./Ultimate.py --spec ../sv-benchmarks/c/properties/no-overflow.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for overflows Using default analysis Version 551b0097 Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Overflow-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! overflow) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 6c4ab0d347d6c58a2b5191b2f18450c386609151b3047d9385b0116d6b1677b6 --- Real Ultimate output --- This is Ultimate 0.3.0-?-551b009-m [2025-01-10 02:40:04,998 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-01-10 02:40:05,034 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Overflow-64bit-Automizer_Default.epf [2025-01-10 02:40:05,037 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-01-10 02:40:05,037 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-01-10 02:40:05,052 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-01-10 02:40:05,052 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-01-10 02:40:05,052 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-01-10 02:40:05,052 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-01-10 02:40:05,052 INFO L153 SettingsManager]: * Use memory slicer=true [2025-01-10 02:40:05,053 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-01-10 02:40:05,053 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Use SBE=true [2025-01-10 02:40:05,053 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Check absence of signed integer overflows=ASSERTandASSUME [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2025-01-10 02:40:05,053 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Use constant arrays=true [2025-01-10 02:40:05,054 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-01-10 02:40:05,054 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-01-10 02:40:05,054 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-01-10 02:40:05,054 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-01-10 02:40:05,055 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-01-10 02:40:05,055 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-01-10 02:40:05,055 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-01-10 02:40:05,055 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! overflow) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6c4ab0d347d6c58a2b5191b2f18450c386609151b3047d9385b0116d6b1677b6 [2025-01-10 02:40:05,287 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-01-10 02:40:05,296 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-01-10 02:40:05,298 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-01-10 02:40:05,298 INFO L270 PluginConnector]: Initializing CDTParser... [2025-01-10 02:40:05,298 INFO L274 PluginConnector]: CDTParser initialized [2025-01-10 02:40:05,299 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i [2025-01-10 02:40:06,507 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/c60de4ef5/9417a21f4f04434bb531e46ccc8a5ffe/FLAGcb5551f08 [2025-01-10 02:40:07,057 INFO L384 CDTParser]: Found 1 translation units. [2025-01-10 02:40:07,058 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i [2025-01-10 02:40:07,098 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/c60de4ef5/9417a21f4f04434bb531e46ccc8a5ffe/FLAGcb5551f08 [2025-01-10 02:40:07,117 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/c60de4ef5/9417a21f4f04434bb531e46ccc8a5ffe [2025-01-10 02:40:07,119 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-01-10 02:40:07,120 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-01-10 02:40:07,126 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-01-10 02:40:07,126 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-01-10 02:40:07,129 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-01-10 02:40:07,130 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 02:40:07" (1/1) ... [2025-01-10 02:40:07,130 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5360201c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:07, skipping insertion in model container [2025-01-10 02:40:07,131 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 02:40:07" (1/1) ... [2025-01-10 02:40:07,214 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-01-10 02:40:07,667 WARN L1383 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [5877] [2025-01-10 02:40:07,668 WARN L1383 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [5878-5879] [2025-01-10 02:40:08,506 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-01-10 02:40:08,525 INFO L200 MainTranslator]: Completed pre-run [2025-01-10 02:40:08,662 WARN L1383 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [5877] [2025-01-10 02:40:08,663 WARN L1383 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [5878-5879] [2025-01-10 02:40:08,665 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5960-5961] [2025-01-10 02:40:08,671 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; addl %1,%0": "+m" (v->counter): "ir" (i)); [6015] [2025-01-10 02:40:08,894 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-01-10 02:40:08,930 INFO L204 MainTranslator]: Completed translation [2025-01-10 02:40:08,931 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08 WrapperNode [2025-01-10 02:40:08,932 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-01-10 02:40:08,933 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-01-10 02:40:08,934 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-01-10 02:40:08,934 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-01-10 02:40:08,939 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:08,994 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,091 INFO L138 Inliner]: procedures = 168, calls = 1550, calls flagged for inlining = 61, calls inlined = 45, statements flattened = 2818 [2025-01-10 02:40:09,095 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-01-10 02:40:09,095 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-01-10 02:40:09,095 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-01-10 02:40:09,095 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-01-10 02:40:09,102 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,103 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,125 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,284 INFO L175 MemorySlicer]: Split 733 memory accesses to 18 slices as follows [2, 232, 2, 182, 29, 8, 1, 0, 21, 11, 8, 203, 8, 1, 8, 8, 2, 7]. 32 percent of accesses are in the largest equivalence class. The 274 initializations are split as follows [2, 232, 0, 8, 0, 8, 0, 0, 0, 0, 8, 0, 8, 0, 0, 8, 0, 0]. The 279 writes are split as follows [0, 0, 0, 60, 8, 0, 0, 0, 21, 11, 0, 174, 0, 0, 4, 0, 1, 0]. [2025-01-10 02:40:09,285 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,285 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,334 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,339 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,348 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,360 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,379 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,434 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-01-10 02:40:09,436 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2025-01-10 02:40:09,437 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2025-01-10 02:40:09,437 INFO L274 PluginConnector]: RCFGBuilder initialized [2025-01-10 02:40:09,438 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (1/1) ... [2025-01-10 02:40:09,442 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-01-10 02:40:09,455 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-01-10 02:40:09,469 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-01-10 02:40:09,473 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-01-10 02:40:09,491 INFO L130 BoogieDeclarations]: Found specification of procedure nla_get_u32 [2025-01-10 02:40:09,491 INFO L138 BoogieDeclarations]: Found implementation of procedure nla_get_u32 [2025-01-10 02:40:09,491 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2025-01-10 02:40:09,491 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2025-01-10 02:40:09,491 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#0 [2025-01-10 02:40:09,491 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#1 [2025-01-10 02:40:09,492 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#2 [2025-01-10 02:40:09,492 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#3 [2025-01-10 02:40:09,492 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#4 [2025-01-10 02:40:09,492 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#5 [2025-01-10 02:40:09,492 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#6 [2025-01-10 02:40:09,492 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#7 [2025-01-10 02:40:09,492 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#8 [2025-01-10 02:40:09,492 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#9 [2025-01-10 02:40:09,492 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#10 [2025-01-10 02:40:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#11 [2025-01-10 02:40:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#12 [2025-01-10 02:40:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#13 [2025-01-10 02:40:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#14 [2025-01-10 02:40:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#15 [2025-01-10 02:40:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#16 [2025-01-10 02:40:09,493 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#17 [2025-01-10 02:40:09,494 INFO L130 BoogieDeclarations]: Found specification of procedure lookup_flow [2025-01-10 02:40:09,494 INFO L138 BoogieDeclarations]: Found implementation of procedure lookup_flow [2025-01-10 02:40:09,494 INFO L130 BoogieDeclarations]: Found specification of procedure qdisc_create_dflt [2025-01-10 02:40:09,494 INFO L138 BoogieDeclarations]: Found implementation of procedure qdisc_create_dflt [2025-01-10 02:40:09,494 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#0 [2025-01-10 02:40:09,495 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#1 [2025-01-10 02:40:09,495 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#2 [2025-01-10 02:40:09,495 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#3 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#4 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#5 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#6 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#7 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#8 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#9 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#10 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#11 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#12 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#13 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#14 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#15 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#16 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#17 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#4 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#5 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#6 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#7 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#8 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#9 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#10 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#11 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#12 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#13 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#14 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#15 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#16 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#17 [2025-01-10 02:40:09,496 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2025-01-10 02:40:09,496 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#6 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#7 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#8 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#9 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#10 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#11 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#12 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#13 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#14 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#15 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#16 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#17 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure qdisc_reset [2025-01-10 02:40:09,497 INFO L138 BoogieDeclarations]: Found implementation of procedure qdisc_reset [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure nla_put_u32 [2025-01-10 02:40:09,497 INFO L138 BoogieDeclarations]: Found implementation of procedure nla_put_u32 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_dump_class [2025-01-10 02:40:09,497 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_dump_class [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#0 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#1 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#2 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#3 [2025-01-10 02:40:09,497 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#4 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#5 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#6 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#7 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#8 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#9 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#10 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#11 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#12 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#13 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#14 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#15 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#16 [2025-01-10 02:40:09,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#17 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#0 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#1 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#2 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#3 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#4 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#5 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#6 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#7 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#8 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#9 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#10 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#11 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#12 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#13 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#14 [2025-01-10 02:40:09,501 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#15 [2025-01-10 02:40:09,502 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#16 [2025-01-10 02:40:09,502 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#17 [2025-01-10 02:40:09,502 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-01-10 02:40:09,502 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-01-10 02:40:09,502 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_change [2025-01-10 02:40:09,502 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_change [2025-01-10 02:40:09,502 INFO L130 BoogieDeclarations]: Found specification of procedure constant_test_bit [2025-01-10 02:40:09,502 INFO L138 BoogieDeclarations]: Found implementation of procedure constant_test_bit [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_dump_class_stats [2025-01-10 02:40:09,503 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_dump_class_stats [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2025-01-10 02:40:09,503 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_put [2025-01-10 02:40:09,503 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_put [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure qdisc_enqueue [2025-01-10 02:40:09,503 INFO L138 BoogieDeclarations]: Found implementation of procedure qdisc_enqueue [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_bind_filter [2025-01-10 02:40:09,503 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_bind_filter [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#6 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#7 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#8 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#9 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#10 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#11 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#12 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#13 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#14 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#15 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#16 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#17 [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_dump [2025-01-10 02:40:09,503 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_dump [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2025-01-10 02:40:09,503 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_drop [2025-01-10 02:40:09,503 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_drop [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_pr_debug [2025-01-10 02:40:09,503 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_pr_debug [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2025-01-10 02:40:09,503 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2025-01-10 02:40:09,503 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2025-01-10 02:40:09,504 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_init [2025-01-10 02:40:09,504 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_init [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_get [2025-01-10 02:40:09,504 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_get [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure qdisc_priv [2025-01-10 02:40:09,504 INFO L138 BoogieDeclarations]: Found implementation of procedure qdisc_priv [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure nla_len [2025-01-10 02:40:09,504 INFO L138 BoogieDeclarations]: Found implementation of procedure nla_len [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#7 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#8 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#9 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#10 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#11 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#12 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#13 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#14 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#15 [2025-01-10 02:40:09,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#16 [2025-01-10 02:40:09,507 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#17 [2025-01-10 02:40:09,507 INFO L130 BoogieDeclarations]: Found specification of procedure nla_put [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure nla_put [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~int [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~int [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure tasklet_schedule [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure tasklet_schedule [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#7 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#8 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#9 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#10 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#11 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#12 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#13 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#14 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#15 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#16 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#17 [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure qdisc_dequeue_peeked [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure qdisc_dequeue_peeked [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_walk [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_walk [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_delete [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_delete [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_find_tcf [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_find_tcf [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_long_read [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_long_read [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~$Pointer$ [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~$Pointer$ [2025-01-10 02:40:09,508 INFO L130 BoogieDeclarations]: Found specification of procedure list_add [2025-01-10 02:40:09,508 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_reset [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_reset [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure tcf_destroy_chain [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure tcf_destroy_chain [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_dequeue [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_dequeue [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure kfree_skb [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree_skb [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_enqueue [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_enqueue [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure nla_data [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure nla_data [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_peek [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_peek [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_leaf [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_leaf [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure fput [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure fput [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_destroy [2025-01-10 02:40:09,509 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_destroy [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-01-10 02:40:09,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-01-10 02:40:09,511 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-01-10 02:40:09,511 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-01-10 02:40:09,511 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_graft [2025-01-10 02:40:09,512 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_graft [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure skb_tail_pointer [2025-01-10 02:40:09,512 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_tail_pointer [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#0 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#1 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#2 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#3 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#4 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#5 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#6 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#7 [2025-01-10 02:40:09,512 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#8 [2025-01-10 02:40:09,513 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#9 [2025-01-10 02:40:09,513 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#10 [2025-01-10 02:40:09,513 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#11 [2025-01-10 02:40:09,513 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#12 [2025-01-10 02:40:09,513 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#13 [2025-01-10 02:40:09,513 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#14 [2025-01-10 02:40:09,513 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#15 [2025-01-10 02:40:09,513 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#16 [2025-01-10 02:40:09,514 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#17 [2025-01-10 02:40:09,514 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2025-01-10 02:40:09,514 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2025-01-10 02:40:09,514 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-01-10 02:40:09,514 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-01-10 02:40:10,023 INFO L234 CfgBuilder]: Building ICFG [2025-01-10 02:40:10,026 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2025-01-10 02:40:10,519 INFO L727 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2025-01-10 02:40:16,849 INFO L? ?]: Removed 1174 outVars from TransFormulas that were not future-live. [2025-01-10 02:40:16,849 INFO L283 CfgBuilder]: Performing block encoding [2025-01-10 02:40:16,877 INFO L307 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-01-10 02:40:16,877 INFO L312 CfgBuilder]: Removed 0 assume(true) statements. [2025-01-10 02:40:16,877 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 02:40:16 BoogieIcfgContainer [2025-01-10 02:40:16,877 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2025-01-10 02:40:16,879 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2025-01-10 02:40:16,879 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2025-01-10 02:40:16,886 INFO L274 PluginConnector]: TraceAbstraction initialized [2025-01-10 02:40:16,886 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 02:40:07" (1/3) ... [2025-01-10 02:40:16,887 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@e03c69f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 02:40:16, skipping insertion in model container [2025-01-10 02:40:16,887 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 02:40:08" (2/3) ... [2025-01-10 02:40:16,887 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@e03c69f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 02:40:16, skipping insertion in model container [2025-01-10 02:40:16,887 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 02:40:16" (3/3) ... [2025-01-10 02:40:16,888 INFO L128 eAbstractionObserver]: Analyzing ICFG 43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i [2025-01-10 02:40:16,909 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2025-01-10 02:40:16,910 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG 43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i that has 71 procedures, 1055 locations, 1 initial locations, 37 loop locations, and 22 error locations. [2025-01-10 02:40:17,023 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2025-01-10 02:40:17,044 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@799fac66, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2025-01-10 02:40:17,044 INFO L334 AbstractCegarLoop]: Starting to check reachability of 22 error locations. [2025-01-10 02:40:17,053 INFO L276 IsEmpty]: Start isEmpty. Operand has 969 states, 681 states have (on average 1.3656387665198237) internal successors, (930), 710 states have internal predecessors, (930), 213 states have call successors, (213), 53 states have call predecessors, (213), 52 states have return successors, (209), 209 states have call predecessors, (209), 209 states have call successors, (209) [2025-01-10 02:40:17,062 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2025-01-10 02:40:17,063 INFO L210 NwaCegarLoop]: Found error trace [2025-01-10 02:40:17,063 INFO L218 NwaCegarLoop]: trace histogram [9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-01-10 02:40:17,064 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 19 more)] === [2025-01-10 02:40:17,067 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-01-10 02:40:17,067 INFO L85 PathProgramCache]: Analyzing trace with hash -1273430171, now seen corresponding path program 1 times [2025-01-10 02:40:17,073 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-01-10 02:40:17,073 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [318493168] [2025-01-10 02:40:17,073 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-01-10 02:40:17,074 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-01-10 02:40:17,427 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 72 statements into 1 equivalence classes. [2025-01-10 02:40:17,583 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 72 of 72 statements. [2025-01-10 02:40:17,588 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 02:40:17,588 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-01-10 02:40:17,911 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2025-01-10 02:40:17,913 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-01-10 02:40:17,913 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [318493168] [2025-01-10 02:40:17,914 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [318493168] provided 1 perfect and 0 imperfect interpolant sequences [2025-01-10 02:40:17,914 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-01-10 02:40:17,915 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-01-10 02:40:17,916 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1696554534] [2025-01-10 02:40:17,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-01-10 02:40:17,918 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-01-10 02:40:17,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-01-10 02:40:17,938 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-01-10 02:40:17,939 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 02:40:17,942 INFO L87 Difference]: Start difference. First operand has 969 states, 681 states have (on average 1.3656387665198237) internal successors, (930), 710 states have internal predecessors, (930), 213 states have call successors, (213), 53 states have call predecessors, (213), 52 states have return successors, (209), 209 states have call predecessors, (209), 209 states have call successors, (209) Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2025-01-10 02:40:18,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-01-10 02:40:18,189 INFO L93 Difference]: Finished difference Result 2555 states and 3608 transitions. [2025-01-10 02:40:18,193 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-01-10 02:40:18,194 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 72 [2025-01-10 02:40:18,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-01-10 02:40:18,209 INFO L225 Difference]: With dead ends: 2555 [2025-01-10 02:40:18,209 INFO L226 Difference]: Without dead ends: 1560 [2025-01-10 02:40:18,219 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 02:40:18,221 INFO L435 NwaCegarLoop]: 1350 mSDtfsCounter, 887 mSDsluCounter, 1242 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 887 SdHoareTripleChecker+Valid, 2592 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2025-01-10 02:40:18,221 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [887 Valid, 2592 Invalid, 71 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2025-01-10 02:40:18,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1560 states. [2025-01-10 02:40:18,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1560 to 1546. [2025-01-10 02:40:18,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1546 states, 1106 states have (on average 1.3499095840867992) internal successors, (1493), 1127 states have internal predecessors, (1493), 335 states have call successors, (335), 87 states have call predecessors, (335), 87 states have return successors, (335), 334 states have call predecessors, (335), 335 states have call successors, (335) [2025-01-10 02:40:18,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1546 states to 1546 states and 2163 transitions. [2025-01-10 02:40:18,344 INFO L78 Accepts]: Start accepts. Automaton has 1546 states and 2163 transitions. Word has length 72 [2025-01-10 02:40:18,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-01-10 02:40:18,345 INFO L471 AbstractCegarLoop]: Abstraction has 1546 states and 2163 transitions. [2025-01-10 02:40:18,345 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2025-01-10 02:40:18,345 INFO L276 IsEmpty]: Start isEmpty. Operand 1546 states and 2163 transitions. [2025-01-10 02:40:18,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2025-01-10 02:40:18,348 INFO L210 NwaCegarLoop]: Found error trace [2025-01-10 02:40:18,349 INFO L218 NwaCegarLoop]: trace histogram [9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-01-10 02:40:18,349 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2025-01-10 02:40:18,349 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW === [atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 19 more)] === [2025-01-10 02:40:18,349 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-01-10 02:40:18,350 INFO L85 PathProgramCache]: Analyzing trace with hash -1168889295, now seen corresponding path program 1 times [2025-01-10 02:40:18,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-01-10 02:40:18,350 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [155322612] [2025-01-10 02:40:18,350 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-01-10 02:40:18,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-01-10 02:40:18,597 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 78 statements into 1 equivalence classes. [2025-01-10 02:40:18,632 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 78 of 78 statements. [2025-01-10 02:40:18,632 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 02:40:18,632 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-01-10 02:40:18,777 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2025-01-10 02:40:18,777 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-01-10 02:40:18,778 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [155322612] [2025-01-10 02:40:18,778 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [155322612] provided 1 perfect and 0 imperfect interpolant sequences [2025-01-10 02:40:18,778 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-01-10 02:40:18,778 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-01-10 02:40:18,778 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [702291532] [2025-01-10 02:40:18,778 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-01-10 02:40:18,779 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-01-10 02:40:18,779 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-01-10 02:40:18,780 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-01-10 02:40:18,780 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 02:40:18,780 INFO L87 Difference]: Start difference. First operand 1546 states and 2163 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2025-01-10 02:40:18,946 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-01-10 02:40:18,946 INFO L93 Difference]: Finished difference Result 3559 states and 4955 transitions. [2025-01-10 02:40:18,947 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-01-10 02:40:18,947 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 78 [2025-01-10 02:40:18,947 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-01-10 02:40:18,957 INFO L225 Difference]: With dead ends: 3559 [2025-01-10 02:40:18,958 INFO L226 Difference]: Without dead ends: 2034 [2025-01-10 02:40:18,962 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 02:40:18,963 INFO L435 NwaCegarLoop]: 1746 mSDtfsCounter, 650 mSDsluCounter, 1216 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 650 SdHoareTripleChecker+Valid, 2962 SdHoareTripleChecker+Invalid, 77 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2025-01-10 02:40:18,963 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [650 Valid, 2962 Invalid, 77 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2025-01-10 02:40:18,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2034 states. [2025-01-10 02:40:19,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2034 to 2024. [2025-01-10 02:40:19,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2024 states, 1457 states have (on average 1.3466026080988331) internal successors, (1962), 1479 states have internal predecessors, (1962), 429 states have call successors, (429), 120 states have call predecessors, (429), 120 states have return successors, (429), 428 states have call predecessors, (429), 429 states have call successors, (429) [2025-01-10 02:40:19,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2024 states to 2024 states and 2820 transitions. [2025-01-10 02:40:19,072 INFO L78 Accepts]: Start accepts. Automaton has 2024 states and 2820 transitions. Word has length 78 [2025-01-10 02:40:19,072 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-01-10 02:40:19,072 INFO L471 AbstractCegarLoop]: Abstraction has 2024 states and 2820 transitions. [2025-01-10 02:40:19,072 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2025-01-10 02:40:19,072 INFO L276 IsEmpty]: Start isEmpty. Operand 2024 states and 2820 transitions. [2025-01-10 02:40:19,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2025-01-10 02:40:19,077 INFO L210 NwaCegarLoop]: Found error trace [2025-01-10 02:40:19,077 INFO L218 NwaCegarLoop]: trace histogram [12, 12, 12, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-01-10 02:40:19,077 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2025-01-10 02:40:19,077 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 19 more)] === [2025-01-10 02:40:19,077 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-01-10 02:40:19,077 INFO L85 PathProgramCache]: Analyzing trace with hash -1451780188, now seen corresponding path program 1 times [2025-01-10 02:40:19,078 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-01-10 02:40:19,078 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [660804665] [2025-01-10 02:40:19,078 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-01-10 02:40:19,078 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-01-10 02:40:19,315 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 103 statements into 1 equivalence classes. [2025-01-10 02:40:19,351 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 103 of 103 statements. [2025-01-10 02:40:19,352 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 02:40:19,352 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-01-10 02:40:19,582 INFO L134 CoverageAnalysis]: Checked inductivity of 266 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 266 trivial. 0 not checked. [2025-01-10 02:40:19,583 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-01-10 02:40:19,584 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [660804665] [2025-01-10 02:40:19,584 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [660804665] provided 1 perfect and 0 imperfect interpolant sequences [2025-01-10 02:40:19,584 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-01-10 02:40:19,584 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2025-01-10 02:40:19,584 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1689483934] [2025-01-10 02:40:19,584 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-01-10 02:40:19,584 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-01-10 02:40:19,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-01-10 02:40:19,585 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-01-10 02:40:19,585 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 02:40:19,585 INFO L87 Difference]: Start difference. First operand 2024 states and 2820 transitions. Second operand has 3 states, 2 states have (on average 22.5) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2025-01-10 02:40:19,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-01-10 02:40:19,740 INFO L93 Difference]: Finished difference Result 4016 states and 5599 transitions. [2025-01-10 02:40:19,741 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-01-10 02:40:19,741 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 22.5) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 103 [2025-01-10 02:40:19,742 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-01-10 02:40:19,759 INFO L225 Difference]: With dead ends: 4016 [2025-01-10 02:40:19,759 INFO L226 Difference]: Without dead ends: 4006 [2025-01-10 02:40:19,762 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 02:40:19,762 INFO L435 NwaCegarLoop]: 1310 mSDtfsCounter, 1272 mSDsluCounter, 1270 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1272 SdHoareTripleChecker+Valid, 2580 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2025-01-10 02:40:19,762 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [1272 Valid, 2580 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2025-01-10 02:40:19,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4006 states. [2025-01-10 02:40:19,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4006 to 3998. [2025-01-10 02:40:19,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3998 states, 2894 states have (on average 1.3417415342087076) internal successors, (3883), 2921 states have internal predecessors, (3883), 848 states have call successors, (848), 238 states have call predecessors, (848), 238 states have return successors, (848), 846 states have call predecessors, (848), 848 states have call successors, (848) [2025-01-10 02:40:19,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3998 states to 3998 states and 5579 transitions. [2025-01-10 02:40:19,923 INFO L78 Accepts]: Start accepts. Automaton has 3998 states and 5579 transitions. Word has length 103 [2025-01-10 02:40:19,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-01-10 02:40:19,923 INFO L471 AbstractCegarLoop]: Abstraction has 3998 states and 5579 transitions. [2025-01-10 02:40:19,923 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 22.5) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2025-01-10 02:40:19,923 INFO L276 IsEmpty]: Start isEmpty. Operand 3998 states and 5579 transitions. [2025-01-10 02:40:19,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2025-01-10 02:40:19,931 INFO L210 NwaCegarLoop]: Found error trace [2025-01-10 02:40:19,931 INFO L218 NwaCegarLoop]: trace histogram [12, 12, 12, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-01-10 02:40:19,931 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2025-01-10 02:40:19,931 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 19 more)] === [2025-01-10 02:40:19,932 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-01-10 02:40:19,932 INFO L85 PathProgramCache]: Analyzing trace with hash 1835927726, now seen corresponding path program 1 times [2025-01-10 02:40:19,932 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-01-10 02:40:19,932 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [699799086] [2025-01-10 02:40:19,932 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-01-10 02:40:19,934 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-01-10 02:40:20,128 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 115 statements into 1 equivalence classes. [2025-01-10 02:40:20,158 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 115 of 115 statements. [2025-01-10 02:40:20,158 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 02:40:20,158 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-01-10 02:40:20,387 INFO L134 CoverageAnalysis]: Checked inductivity of 267 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 264 trivial. 0 not checked. [2025-01-10 02:40:20,387 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-01-10 02:40:20,387 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [699799086] [2025-01-10 02:40:20,387 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [699799086] provided 1 perfect and 0 imperfect interpolant sequences [2025-01-10 02:40:20,387 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-01-10 02:40:20,388 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-01-10 02:40:20,388 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [46063652] [2025-01-10 02:40:20,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-01-10 02:40:20,388 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-01-10 02:40:20,388 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-01-10 02:40:20,388 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-01-10 02:40:20,389 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 02:40:20,389 INFO L87 Difference]: Start difference. First operand 3998 states and 5579 transitions. Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 3 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2025-01-10 02:40:24,410 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2025-01-10 02:40:24,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-01-10 02:40:24,757 INFO L93 Difference]: Finished difference Result 8860 states and 12376 transitions. [2025-01-10 02:40:24,757 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-01-10 02:40:24,757 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 3 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 115 [2025-01-10 02:40:24,758 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-01-10 02:40:24,788 INFO L225 Difference]: With dead ends: 8860 [2025-01-10 02:40:24,788 INFO L226 Difference]: Without dead ends: 4894 [2025-01-10 02:40:24,804 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-01-10 02:40:24,806 INFO L435 NwaCegarLoop]: 1505 mSDtfsCounter, 1193 mSDsluCounter, 1207 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 48 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1193 SdHoareTripleChecker+Valid, 2712 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2025-01-10 02:40:24,806 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [1193 Valid, 2712 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 76 Invalid, 1 Unknown, 0 Unchecked, 4.2s Time] [2025-01-10 02:40:24,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4894 states. [2025-01-10 02:40:24,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4894 to 4880. [2025-01-10 02:40:24,965 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4880 states, 3565 states have (on average 1.326227208976157) internal successors, (4728), 3594 states have internal predecessors, (4728), 1005 states have call successors, (1005), 292 states have call predecessors, (1005), 292 states have return successors, (1005), 1003 states have call predecessors, (1005), 1005 states have call successors, (1005) [2025-01-10 02:40:25,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4880 states to 4880 states and 6738 transitions. [2025-01-10 02:40:25,062 INFO L78 Accepts]: Start accepts. Automaton has 4880 states and 6738 transitions. Word has length 115 [2025-01-10 02:40:25,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-01-10 02:40:25,062 INFO L471 AbstractCegarLoop]: Abstraction has 4880 states and 6738 transitions. [2025-01-10 02:40:25,063 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 3 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2025-01-10 02:40:25,063 INFO L276 IsEmpty]: Start isEmpty. Operand 4880 states and 6738 transitions. [2025-01-10 02:40:25,066 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2025-01-10 02:40:25,066 INFO L210 NwaCegarLoop]: Found error trace [2025-01-10 02:40:25,066 INFO L218 NwaCegarLoop]: trace histogram [12, 12, 12, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-01-10 02:40:25,067 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2025-01-10 02:40:25,067 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 19 more)] === [2025-01-10 02:40:25,067 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-01-10 02:40:25,067 INFO L85 PathProgramCache]: Analyzing trace with hash 221190815, now seen corresponding path program 1 times [2025-01-10 02:40:25,067 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-01-10 02:40:25,068 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1913740984] [2025-01-10 02:40:25,068 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-01-10 02:40:25,068 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-01-10 02:40:25,333 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 117 statements into 1 equivalence classes. [2025-01-10 02:40:25,442 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 117 of 117 statements. [2025-01-10 02:40:25,442 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 02:40:25,442 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-01-10 02:40:25,442 INFO L348 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2025-01-10 02:40:25,463 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 117 statements into 1 equivalence classes. [2025-01-10 02:40:25,532 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 117 of 117 statements. [2025-01-10 02:40:25,532 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-01-10 02:40:25,532 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-01-10 02:40:25,619 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2025-01-10 02:40:25,619 INFO L340 BasicCegarLoop]: Counterexample is feasible [2025-01-10 02:40:25,620 INFO L782 garLoopResultBuilder]: Registering result UNSAFE for location atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 22 remaining) [2025-01-10 02:40:25,622 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_putErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_getErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_getErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location nla_lenErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location nla_lenErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_walkErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_walkErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_dump_classErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_dump_classErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 22 remaining) [2025-01-10 02:40:25,623 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 22 remaining) [2025-01-10 02:40:25,624 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 22 remaining) [2025-01-10 02:40:25,624 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 22 remaining) [2025-01-10 02:40:25,625 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 22 remaining) [2025-01-10 02:40:25,625 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 22 remaining) [2025-01-10 02:40:25,625 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 22 remaining) [2025-01-10 02:40:25,625 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 22 remaining) [2025-01-10 02:40:25,625 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 22 remaining) [2025-01-10 02:40:25,625 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2025-01-10 02:40:25,627 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1] [2025-01-10 02:40:25,728 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2025-01-10 02:40:25,730 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 02:40:25 BoogieIcfgContainer [2025-01-10 02:40:25,730 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2025-01-10 02:40:25,731 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2025-01-10 02:40:25,731 INFO L270 PluginConnector]: Initializing Witness Printer... [2025-01-10 02:40:25,731 INFO L274 PluginConnector]: Witness Printer initialized [2025-01-10 02:40:25,733 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 02:40:16" (3/4) ... [2025-01-10 02:40:25,733 INFO L140 WitnessPrinter]: Generating witness for reachability counterexample [2025-01-10 02:40:25,831 INFO L127 tionWitnessGenerator]: Generated YAML witness of length 51. [2025-01-10 02:40:25,897 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.graphml [2025-01-10 02:40:25,898 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.yml [2025-01-10 02:40:25,898 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2025-01-10 02:40:25,898 INFO L158 Benchmark]: Toolchain (without parser) took 18778.51ms. Allocated memory was 167.8MB in the beginning and 654.3MB in the end (delta: 486.5MB). Free memory was 119.5MB in the beginning and 231.0MB in the end (delta: -111.6MB). Peak memory consumption was 371.4MB. Max. memory is 16.1GB. [2025-01-10 02:40:25,902 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 201.3MB. Free memory is still 125.9MB. There was no memory consumed. Max. memory is 16.1GB. [2025-01-10 02:40:25,902 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1806.91ms. Allocated memory is still 167.8MB. Free memory was 119.5MB in the beginning and 79.5MB in the end (delta: 40.0MB). Peak memory consumption was 114.2MB. Max. memory is 16.1GB. [2025-01-10 02:40:25,902 INFO L158 Benchmark]: Boogie Procedure Inliner took 161.87ms. Allocated memory is still 167.8MB. Free memory was 79.5MB in the beginning and 64.3MB in the end (delta: 15.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2025-01-10 02:40:25,902 INFO L158 Benchmark]: Boogie Preprocessor took 339.24ms. Allocated memory is still 167.8MB. Free memory was 64.3MB in the beginning and 84.7MB in the end (delta: -20.4MB). Peak memory consumption was 40.9MB. Max. memory is 16.1GB. [2025-01-10 02:40:25,902 INFO L158 Benchmark]: RCFGBuilder took 7441.30ms. Allocated memory was 167.8MB in the beginning and 343.9MB in the end (delta: 176.2MB). Free memory was 84.7MB in the beginning and 100.5MB in the end (delta: -15.8MB). Peak memory consumption was 168.1MB. Max. memory is 16.1GB. [2025-01-10 02:40:25,902 INFO L158 Benchmark]: TraceAbstraction took 8851.50ms. Allocated memory was 343.9MB in the beginning and 654.3MB in the end (delta: 310.4MB). Free memory was 100.5MB in the beginning and 260.4MB in the end (delta: -159.9MB). Peak memory consumption was 148.9MB. Max. memory is 16.1GB. [2025-01-10 02:40:25,903 INFO L158 Benchmark]: Witness Printer took 166.79ms. Allocated memory is still 654.3MB. Free memory was 260.4MB in the beginning and 231.0MB in the end (delta: 29.4MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2025-01-10 02:40:25,904 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 201.3MB. Free memory is still 125.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1806.91ms. Allocated memory is still 167.8MB. Free memory was 119.5MB in the beginning and 79.5MB in the end (delta: 40.0MB). Peak memory consumption was 114.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 161.87ms. Allocated memory is still 167.8MB. Free memory was 79.5MB in the beginning and 64.3MB in the end (delta: 15.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 339.24ms. Allocated memory is still 167.8MB. Free memory was 64.3MB in the beginning and 84.7MB in the end (delta: -20.4MB). Peak memory consumption was 40.9MB. Max. memory is 16.1GB. * RCFGBuilder took 7441.30ms. Allocated memory was 167.8MB in the beginning and 343.9MB in the end (delta: 176.2MB). Free memory was 84.7MB in the beginning and 100.5MB in the end (delta: -15.8MB). Peak memory consumption was 168.1MB. Max. memory is 16.1GB. * TraceAbstraction took 8851.50ms. Allocated memory was 343.9MB in the beginning and 654.3MB in the end (delta: 310.4MB). Free memory was 100.5MB in the beginning and 260.4MB in the end (delta: -159.9MB). Peak memory consumption was 148.9MB. Max. memory is 16.1GB. * Witness Printer took 166.79ms. Allocated memory is still 654.3MB. Free memory was 260.4MB in the beginning and 231.0MB in the end (delta: 29.4MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 5960]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5960-5961] - GenericResultAtLocation [Line: 6015]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; addl %1,%0": "+m" (v->counter): "ir" (i)); [6015] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 6623]: integer overflow possible integer overflow possible We found a FailurePath: [L6128] struct sk_buff *atm_qdisc_ops_group1 ; [L6129] int LDV_IN_INTERRUPT = 1; [L6130] int ldv_state_variable_2 ; [L6131] int ref_cnt ; [L6132] int ldv_state_variable_1 ; [L6133] struct Qdisc *atm_qdisc_ops_group0 ; [L6134] int ldv_state_variable_0 ; [L6135] struct Qdisc *atm_class_ops_group0 ; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7791] int ldv_retval_0 ; [L7792] int ldv_retval_1 ; [L8379] int ldv_spin = 0; VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L7820] struct nlattr *ldvarg0 ; [L7821] void *tmp ; [L7822] struct qdisc_walker *ldvarg18 ; [L7823] void *tmp___0 ; [L7824] unsigned long ldvarg11 ; [L7825] unsigned long tmp___1 ; [L7826] u32 ldvarg20 ; [L7827] u32 tmp___2 ; [L7828] unsigned long ldvarg7 ; [L7829] unsigned long tmp___3 ; [L7830] u32 ldvarg3 ; [L7831] u32 tmp___4 ; [L7832] unsigned long ldvarg12 ; [L7833] unsigned long tmp___5 ; [L7834] struct nlattr **ldvarg1 ; [L7835] void *tmp___6 ; [L7836] u32 ldvarg8 ; [L7837] u32 tmp___7 ; [L7838] unsigned long ldvarg13 ; [L7839] unsigned long tmp___8 ; [L7840] struct gnet_dump *ldvarg10 ; [L7841] void *tmp___9 ; [L7842] unsigned long ldvarg9 ; [L7843] unsigned long tmp___10 ; [L7844] struct tcmsg *ldvarg5 ; [L7845] void *tmp___11 ; [L7846] struct sk_buff *ldvarg6 ; [L7847] void *tmp___12 ; [L7848] struct Qdisc **ldvarg15 ; [L7849] void *tmp___13 ; [L7850] struct Qdisc *ldvarg16 ; [L7851] void *tmp___14 ; [L7852] unsigned long ldvarg21 ; [L7853] unsigned long tmp___15 ; [L7854] unsigned long ldvarg17 ; [L7855] unsigned long tmp___16 ; [L7856] unsigned long *ldvarg4 ; [L7857] void *tmp___17 ; [L7858] unsigned long ldvarg14 ; [L7859] unsigned long tmp___18 ; [L7860] unsigned long ldvarg19 ; [L7861] unsigned long tmp___19 ; [L7862] u32 ldvarg2 ; [L7863] u32 tmp___20 ; [L7864] int tmp___21 ; [L7865] int tmp___22 ; [L7866] int tmp___23 ; [L7867] int tmp___24 ; VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L7869] CALL, EXPR ldv_zalloc(4UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=4, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=4] [L7869] RET, EXPR ldv_zalloc(4UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L7869] tmp = ldv_zalloc(4UL) [L7870] ldvarg0 = (struct nlattr *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, llc_oui_ip={172:0}, ref_cnt=0] [L7871] CALL, EXPR ldv_zalloc(24UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=24, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=24] [L7871] RET, EXPR ldv_zalloc(24UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, llc_oui_ip={172:0}, ref_cnt=0] [L7871] tmp___0 = ldv_zalloc(24UL) [L7872] ldvarg18 = (struct qdisc_walker *)tmp___0 [L7873] tmp___1 = __VERIFIER_nondet_ulong() [L7874] ldvarg11 = tmp___1 [L7875] tmp___2 = __VERIFIER_nondet_u32() [L7876] ldvarg20 = tmp___2 [L7877] tmp___3 = __VERIFIER_nondet_ulong() [L7878] ldvarg7 = tmp___3 [L7879] tmp___4 = __VERIFIER_nondet_u32() [L7880] ldvarg3 = tmp___4 [L7881] tmp___5 = __VERIFIER_nondet_ulong() [L7882] ldvarg12 = tmp___5 VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg11=526, ldvarg12=0, ldvarg18={0:0}, ldvarg20=453, ldvarg3=472, ldvarg7=498, llc_oui_ip={172:0}, ref_cnt=0] [L7883] CALL, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=8, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=8] [L7883] RET, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg11=526, ldvarg12=0, ldvarg18={0:0}, ldvarg20=453, ldvarg3=472, ldvarg7=498, llc_oui_ip={172:0}, ref_cnt=0] [L7883] tmp___6 = ldv_zalloc(8UL) [L7884] ldvarg1 = (struct nlattr **)tmp___6 [L7885] tmp___7 = __VERIFIER_nondet_u32() [L7886] ldvarg8 = tmp___7 [L7887] tmp___8 = __VERIFIER_nondet_ulong() [L7888] ldvarg13 = tmp___8 VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg3=472, ldvarg7=498, ldvarg8=486, llc_oui_ip={172:0}, ref_cnt=0] [L7889] CALL, EXPR ldv_zalloc(88UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=88, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=88] [L7889] RET, EXPR ldv_zalloc(88UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg3=472, ldvarg7=498, ldvarg8=486, llc_oui_ip={172:0}, ref_cnt=0] [L7889] tmp___9 = ldv_zalloc(88UL) [L7890] ldvarg10 = (struct gnet_dump *)tmp___9 [L7891] tmp___10 = __VERIFIER_nondet_ulong() [L7892] ldvarg9 = tmp___10 VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg3=472, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7893] CALL, EXPR ldv_zalloc(20UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=20, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=20] [L7893] RET, EXPR ldv_zalloc(20UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg3=472, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7893] tmp___11 = ldv_zalloc(20UL) [L7894] ldvarg5 = (struct tcmsg *)tmp___11 VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg3=472, ldvarg5={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7895] CALL, EXPR ldv_zalloc(232UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=232, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=232] [L7895] RET, EXPR ldv_zalloc(232UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg3=472, ldvarg5={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7895] tmp___12 = ldv_zalloc(232UL) [L7896] ldvarg6 = (struct sk_buff *)tmp___12 VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg3=472, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7897] CALL, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=8, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=8] [L7897] RET, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg3=472, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7897] tmp___13 = ldv_zalloc(8UL) [L7898] ldvarg15 = (struct Qdisc **)tmp___13 VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg15={0:0}, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg3=472, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7899] CALL, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=448, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=448] [L7899] RET, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg15={0:0}, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg3=472, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7899] tmp___14 = ldv_zalloc(448UL) [L7900] ldvarg16 = (struct Qdisc *)tmp___14 [L7901] tmp___15 = __VERIFIER_nondet_ulong() [L7902] ldvarg21 = tmp___15 [L7903] tmp___16 = __VERIFIER_nondet_ulong() [L7904] ldvarg17 = tmp___16 VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg3=472, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7905] CALL, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=8, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=8] [L7905] RET, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg3=472, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7905] tmp___17 = ldv_zalloc(8UL) [L7906] ldvarg4 = (unsigned long *)tmp___17 [L7907] tmp___18 = __VERIFIER_nondet_ulong() [L7908] ldvarg14 = tmp___18 [L7909] tmp___19 = __VERIFIER_nondet_ulong() [L7910] ldvarg19 = tmp___19 [L7911] tmp___20 = __VERIFIER_nondet_u32() [L7912] ldvarg2 = tmp___20 [L7913] FCALL ldv_initialize() [L7914] ldv_state_variable_1 = 0 [L7915] ref_cnt = 0 [L7916] ldv_state_variable_0 = 1 [L7917] ldv_state_variable_2 = 0 VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0] [L7919] tmp___21 = __VERIFIER_nondet_int() [L7921] case 0: [L8066] case 1: [L8068] tmp___23 = __VERIFIER_nondet_int() [L8070] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___21=1, tmp___23=1] [L8066] case 1: [L8078] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___21=1] [L8066] case 1: [L8080] CALL, EXPR atm_init() [L7778] int tmp ; [L7780] CALL, EXPR register_qdisc(& atm_qdisc_ops) [L8541] return __VERIFIER_nondet_int(); [L7780] RET, EXPR register_qdisc(& atm_qdisc_ops) [L7780] tmp = register_qdisc(& atm_qdisc_ops) [L7781] return (tmp); VAL [LDV_IN_INTERRUPT=1, \result=0, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L8080] RET, EXPR atm_init() [L8080] ldv_retval_1 = atm_init() [L8066] case 1: [L8082] ldv_state_variable_0 = 3 [L8083] ldv_state_variable_2 = 1 [L8084] CALL ldv_initialize_Qdisc_class_ops_2() [L7811] void *tmp ; VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7813] CALL, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=448, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0, size=448] [L7813] RET, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7813] tmp = ldv_zalloc(448UL) [L7814] atm_class_ops_group0 = (struct Qdisc *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L8084] RET ldv_initialize_Qdisc_class_ops_2() [L8085] ldv_state_variable_1 = 1 [L8086] CALL ldv_initialize_Qdisc_ops_1() [L7799] void *tmp ; [L7800] void *tmp___0 ; VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7802] CALL, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=448, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0, size=448] [L7802] RET, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7802] tmp = ldv_zalloc(448UL) [L7803] atm_qdisc_ops_group0 = (struct Qdisc *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7804] CALL, EXPR ldv_zalloc(232UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=232, \result={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0, size=232] [L7804] RET, EXPR ldv_zalloc(232UL) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7804] tmp___0 = ldv_zalloc(232UL) [L7805] atm_qdisc_ops_group1 = (struct sk_buff *)tmp___0 VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L8086] RET ldv_initialize_Qdisc_ops_1() [L8066] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___21=1] [L7919] tmp___21 = __VERIFIER_nondet_int() [L7921] case 0: [L8066] case 1: [L8104] case 2: [L8106] tmp___24 = __VERIFIER_nondet_int() [L8108] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8120] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8132] case 2: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8144] case 3: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8156] case 4: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8168] case 5: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8176] case 6: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8188] case 7: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=526, ldvarg12=0, ldvarg13=511, ldvarg14=497, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=519, ldvarg18={0:0}, ldvarg19=502, ldvarg1={0:0}, ldvarg20=453, ldvarg21=527, ldvarg2=514, ldvarg3=472, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=498, ldvarg8=486, ldvarg9=521, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8190] CALL atm_tc_put(atm_class_ops_group0, ldvarg12) VAL [LDV_IN_INTERRUPT=1, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6595] struct atm_qdisc_data *p ; [L6596] void *tmp ; [L6597] struct atm_flow_data *flow ; [L6598] struct _ddebug descriptor ; [L6599] long tmp___0 ; [L6600] struct _ddebug descriptor___0 ; [L6601] long tmp___1 ; [L6602] struct _ddebug descriptor___1 ; [L6603] long tmp___2 ; [L6604] struct _ddebug descriptor___2 ; [L6605] long tmp___3 ; [L6606] long tmp___4 ; VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, cl=0, descriptor={179:0}, descriptor___0={178:0}, descriptor___1={180:0}, descriptor___2={177:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0, sch={0:0}] [L6608] CALL, EXPR qdisc_priv(sch) VAL [LDV_IN_INTERRUPT=1, \old(q)={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6442] return ((void *)q + 448U); VAL [LDV_IN_INTERRUPT=1, \old(q)={0:0}, \result={0:448}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6608] RET, EXPR qdisc_priv(sch) VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, cl=0, descriptor={179:0}, descriptor___0={178:0}, descriptor___1={180:0}, descriptor___2={177:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0, sch={0:0}] [L6608] tmp = qdisc_priv(sch) [L6609] p = (struct atm_qdisc_data *)tmp [L6610] flow = (struct atm_flow_data *)cl [L6611] descriptor.modname = "sch_atm" [L6612] descriptor.function = "atm_tc_put" [L6613] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--net--X--defaultlinux-3.16-rc1.tar.xz--X--43_2a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/1382/dscv_tempdir/dscv/ri/43_2a/net/sched/sch_atm.o.c.prepared" [L6614] descriptor.format = "atm_tc_put(sch %p,[qdisc %p],flow %p)\n" [L6615] descriptor.lineno = 168U [L6616] descriptor.flags = 0U [L6617] EXPR descriptor.flags VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, descriptor={179:0}, descriptor___0={178:0}, descriptor___1={180:0}, descriptor___2={177:0}, flow={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, p={0:448}, ref_cnt=0, sch={0:0}] [L6617] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [LDV_IN_INTERRUPT=1, \old(c)=0, \old(exp)=0, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6118] return (exp); VAL [LDV_IN_INTERRUPT=1, \old(c)=0, \old(exp)=0, \result=0, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6617] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, descriptor={179:0}, descriptor___0={178:0}, descriptor___1={180:0}, descriptor___2={177:0}, flow={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, p={0:448}, ref_cnt=0, sch={0:0}] [L6617] tmp___0 = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L6618] COND FALSE !(tmp___0 != 0L) VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, descriptor={179:0}, descriptor___0={178:0}, descriptor___1={180:0}, descriptor___2={177:0}, flow={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, p={0:448}, ref_cnt=0, sch={0:0}] [L6623] EXPR flow->ref VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, descriptor={179:0}, descriptor___0={178:0}, descriptor___1={180:0}, descriptor___2={177:0}, flow={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, p={0:448}, ref_cnt=0, sch={0:0}] [L6623] flow->ref - 1 VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={522:499}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, descriptor={179:0}, descriptor___0={178:0}, descriptor___1={180:0}, descriptor___2={177:0}, flow={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, p={0:448}, ref_cnt=0, sch={0:0}] - UnprovableResult [Line: 6891]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6891]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6623]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6567]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6567]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6242]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6242]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7080]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7080]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6295]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6295]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7929]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7929]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7935]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7935]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8055]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8055]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8172]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8172]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8252]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8252]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 71 procedures, 1055 locations, 22 error locations. Started 1 CEGAR loops. OverallTime: 8.7s, OverallIterations: 5, TraceHistogramMax: 12, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1 mSolverCounterUnknown, 4002 SdHoareTripleChecker+Valid, 4.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4002 mSDsluCounter, 10846 SdHoareTripleChecker+Invalid, 4.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4935 mSDsCounter, 62 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 252 IncrementalHoareTripleChecker+Invalid, 315 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 62 mSolverCounterUnsat, 5911 mSDtfsCounter, 252 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 11 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4880occurred in iteration=4, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 4 MinimizatonAttempts, 46 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 485 NumberOfCodeBlocks, 485 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 364 ConstructedInterpolants, 0 QuantifiedInterpolants, 490 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 821/821 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2025-01-10 02:40:25,961 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE(OVERFLOW)