Found specification of procedure at76_hw_scan [2024-11-14 04:00:54,426 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_hw_scan [2024-11-14 04:00:54,427 INFO L130 BoogieDeclarations]: Found specification of procedure at76_dfu_get_status [2024-11-14 04:00:54,427 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_dfu_get_status [2024-11-14 04:00:54,427 INFO L130 BoogieDeclarations]: Found specification of procedure at76_join [2024-11-14 04:00:54,427 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_join [2024-11-14 04:00:54,427 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2024-11-14 04:00:54,428 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2024-11-14 04:00:54,428 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2024-11-14 04:00:54,428 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2024-11-14 04:00:54,428 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2024-11-14 04:00:54,428 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2024-11-14 04:00:54,428 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_dev [2024-11-14 04:00:54,428 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_dev [2024-11-14 04:00:54,429 INFO L130 BoogieDeclarations]: Found specification of procedure at76_submit_rx_urb [2024-11-14 04:00:54,429 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_submit_rx_urb [2024-11-14 04:00:54,429 INFO L130 BoogieDeclarations]: Found specification of procedure at76_add_interface [2024-11-14 04:00:54,429 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_add_interface [2024-11-14 04:00:54,429 INFO L130 BoogieDeclarations]: Found specification of procedure at76_get_timeout [2024-11-14 04:00:54,429 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_get_timeout [2024-11-14 04:00:54,430 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2024-11-14 04:00:54,430 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2024-11-14 04:00:54,430 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2024-11-14 04:00:54,430 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2024-11-14 04:00:54,430 INFO L130 BoogieDeclarations]: Found specification of procedure at76_bss_info_changed [2024-11-14 04:00:54,431 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_bss_info_changed [2024-11-14 04:00:54,431 INFO L130 BoogieDeclarations]: Found specification of procedure dev_printk [2024-11-14 04:00:54,431 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_printk [2024-11-14 04:00:54,431 INFO L130 BoogieDeclarations]: Found specification of procedure at76_wait_completion [2024-11-14 04:00:54,432 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_wait_completion [2024-11-14 04:00:54,432 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2024-11-14 04:00:54,432 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2024-11-14 04:00:54,432 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2024-11-14 04:00:54,432 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2024-11-14 04:00:54,432 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2024-11-14 04:00:54,434 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2024-11-14 04:00:54,434 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2024-11-14 04:00:54,434 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2024-11-14 04:00:54,434 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2024-11-14 04:00:54,434 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2024-11-14 04:00:54,434 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-11-14 04:00:54,434 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2024-11-14 04:00:54,434 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2024-11-14 04:00:54,434 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2024-11-14 04:00:54,434 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2024-11-14 04:00:54,435 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2024-11-14 04:00:54,435 INFO L130 BoogieDeclarations]: Found specification of procedure at76_delete_device [2024-11-14 04:00:54,435 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_delete_device [2024-11-14 04:00:54,435 INFO L130 BoogieDeclarations]: Found specification of procedure at76_get_mib [2024-11-14 04:00:54,435 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_get_mib [2024-11-14 04:00:54,435 INFO L130 BoogieDeclarations]: Found specification of procedure at76_set_radio [2024-11-14 04:00:54,435 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_set_radio [2024-11-14 04:00:54,435 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-11-14 04:00:54,435 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2024-11-14 04:00:54,435 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2024-11-14 04:00:54,435 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2024-11-14 04:00:54,435 INFO L130 BoogieDeclarations]: Found specification of procedure led_trigger_event [2024-11-14 04:00:54,435 INFO L138 BoogieDeclarations]: Found implementation of procedure led_trigger_event [2024-11-14 04:00:54,435 INFO L130 BoogieDeclarations]: Found specification of procedure at76_set_card_command [2024-11-14 04:00:54,435 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_set_card_command [2024-11-14 04:00:54,435 INFO L130 BoogieDeclarations]: Found specification of procedure at76_get_cmd_status [2024-11-14 04:00:54,436 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_get_cmd_status [2024-11-14 04:00:54,436 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2024-11-14 04:00:54,436 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2024-11-14 04:00:54,436 INFO L130 BoogieDeclarations]: Found specification of procedure cancel_work_sync [2024-11-14 04:00:54,436 INFO L138 BoogieDeclarations]: Found implementation of procedure cancel_work_sync [2024-11-14 04:00:54,436 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2024-11-14 04:00:54,436 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2024-11-14 04:00:54,436 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2024-11-14 04:00:54,436 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2024-11-14 04:00:54,440 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_queue_delayed_work [2024-11-14 04:00:54,440 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_queue_delayed_work [2024-11-14 04:00:54,441 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2024-11-14 04:00:54,441 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2024-11-14 04:00:54,441 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2024-11-14 04:00:54,441 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2024-11-14 04:00:54,441 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2024-11-14 04:00:54,441 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2024-11-14 04:00:54,441 INFO L130 BoogieDeclarations]: Found specification of procedure at76_set_mib [2024-11-14 04:00:54,441 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_set_mib [2024-11-14 04:00:54,441 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2024-11-14 04:00:54,441 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2024-11-14 04:00:54,441 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2024-11-14 04:00:54,441 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2024-11-14 04:00:54,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2024-11-14 04:00:54,441 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2024-11-14 04:00:54,441 INFO L130 BoogieDeclarations]: Found specification of procedure at76_set_pm_mode [2024-11-14 04:00:54,441 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_set_pm_mode [2024-11-14 04:00:54,442 INFO L130 BoogieDeclarations]: Found specification of procedure _dev_info [2024-11-14 04:00:54,442 INFO L138 BoogieDeclarations]: Found implementation of procedure _dev_info [2024-11-14 04:00:54,442 INFO L130 BoogieDeclarations]: Found specification of procedure at76_set_key [2024-11-14 04:00:54,442 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_set_key [2024-11-14 04:00:54,442 INFO L130 BoogieDeclarations]: Found specification of procedure at76_is_505a [2024-11-14 04:00:54,442 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_is_505a [2024-11-14 04:00:54,442 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2024-11-14 04:00:54,442 INFO L130 BoogieDeclarations]: Found specification of procedure at76_get_hw_cfg [2024-11-14 04:00:54,442 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_get_hw_cfg [2024-11-14 04:00:54,442 INFO L130 BoogieDeclarations]: Found specification of procedure at76_config [2024-11-14 04:00:54,442 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_config [2024-11-14 04:00:54,442 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2024-11-14 04:00:54,442 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2024-11-14 04:00:54,442 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2024-11-14 04:00:54,442 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2024-11-14 04:00:54,442 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2024-11-14 04:00:54,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2024-11-14 04:00:54,442 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2024-11-14 04:00:54,442 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2024-11-14 04:00:54,443 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2024-11-14 04:00:54,443 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2024-11-14 04:00:54,443 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2024-11-14 04:00:54,443 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2024-11-14 04:00:54,443 INFO L130 BoogieDeclarations]: Found specification of procedure at76_get_op_mode [2024-11-14 04:00:54,443 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_get_op_mode [2024-11-14 04:00:54,443 INFO L130 BoogieDeclarations]: Found specification of procedure at76_remove_interface [2024-11-14 04:00:54,443 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_remove_interface [2024-11-14 04:00:54,443 INFO L130 BoogieDeclarations]: Found specification of procedure print_hex_dump [2024-11-14 04:00:54,443 INFO L138 BoogieDeclarations]: Found implementation of procedure print_hex_dump [2024-11-14 04:00:54,443 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2024-11-14 04:00:54,446 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2024-11-14 04:00:54,446 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2024-11-14 04:00:54,446 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2024-11-14 04:00:54,446 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2024-11-14 04:00:54,446 INFO L130 BoogieDeclarations]: Found specification of procedure wiphy_name [2024-11-14 04:00:54,446 INFO L138 BoogieDeclarations]: Found implementation of procedure wiphy_name [2024-11-14 04:00:54,447 INFO L130 BoogieDeclarations]: Found specification of procedure schedule_timeout_interruptible [2024-11-14 04:00:54,447 INFO L138 BoogieDeclarations]: Found implementation of procedure schedule_timeout_interruptible [2024-11-14 04:00:54,447 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2024-11-14 04:00:54,447 INFO L130 BoogieDeclarations]: Found specification of procedure at76_start_monitor [2024-11-14 04:00:54,447 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_start_monitor [2024-11-14 04:00:54,447 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_stop_queues [2024-11-14 04:00:54,447 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_stop_queues [2024-11-14 04:00:54,447 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2024-11-14 04:00:54,447 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2024-11-14 04:00:54,447 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-14 04:00:54,447 INFO L130 BoogieDeclarations]: Found specification of procedure is_valid_ether_addr [2024-11-14 04:00:54,448 INFO L138 BoogieDeclarations]: Found implementation of procedure is_valid_ether_addr [2024-11-14 04:00:54,448 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2024-11-14 04:00:54,448 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2024-11-14 04:00:54,448 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2024-11-14 04:00:54,448 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2024-11-14 04:00:54,448 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2024-11-14 04:00:54,448 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2024-11-14 04:00:54,448 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2024-11-14 04:00:54,448 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2024-11-14 04:00:54,448 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2024-11-14 04:00:54,448 INFO L130 BoogieDeclarations]: Found specification of procedure at76_configure_filter [2024-11-14 04:00:54,448 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_configure_filter [2024-11-14 04:00:54,448 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2024-11-14 04:00:54,448 INFO L138 BoogieDeclarations]: Found implementation of procedure warn_slowpath_null [2024-11-14 04:00:54,448 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_queue_work [2024-11-14 04:00:54,448 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_queue_work [2024-11-14 04:00:54,448 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2024-11-14 04:00:54,448 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2024-11-14 04:00:54,448 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2024-11-14 04:00:54,449 INFO L130 BoogieDeclarations]: Found specification of procedure at76_mac80211_tx [2024-11-14 04:00:54,449 INFO L138 BoogieDeclarations]: Found implementation of procedure at76_mac80211_tx [2024-11-14 04:00:54,449 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-14 04:00:54,449 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-14 04:00:54,449 INFO L130 BoogieDeclarations]: Found specification of procedure IEEE80211_SKB_CB [2024-11-14 04:00:54,449 INFO L138 BoogieDeclarations]: Found implementation of procedure IEEE80211_SKB_CB [2024-11-14 04:00:55,561 INFO L238 CfgBuilder]: Building ICFG [2024-11-14 04:00:55,566 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-14 04:00:56,089 INFO L735 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2024-11-14 04:02:39,356 INFO L? ?]: Removed 1780 outVars from TransFormulas that were not future-live. [2024-11-14 04:02:39,357 INFO L287 CfgBuilder]: Performing block encoding [2024-11-14 04:02:42,013 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-14 04:02:42,014 INFO L316 CfgBuilder]: Removed 4 assume(true) statements. [2024-11-14 04:02:42,014 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 04:02:42 BoogieIcfgContainer [2024-11-14 04:02:42,014 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-14 04:02:42,016 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-14 04:02:42,019 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-14 04:02:42,024 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-14 04:02:42,024 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.11 04:00:50" (1/3) ... [2024-11-14 04:02:42,025 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@486dd240 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 04:02:42, skipping insertion in model container [2024-11-14 04:02:42,025 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.11 04:00:53" (2/3) ... [2024-11-14 04:02:42,025 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@486dd240 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.11 04:02:42, skipping insertion in model container [2024-11-14 04:02:42,025 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.11 04:02:42" (3/3) ... [2024-11-14 04:02:42,026 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i [2024-11-14 04:02:42,045 INFO L217 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-14 04:02:42,049 INFO L154 ceAbstractionStarter]: Applying trace abstraction to ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--at76c50x-usb.ko-entry_point.cil.out.i that has 73 procedures, 1387 locations, 1 initial locations, 7 loop locations, and 1 error locations. [2024-11-14 04:02:42,165 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-14 04:02:42,182 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@52b20dd3, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-14 04:02:42,183 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-11-14 04:02:42,197 INFO L276 IsEmpty]: Start isEmpty. Operand has 1386 states, 888 states have (on average 1.3355855855855856) internal successors, (1186), 910 states have internal predecessors, (1186), 425 states have call successors, (425), 72 states have call predecessors, (425), 71 states have return successors, (420), 419 states have call predecessors, (420), 420 states have call successors, (420) [2024-11-14 04:02:42,210 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-11-14 04:02:42,212 INFO L207 NwaCegarLoop]: Found error trace [2024-11-14 04:02:42,214 INFO L215 NwaCegarLoop]: trace histogram [8, 8, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-14 04:02:42,214 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-11-14 04:02:42,220 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-14 04:02:42,221 INFO L85 PathProgramCache]: Analyzing trace with hash 1600244816, now seen corresponding path program 1 times [2024-11-14 04:02:42,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-14 04:02:42,231 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [24562681] [2024-11-14 04:02:42,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-14 04:02:42,232 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms