./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 48c9605d Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f78e25bf76e2d1d395e5e41868c5ddb628a36f1efdf095bb509ea6a3a366617b --- Real Ultimate output --- This is Ultimate 0.3.0-?-48c9605-m [2025-02-08 02:49:44,324 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-02-08 02:49:44,359 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2025-02-08 02:49:44,363 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-02-08 02:49:44,363 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-02-08 02:49:44,377 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-02-08 02:49:44,378 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-02-08 02:49:44,378 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-02-08 02:49:44,378 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-02-08 02:49:44,378 INFO L153 SettingsManager]: * Use memory slicer=true [2025-02-08 02:49:44,378 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-02-08 02:49:44,379 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-02-08 02:49:44,379 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-02-08 02:49:44,379 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-02-08 02:49:44,379 INFO L153 SettingsManager]: * Use SBE=true [2025-02-08 02:49:44,379 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-02-08 02:49:44,379 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-02-08 02:49:44,379 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-02-08 02:49:44,379 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Use constant arrays=true [2025-02-08 02:49:44,380 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:49:44,380 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-02-08 02:49:44,380 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-02-08 02:49:44,381 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-02-08 02:49:44,381 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-02-08 02:49:44,381 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-02-08 02:49:44,381 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f78e25bf76e2d1d395e5e41868c5ddb628a36f1efdf095bb509ea6a3a366617b [2025-02-08 02:49:44,596 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-02-08 02:49:44,605 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-02-08 02:49:44,607 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-02-08 02:49:44,608 INFO L270 PluginConnector]: Initializing CDTParser... [2025-02-08 02:49:44,608 INFO L274 PluginConnector]: CDTParser initialized [2025-02-08 02:49:44,609 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i [2025-02-08 02:49:45,793 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/7f2ecb230/99287144bd4e43eea3ed689b0c7b884c/FLAG8a545ca2e [2025-02-08 02:49:46,254 INFO L384 CDTParser]: Found 1 translation units. [2025-02-08 02:49:46,254 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i [2025-02-08 02:49:46,309 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/7f2ecb230/99287144bd4e43eea3ed689b0c7b884c/FLAG8a545ca2e [2025-02-08 02:49:46,368 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/7f2ecb230/99287144bd4e43eea3ed689b0c7b884c [2025-02-08 02:49:46,370 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-02-08 02:49:46,372 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-02-08 02:49:46,374 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-02-08 02:49:46,374 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-02-08 02:49:46,378 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-02-08 02:49:46,379 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:49:46" (1/1) ... [2025-02-08 02:49:46,381 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@293cc13c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:46, skipping insertion in model container [2025-02-08 02:49:46,381 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:49:46" (1/1) ... [2025-02-08 02:49:46,469 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-02-08 02:49:47,275 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i[162928,162941] [2025-02-08 02:49:47,617 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:49:47,629 INFO L200 MainTranslator]: Completed pre-run [2025-02-08 02:49:47,745 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [5282] [2025-02-08 02:49:47,746 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; btr %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr)); [5289] [2025-02-08 02:49:47,746 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5297-5298] [2025-02-08 02:49:47,747 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; btr %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5306-5307] [2025-02-08 02:49:47,748 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [5320] [2025-02-08 02:49:47,749 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [5383] [2025-02-08 02:49:47,750 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; decl %0; sete %1": "+m" (v->counter), "=qm" (c): : "memory"); [5391-5392] [2025-02-08 02:49:47,758 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i[162928,162941] [2025-02-08 02:49:47,769 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5963] [2025-02-08 02:49:47,770 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5966] [2025-02-08 02:49:47,770 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5969] [2025-02-08 02:49:47,770 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5972] [2025-02-08 02:49:47,770 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5975] [2025-02-08 02:49:47,771 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5991-5992] [2025-02-08 02:49:47,771 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5995-5996] [2025-02-08 02:49:47,771 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5999-6000] [2025-02-08 02:49:47,771 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [6003-6004] [2025-02-08 02:49:47,771 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [6007-6008] [2025-02-08 02:49:47,772 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6031-6032] [2025-02-08 02:49:47,772 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6035-6036] [2025-02-08 02:49:47,772 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6039-6040] [2025-02-08 02:49:47,772 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6043-6044] [2025-02-08 02:49:47,772 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6047-6048] [2025-02-08 02:49:47,776 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6176] [2025-02-08 02:49:47,776 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6179] [2025-02-08 02:49:47,776 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6182] [2025-02-08 02:49:47,776 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6185] [2025-02-08 02:49:47,776 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6188] [2025-02-08 02:49:47,777 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu), "=r" (__val_gu): "0" (p), "i" (4UL)); [6200-6201] [2025-02-08 02:49:47,778 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6218-6219] [2025-02-08 02:49:47,778 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6222-6223] [2025-02-08 02:49:47,778 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6226-6227] [2025-02-08 02:49:47,778 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6230-6231] [2025-02-08 02:49:47,778 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6234-6235] [2025-02-08 02:49:47,778 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___0), "=r" (__val_gu___0): "0" ((u32 *)argp), "i" (4UL)); [6247-6248] [2025-02-08 02:49:47,779 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6261-6262] [2025-02-08 02:49:47,779 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6265-6266] [2025-02-08 02:49:47,779 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6269-6270] [2025-02-08 02:49:47,779 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6273-6274] [2025-02-08 02:49:47,779 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6277-6278] [2025-02-08 02:49:47,779 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___1), "=r" (__val_gu___1): "0" ((u32 *)argp), "i" (4UL)); [6290-6291] [2025-02-08 02:49:47,783 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6328-6329] [2025-02-08 02:49:47,783 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6332-6333] [2025-02-08 02:49:47,783 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6336-6337] [2025-02-08 02:49:47,783 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6340-6341] [2025-02-08 02:49:47,783 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6344-6345] [2025-02-08 02:49:47,783 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___2), "=r" (__val_gu___2): "0" (p), "i" (4UL)); [6357-6358] [2025-02-08 02:49:47,892 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:49:47,943 INFO L204 MainTranslator]: Completed translation [2025-02-08 02:49:47,944 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47 WrapperNode [2025-02-08 02:49:47,945 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-02-08 02:49:47,945 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-02-08 02:49:47,946 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-02-08 02:49:47,946 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-02-08 02:49:47,950 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:47,995 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,110 INFO L138 Inliner]: procedures = 180, calls = 596, calls flagged for inlining = 99, calls inlined = 93, statements flattened = 2725 [2025-02-08 02:49:48,110 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-02-08 02:49:48,111 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-02-08 02:49:48,111 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-02-08 02:49:48,111 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-02-08 02:49:48,118 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,118 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,136 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,334 INFO L175 MemorySlicer]: Split 317 memory accesses to 7 slices as follows [2, 229, 20, 13, 28, 24, 1]. 72 percent of accesses are in the largest equivalence class. The 23 initializations are split as follows [2, 6, 15, 0, 0, 0, 0]. The 152 writes are split as follows [0, 100, 2, 13, 13, 24, 0]. [2025-02-08 02:49:48,334 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,334 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,381 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,386 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,393 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,400 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,413 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-02-08 02:49:48,414 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-02-08 02:49:48,414 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-02-08 02:49:48,414 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-02-08 02:49:48,414 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:47" (1/1) ... [2025-02-08 02:49:48,418 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:49:48,426 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-02-08 02:49:48,437 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-02-08 02:49:48,443 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-02-08 02:49:48,455 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2025-02-08 02:49:48,456 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2025-02-08 02:49:48,456 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#0 [2025-02-08 02:49:48,456 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#1 [2025-02-08 02:49:48,456 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#2 [2025-02-08 02:49:48,456 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#3 [2025-02-08 02:49:48,456 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#4 [2025-02-08 02:49:48,456 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#5 [2025-02-08 02:49:48,456 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#6 [2025-02-08 02:49:48,456 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_async_push [2025-02-08 02:49:48,456 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_async_push [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reserve [2025-02-08 02:49:48,457 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reserve [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#0 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#1 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#2 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#3 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#4 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#5 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#6 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#4 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#5 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#6 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2025-02-08 02:49:48,457 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#6 [2025-02-08 02:49:48,457 INFO L130 BoogieDeclarations]: Found specification of procedure crc_ccitt_byte [2025-02-08 02:49:48,457 INFO L138 BoogieDeclarations]: Found implementation of procedure crc_ccitt_byte [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure ap_put [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure ap_put [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_output_wakeup [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_output_wakeup [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#0 [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#1 [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#2 [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#3 [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#4 [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#5 [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#6 [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#0 [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#1 [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#2 [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#3 [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#4 [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#5 [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#6 [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_asynctty_hangup [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_asynctty_hangup [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure constant_test_bit [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure constant_test_bit [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure get_unaligned_be16 [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure get_unaligned_be16 [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2025-02-08 02:49:48,458 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2025-02-08 02:49:48,458 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2025-02-08 02:49:48,459 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#6 [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2025-02-08 02:49:48,459 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2025-02-08 02:49:48,459 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure clear_bit [2025-02-08 02:49:48,459 INFO L138 BoogieDeclarations]: Found implementation of procedure clear_bit [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2025-02-08 02:49:48,459 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2025-02-08 02:49:48,459 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_asynctty_close [2025-02-08 02:49:48,460 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_asynctty_close [2025-02-08 02:49:48,460 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-02-08 02:49:48,460 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_asynctty_poll [2025-02-08 02:49:48,460 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_asynctty_poll [2025-02-08 02:49:48,460 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_set_bit [2025-02-08 02:49:48,460 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_set_bit [2025-02-08 02:49:48,460 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2025-02-08 02:49:48,460 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2025-02-08 02:49:48,460 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-02-08 02:49:48,460 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2025-02-08 02:49:48,461 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_to_user [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure ap_get [2025-02-08 02:49:48,461 INFO L138 BoogieDeclarations]: Found implementation of procedure ap_get [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure tasklet_schedule [2025-02-08 02:49:48,461 INFO L138 BoogieDeclarations]: Found implementation of procedure tasklet_schedule [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2025-02-08 02:49:48,461 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2025-02-08 02:49:48,462 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec_and_test [2025-02-08 02:49:48,462 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec_and_test [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#0 [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#1 [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#2 [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#3 [2025-02-08 02:49:48,462 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#4 [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#5 [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#6 [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2025-02-08 02:49:48,463 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2025-02-08 02:49:48,463 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure set_bit [2025-02-08 02:49:48,463 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bit [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure async_lcp_peek [2025-02-08 02:49:48,463 INFO L138 BoogieDeclarations]: Found implementation of procedure async_lcp_peek [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-02-08 02:49:48,463 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_bh [2025-02-08 02:49:48,463 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_bh [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#0 [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#1 [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#2 [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#3 [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#4 [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#5 [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#6 [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2025-02-08 02:49:48,464 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_from_user [2025-02-08 02:49:48,464 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_from_user [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-02-08 02:49:48,464 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_asynctty_ioctl [2025-02-08 02:49:48,464 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_asynctty_ioctl [2025-02-08 02:49:48,464 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_bh [2025-02-08 02:49:48,464 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_bh [2025-02-08 02:49:48,814 INFO L257 CfgBuilder]: Building ICFG [2025-02-08 02:49:48,817 INFO L287 CfgBuilder]: Building CFG for each procedure with an implementation [2025-02-08 02:49:49,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6526: assume ppp_async_encode_~i~0#1 < ppp_async_encode_~count~0#1 && (ppp_async_encode_~buf~0#1.base + ppp_async_encode_~buf~0#1.offset) % 18446744073709551616 < (ppp_async_encode_~buflim~0#1.base + ppp_async_encode_~buflim~0#1.offset) % 18446744073709551616; [2025-02-08 02:49:49,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6526: assume !(ppp_async_encode_~i~0#1 < ppp_async_encode_~count~0#1 && (ppp_async_encode_~buf~0#1.base + ppp_async_encode_~buf~0#1.offset) % 18446744073709551616 < (ppp_async_encode_~buflim~0#1.base + ppp_async_encode_~buflim~0#1.offset) % 18446744073709551616); [2025-02-08 02:49:49,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6551: ppp_async_encode_~c~3#1 := ppp_async_encode_~fcs~0#1 / 256 % 256;ppp_async_encode_#t~short231#1 := 0 != ppp_async_encode_~islcp~0#1 && ppp_async_encode_~c~3#1 <= 31; [2025-02-08 02:49:49,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6568: havoc ldv_consume_skb_15_~ldv_func_arg1#1.base, ldv_consume_skb_15_~ldv_func_arg1#1.offset;havoc ldv_consume_skb_15_#in~ldv_func_arg1#1.base, ldv_consume_skb_15_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_consume_skb_15 } true;havoc ppp_async_encode_#t~mem233#1.base, ppp_async_encode_#t~mem233#1.offset;call write~$Pointer$#1(0, 0, ppp_async_encode_~ap#1.base, 212 + ppp_async_encode_~ap#1.offset, 8);ppp_async_encode_#res#1 := 1; [2025-02-08 02:49:49,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7394: SUMMARY for call ldv_skb_free(ldv_kfree_skb_16_~ldv_func_arg1#1.base, ldv_kfree_skb_16_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:49:49,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6659-1: SUMMARY for call spin_unlock_bh(~ap#1.base, 24 + ~ap#1.offset); srcloc: null [2025-02-08 02:49:49,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6659: #res#1 := ~done~0#1; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-2: [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519-1: [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-1: ppp_async_encode_#t~short231#1 := 0 != ppp_async_encode_#t~bitwise230#1 % 4294967296; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519: call write~int#1(ppp_async_encode_#t~bitwise222#1, ppp_async_encode_~tmp___12~0#1.base, ppp_async_encode_~tmp___12~0#1.offset, 1);havoc ppp_async_encode_#t~bitwise222#1; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552: assume ppp_async_encode_#t~short231#1;havoc ppp_async_encode_#t~mem229#1;havoc ppp_async_encode_#t~bitwise228#1;havoc ppp_async_encode_#t~bitwise230#1;havoc ppp_async_encode_#t~short231#1;ppp_async_encode_~tmp___17~0#1.base, ppp_async_encode_~tmp___17~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, 1 + ppp_async_encode_~buf~0#1.offset;call write~int#1(125, ppp_async_encode_~tmp___17~0#1.base, ppp_async_encode_~tmp___17~0#1.offset, 1);ppp_async_encode_~tmp___18~0#1.base, ppp_async_encode_~tmp___18~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, 1 + ppp_async_encode_~buf~0#1.offset; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552: assume !ppp_async_encode_#t~short231#1;havoc ppp_async_encode_#t~mem229#1;havoc ppp_async_encode_#t~bitwise228#1;havoc ppp_async_encode_#t~bitwise230#1;havoc ppp_async_encode_#t~short231#1;ppp_async_encode_~tmp___19~0#1.base, ppp_async_encode_~tmp___19~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, 1 + ppp_async_encode_~buf~0#1.offset;call write~int#1(ppp_async_encode_~c~3#1, ppp_async_encode_~tmp___19~0#1.base, ppp_async_encode_~tmp___19~0#1.offset, 1); [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-6: [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519-5: assume 0 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256);ppp_async_encode_#t~bitwise222#1 := 32; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519-5: assume !(0 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256)); [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-5: assume 0 == ppp_async_encode_#t~mem229#1 % 4294967296 || 0 == ppp_async_encode_#t~bitwise228#1 % 4294967296;ppp_async_encode_#t~bitwise230#1 := 0; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-5: assume !(0 == ppp_async_encode_#t~mem229#1 % 4294967296 || 0 == ppp_async_encode_#t~bitwise228#1 % 4294967296); [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519-4: assume false;ppp_async_encode_#t~bitwise222#1 := (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256); [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519-4: assume !false; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-4: assume ppp_async_encode_#t~mem229#1 % 4294967296 == ppp_async_encode_#t~bitwise228#1 % 4294967296;ppp_async_encode_#t~bitwise230#1 := ppp_async_encode_#t~mem229#1; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-4: assume !(ppp_async_encode_#t~mem229#1 % 4294967296 == ppp_async_encode_#t~bitwise228#1 % 4294967296); [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519-3: assume 32 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256);ppp_async_encode_#t~bitwise222#1 := 0; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519-3: assume !(32 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256)); [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-3: havoc ppp_async_encode_#t~bitwise230#1;assume ppp_async_encode_#t~bitwise230#1 % 4294967296 <= ppp_async_encode_#t~mem229#1 % 4294967296 && ppp_async_encode_#t~bitwise230#1 % 4294967296 <= ppp_async_encode_#t~bitwise228#1 % 4294967296; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519-2: havoc ppp_async_encode_#t~bitwise222#1;assume (((((if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256) < 0 || ppp_async_encode_#t~bitwise222#1 > 0) && ((if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256) >= 0 || ppp_async_encode_#t~bitwise222#1 < 0)) && ((if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256) < 0 || ppp_async_encode_#t~bitwise222#1 <= 32 + (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256))) && ppp_async_encode_#t~bitwise222#1 >= -2147483648) && ppp_async_encode_#t~bitwise222#1 <= 2147483647; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6511-1: SUMMARY for call ppp_async_encode_#t~ret217#1 := crc_ccitt_byte((if ppp_async_encode_~fcs~0#1 % 65536 % 4294967296 <= 2147483647 then ppp_async_encode_~fcs~0#1 % 65536 % 4294967296 else ppp_async_encode_~fcs~0#1 % 65536 % 4294967296 - 4294967296), (if ppp_async_encode_~c~3#1 % 256 % 4294967296 <= 2147483647 then ppp_async_encode_~c~3#1 % 256 % 4294967296 else ppp_async_encode_~c~3#1 % 256 % 4294967296 - 4294967296)); srcloc: null [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-9: assume ppp_async_encode_#t~short231#1; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-9: assume !ppp_async_encode_#t~short231#1;call ppp_async_encode_#t~mem229#1 := read~int#1(ppp_async_encode_~ap#1.base, 168 + ppp_async_encode_~ap#1.offset + 4 * (ppp_async_encode_~c~3#1 / 32), 4); [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6511: ppp_async_encode_~tmp___10~0#1 := ppp_async_encode_#t~ret217#1;havoc ppp_async_encode_#t~ret217#1;ppp_async_encode_~fcs~0#1 := (if ppp_async_encode_~tmp___10~0#1 % 65536 % 4294967296 <= 2147483647 then ppp_async_encode_~tmp___10~0#1 % 65536 % 4294967296 else ppp_async_encode_~tmp___10~0#1 % 65536 % 4294967296 - 4294967296);ppp_async_encode_#t~short221#1 := 0 != ppp_async_encode_~islcp~0#1 && ppp_async_encode_~c~3#1 <= 31; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-8: assume 0 == ppp_async_encode_~c~3#1 % 32;ppp_async_encode_#t~bitwise228#1 := 1; [2025-02-08 02:49:49,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-8: assume !(0 == ppp_async_encode_~c~3#1 % 32); [2025-02-08 02:49:49,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-7: havoc ppp_async_encode_#t~bitwise228#1;assume ppp_async_encode_#t~bitwise228#1 > 1; [2025-02-08 02:49:49,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7387: SUMMARY for call ldv_skb_free(ldv_consume_skb_15_~ldv_func_arg1#1.base, ldv_consume_skb_15_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:49:49,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6545-3: assume 32 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256);ppp_async_encode_#t~bitwise227#1 := 0; [2025-02-08 02:49:49,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6545-3: assume !(32 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256)); [2025-02-08 02:49:49,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6545-2: havoc ppp_async_encode_#t~bitwise227#1;assume (((((if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256) < 0 || ppp_async_encode_#t~bitwise227#1 > 0) && ((if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256) >= 0 || ppp_async_encode_#t~bitwise227#1 < 0)) && ((if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256) < 0 || ppp_async_encode_#t~bitwise227#1 <= 32 + (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256))) && ppp_async_encode_#t~bitwise227#1 >= -2147483648) && ppp_async_encode_#t~bitwise227#1 <= 2147483647; [2025-02-08 02:49:49,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6545-1: [2025-02-08 02:49:49,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6545: call write~int#1(ppp_async_encode_#t~bitwise227#1, ppp_async_encode_~tmp___15~0#1.base, ppp_async_encode_~tmp___15~0#1.offset, 1);havoc ppp_async_encode_#t~bitwise227#1; [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6636: #t~ret260#1 := ppp_async_encode_#res#1;havoc ppp_async_encode_#t~mem193#1, ppp_async_encode_#t~mem194#1.base, ppp_async_encode_#t~mem194#1.offset, ppp_async_encode_#t~mem195#1.base, ppp_async_encode_#t~mem195#1.offset, ppp_async_encode_#t~mem196#1.base, ppp_async_encode_#t~mem196#1.offset, ppp_async_encode_#t~mem197#1, ppp_async_encode_#t~mem198#1, ppp_async_encode_#t~ret199#1, ppp_async_encode_#t~mem200#1, ppp_async_encode_#t~short201#1, ppp_async_encode_#t~mem202#1, ppp_async_encode_#t~short203#1, ppp_async_encode_#t~mem204#1, ppp_async_encode_#t~short205#1, ppp_async_encode_#t~mem206#1, ppp_async_encode_#t~bitwise207#1, ppp_async_encode_#t~mem208#1, ppp_async_encode_#t~ret209#1, ppp_async_encode_#t~mem210#1, ppp_async_encode_#t~bitwise211#1, ppp_async_encode_#t~short212#1, ppp_async_encode_#t~ret213#1, ppp_async_encode_#t~mem214#1, ppp_async_encode_#t~mem215#1, ppp_async_encode_#t~short216#1, ppp_async_encode_#t~ret217#1, ppp_async_encode_#t~mem219#1, ppp_async_encode_#t~bitwise218#1, ppp_async_encode_#t~bitwise220#1, ppp_async_encode_#t~short221#1, ppp_async_encode_#t~bitwise222#1, ppp_async_encode_#t~mem224#1, ppp_async_encode_#t~bitwise223#1, ppp_async_encode_#t~bitwise225#1, ppp_async_encode_#t~short226#1, ppp_async_encode_#t~bitwise227#1, ppp_async_encode_#t~mem229#1, ppp_async_encode_#t~bitwise228#1, ppp_async_encode_#t~bitwise230#1, ppp_async_encode_#t~short231#1, ppp_async_encode_#t~bitwise232#1, ppp_async_encode_#t~mem233#1.base, ppp_async_encode_#t~mem233#1.offset, ppp_async_encode_~ap#1.base, ppp_async_encode_~ap#1.offset, ppp_async_encode_~fcs~0#1, ppp_async_encode_~i~0#1, ppp_async_encode_~count~0#1, ppp_async_encode_~c~3#1, ppp_async_encode_~proto~0#1, ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset, ppp_async_encode_~buflim~0#1.base, ppp_async_encode_~buflim~0#1.offset, ppp_async_encode_~data~0#1.base, ppp_async_encode_~data~0#1.offset, ppp_async_encode_~islcp~0#1, ppp_async_encode_~tmp~26#1, ppp_async_encode_~tmp___0~8#1.base, ppp_async_encode_~tmp___0~8#1.offset, ppp_async_encode_~tmp___1~3#1.base, ppp_async_encode_~tmp___1~3#1.offset, ppp_async_encode_~tmp___2~1#1.base, ppp_async_encode_~tmp___2~1#1.offset, ppp_async_encode_~tmp___3~0#1.base, ppp_async_encode_~tmp___3~0#1.offset, ppp_async_encode_~tmp___4~0#1, ppp_async_encode_~tmp___5~0#1.base, ppp_async_encode_~tmp___5~0#1.offset, ppp_async_encode_~tmp___6~0#1.base, ppp_async_encode_~tmp___6~0#1.offset, ppp_async_encode_~tmp___7~0#1.base, ppp_async_encode_~tmp___7~0#1.offset, ppp_async_encode_~tmp___8~0#1, ppp_async_encode_~tmp___9~0#1, ppp_async_encode_~tmp___10~0#1, ppp_async_encode_~tmp___11~0#1.base, ppp_async_encode_~tmp___11~0#1.offset, ppp_async_encode_~tmp___12~0#1.base, ppp_async_encode_~tmp___12~0#1.offset, ppp_async_encode_~tmp___13~0#1.base, ppp_async_encode_~tmp___13~0#1.offset, ppp_async_encode_~tmp___14~0#1.base, ppp_async_encode_~tmp___14~0#1.offset, ppp_async_encode_~tmp___15~0#1.base, ppp_async_encode_~tmp___15~0#1.offset, ppp_async_encode_~tmp___16~0#1.base, ppp_async_encode_~tmp___16~0#1.offset, ppp_async_encode_~tmp___17~0#1.base, ppp_async_encode_~tmp___17~0#1.offset, ppp_async_encode_~tmp___18~0#1.base, ppp_async_encode_~tmp___18~0#1.offset, ppp_async_encode_~tmp___19~0#1.base, ppp_async_encode_~tmp___19~0#1.offset, ppp_async_encode_~tmp___20~0#1.base, ppp_async_encode_~tmp___20~0#1.offset;havoc ppp_async_encode_#in~ap#1.base, ppp_async_encode_#in~ap#1.offset;assume { :end_inline_ppp_async_encode } true;assume -2147483648 <= #t~ret260#1 && #t~ret260#1 <= 2147483647;~tmp___1~4#1 := #t~ret260#1;havoc #t~ret260#1; [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6545-5: assume 0 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256);ppp_async_encode_#t~bitwise227#1 := 32; [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6545-5: assume !(0 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256)); [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6545-4: assume false;ppp_async_encode_#t~bitwise227#1 := (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256); [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6545-4: assume !false; [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6504: ppp_async_encode_~tmp___9~0#1 := ppp_async_encode_~i~0#1;ppp_async_encode_~i~0#1 := 1 + ppp_async_encode_~i~0#1;call ppp_async_encode_#t~mem214#1 := read~int#1(ppp_async_encode_~data~0#1.base, ppp_async_encode_~data~0#1.offset + (if ppp_async_encode_~tmp___9~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ppp_async_encode_~tmp___9~0#1 % 18446744073709551616 % 18446744073709551616 else ppp_async_encode_~tmp___9~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 1);ppp_async_encode_~c~3#1 := (if ppp_async_encode_#t~mem214#1 % 256 % 4294967296 <= 2147483647 then ppp_async_encode_#t~mem214#1 % 256 % 4294967296 else ppp_async_encode_#t~mem214#1 % 256 % 4294967296 - 4294967296);havoc ppp_async_encode_#t~mem214#1;ppp_async_encode_#t~short216#1 := 1 == ppp_async_encode_~i~0#1 && 0 == ppp_async_encode_~c~3#1; [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6670: call #t~mem268#1.base, #t~mem268#1.offset := read~$Pointer$#1(~ap#1.base, 234 + ~ap#1.offset, 8);call write~$Pointer$#1(#t~mem268#1.base, #t~mem268#1.offset, ~ap#1.base, 226 + ~ap#1.offset, 8);havoc #t~mem268#1.base, #t~mem268#1.offset; [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-3: havoc ppp_async_encode_#t~bitwise220#1;assume ppp_async_encode_#t~bitwise220#1 % 4294967296 <= ppp_async_encode_#t~mem219#1 % 4294967296 && ppp_async_encode_#t~bitwise220#1 % 4294967296 <= ppp_async_encode_#t~bitwise218#1 % 4294967296; [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-2: [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-1: ppp_async_encode_#t~short221#1 := 0 != ppp_async_encode_#t~bitwise220#1 % 4294967296; [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513: assume ppp_async_encode_#t~short221#1;havoc ppp_async_encode_#t~mem219#1;havoc ppp_async_encode_#t~bitwise218#1;havoc ppp_async_encode_#t~bitwise220#1;havoc ppp_async_encode_#t~short221#1;ppp_async_encode_~tmp___11~0#1.base, ppp_async_encode_~tmp___11~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, 1 + ppp_async_encode_~buf~0#1.offset;call write~int#1(125, ppp_async_encode_~tmp___11~0#1.base, ppp_async_encode_~tmp___11~0#1.offset, 1);ppp_async_encode_~tmp___12~0#1.base, ppp_async_encode_~tmp___12~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, 1 + ppp_async_encode_~buf~0#1.offset; [2025-02-08 02:49:49,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513: assume !ppp_async_encode_#t~short221#1;havoc ppp_async_encode_#t~mem219#1;havoc ppp_async_encode_#t~bitwise218#1;havoc ppp_async_encode_#t~bitwise220#1;havoc ppp_async_encode_#t~short221#1;ppp_async_encode_~tmp___13~0#1.base, ppp_async_encode_~tmp___13~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, 1 + ppp_async_encode_~buf~0#1.offset;call write~int#1(ppp_async_encode_~c~3#1, ppp_async_encode_~tmp___13~0#1.base, ppp_async_encode_~tmp___13~0#1.offset, 1); [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-7: havoc ppp_async_encode_#t~bitwise218#1;assume ppp_async_encode_#t~bitwise218#1 > 1; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-6: [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-5: assume 0 == ppp_async_encode_#t~mem219#1 % 4294967296 || 0 == ppp_async_encode_#t~bitwise218#1 % 4294967296;ppp_async_encode_#t~bitwise220#1 := 0; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-5: assume !(0 == ppp_async_encode_#t~mem219#1 % 4294967296 || 0 == ppp_async_encode_#t~bitwise218#1 % 4294967296); [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6637: assume 0 != ~tmp___1~4#1; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6637: assume !(0 != ~tmp___1~4#1); [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-4: assume ppp_async_encode_#t~mem219#1 % 4294967296 == ppp_async_encode_#t~bitwise218#1 % 4294967296;ppp_async_encode_#t~bitwise220#1 := ppp_async_encode_#t~mem219#1; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-4: assume !(ppp_async_encode_#t~mem219#1 % 4294967296 == ppp_async_encode_#t~bitwise218#1 % 4294967296); [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6662: call #t~mem266#1.base, #t~mem266#1.offset := read~$Pointer$#1(~ap#1.base, 212 + ~ap#1.offset, 8); [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-9: assume ppp_async_encode_#t~short221#1; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-9: assume !ppp_async_encode_#t~short221#1;call ppp_async_encode_#t~mem219#1 := read~int#1(ppp_async_encode_~ap#1.base, 168 + ppp_async_encode_~ap#1.offset + 4 * (ppp_async_encode_~c~3#1 / 32), 4); [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-8: assume 0 == ppp_async_encode_~c~3#1 % 32;ppp_async_encode_#t~bitwise218#1 := 1; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-8: assume !(0 == ppp_async_encode_~c~3#1 % 32); [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6530: assume ppp_async_encode_~i~0#1 < ppp_async_encode_~count~0#1;call write~$Pointer$#1(ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset, ppp_async_encode_~ap#1.base, 234 + ppp_async_encode_~ap#1.offset, 8);call write~int#1(ppp_async_encode_~i~0#1, ppp_async_encode_~ap#1.base, 220 + ppp_async_encode_~ap#1.offset, 4);call write~int#1(ppp_async_encode_~fcs~0#1, ppp_async_encode_~ap#1.base, 224 + ppp_async_encode_~ap#1.offset, 2);ppp_async_encode_#res#1 := 0; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6530: assume !(ppp_async_encode_~i~0#1 < ppp_async_encode_~count~0#1);ppp_async_encode_~fcs~0#1 := -1 - ppp_async_encode_~fcs~0#1;ppp_async_encode_~c~3#1 := ppp_async_encode_~fcs~0#1 % 256;ppp_async_encode_#t~short226#1 := 0 != ppp_async_encode_~islcp~0#1 && ppp_async_encode_~c~3#1 <= 31; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6662-1: SUMMARY for call clear_bit(2, ~ap#1.base, 160 + ~ap#1.offset); srcloc: null [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6671-1: SUMMARY for call spin_unlock_bh(~ap#1.base, 24 + ~ap#1.offset); srcloc: null [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6638: ~done~0#1 := 1; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6671: #res#1 := ~done~0#1; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-1: ppp_async_encode_#t~short226#1 := 0 != ppp_async_encode_#t~bitwise225#1 % 4294967296; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539: assume ppp_async_encode_#t~short226#1;havoc ppp_async_encode_#t~mem224#1;havoc ppp_async_encode_#t~bitwise223#1;havoc ppp_async_encode_#t~bitwise225#1;havoc ppp_async_encode_#t~short226#1;ppp_async_encode_~tmp___14~0#1.base, ppp_async_encode_~tmp___14~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, 1 + ppp_async_encode_~buf~0#1.offset;call write~int#1(125, ppp_async_encode_~tmp___14~0#1.base, ppp_async_encode_~tmp___14~0#1.offset, 1);ppp_async_encode_~tmp___15~0#1.base, ppp_async_encode_~tmp___15~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, 1 + ppp_async_encode_~buf~0#1.offset; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539: assume !ppp_async_encode_#t~short226#1;havoc ppp_async_encode_#t~mem224#1;havoc ppp_async_encode_#t~bitwise223#1;havoc ppp_async_encode_#t~bitwise225#1;havoc ppp_async_encode_#t~short226#1;ppp_async_encode_~tmp___16~0#1.base, ppp_async_encode_~tmp___16~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, 1 + ppp_async_encode_~buf~0#1.offset;call write~int#1(ppp_async_encode_~c~3#1, ppp_async_encode_~tmp___16~0#1.base, ppp_async_encode_~tmp___16~0#1.offset, 1); [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6638-1: SUMMARY for call clear_bit(1, ~ap#1.base, 160 + ~ap#1.offset); srcloc: null [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-5: assume 0 == ppp_async_encode_#t~mem224#1 % 4294967296 || 0 == ppp_async_encode_#t~bitwise223#1 % 4294967296;ppp_async_encode_#t~bitwise225#1 := 0; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-5: assume !(0 == ppp_async_encode_#t~mem224#1 % 4294967296 || 0 == ppp_async_encode_#t~bitwise223#1 % 4294967296); [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6663: assume 0 != (#t~mem266#1.base + #t~mem266#1.offset) % 18446744073709551616;havoc #t~mem266#1.base, #t~mem266#1.offset;call #t~mem267#1.base, #t~mem267#1.offset := read~$Pointer$#1(~ap#1.base, 212 + ~ap#1.offset, 8);assume { :begin_inline_ldv_kfree_skb_16 } true;ldv_kfree_skb_16_#in~ldv_func_arg1#1.base, ldv_kfree_skb_16_#in~ldv_func_arg1#1.offset := #t~mem267#1.base, #t~mem267#1.offset;havoc ldv_kfree_skb_16_~ldv_func_arg1#1.base, ldv_kfree_skb_16_~ldv_func_arg1#1.offset;ldv_kfree_skb_16_~ldv_func_arg1#1.base, ldv_kfree_skb_16_~ldv_func_arg1#1.offset := ldv_kfree_skb_16_#in~ldv_func_arg1#1.base, ldv_kfree_skb_16_#in~ldv_func_arg1#1.offset; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6663: assume !(0 != (#t~mem266#1.base + #t~mem266#1.offset) % 18446744073709551616);havoc #t~mem266#1.base, #t~mem266#1.offset; [2025-02-08 02:49:49,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-4: assume ppp_async_encode_#t~mem224#1 % 4294967296 == ppp_async_encode_#t~bitwise223#1 % 4294967296;ppp_async_encode_#t~bitwise225#1 := ppp_async_encode_#t~mem224#1; [2025-02-08 02:49:49,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-4: assume !(ppp_async_encode_#t~mem224#1 % 4294967296 == ppp_async_encode_#t~bitwise223#1 % 4294967296); [2025-02-08 02:49:49,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-3: havoc ppp_async_encode_#t~bitwise225#1;assume ppp_async_encode_#t~bitwise225#1 % 4294967296 <= ppp_async_encode_#t~mem224#1 % 4294967296 && ppp_async_encode_#t~bitwise225#1 % 4294967296 <= ppp_async_encode_#t~bitwise223#1 % 4294967296; [2025-02-08 02:49:49,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-2: [2025-02-08 02:49:49,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-9: assume ppp_async_encode_#t~short226#1; [2025-02-08 02:49:49,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-9: assume !ppp_async_encode_#t~short226#1;call ppp_async_encode_#t~mem224#1 := read~int#1(ppp_async_encode_~ap#1.base, 168 + ppp_async_encode_~ap#1.offset + 4 * (ppp_async_encode_~c~3#1 / 32), 4); [2025-02-08 02:49:49,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-8: assume 0 == ppp_async_encode_~c~3#1 % 32;ppp_async_encode_#t~bitwise223#1 := 1; [2025-02-08 02:49:49,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-8: assume !(0 == ppp_async_encode_~c~3#1 % 32); [2025-02-08 02:49:49,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6564: ppp_async_encode_~tmp___20~0#1.base, ppp_async_encode_~tmp___20~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, 1 + ppp_async_encode_~buf~0#1.offset;call write~int#1(126, ppp_async_encode_~tmp___20~0#1.base, ppp_async_encode_~tmp___20~0#1.offset, 1);call write~$Pointer$#1(ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset, ppp_async_encode_~ap#1.base, 234 + ppp_async_encode_~ap#1.offset, 8);call ppp_async_encode_#t~mem233#1.base, ppp_async_encode_#t~mem233#1.offset := read~$Pointer$#1(ppp_async_encode_~ap#1.base, 212 + ppp_async_encode_~ap#1.offset, 8);assume { :begin_inline_ldv_consume_skb_15 } true;ldv_consume_skb_15_#in~ldv_func_arg1#1.base, ldv_consume_skb_15_#in~ldv_func_arg1#1.offset := ppp_async_encode_#t~mem233#1.base, ppp_async_encode_#t~mem233#1.offset;havoc ldv_consume_skb_15_~ldv_func_arg1#1.base, ldv_consume_skb_15_~ldv_func_arg1#1.offset;ldv_consume_skb_15_~ldv_func_arg1#1.base, ldv_consume_skb_15_~ldv_func_arg1#1.offset := ldv_consume_skb_15_#in~ldv_func_arg1#1.base, ldv_consume_skb_15_#in~ldv_func_arg1#1.offset; [2025-02-08 02:49:49,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-7: havoc ppp_async_encode_#t~bitwise223#1;assume ppp_async_encode_#t~bitwise223#1 > 1; [2025-02-08 02:49:49,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-6: [2025-02-08 02:49:49,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6507-1: assume ppp_async_encode_#t~short216#1;call ppp_async_encode_#t~mem215#1 := read~int#1(ppp_async_encode_~ap#1.base, 8 + ppp_async_encode_~ap#1.offset, 4);ppp_async_encode_#t~short216#1 := 0 != (if ppp_async_encode_#t~mem215#1 % 4294967296 % 4294967296 <= 2147483647 then ppp_async_encode_#t~mem215#1 % 4294967296 % 4294967296 else ppp_async_encode_#t~mem215#1 % 4294967296 % 4294967296 - 4294967296) % 2; [2025-02-08 02:49:49,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6507-1: assume !ppp_async_encode_#t~short216#1; [2025-02-08 02:49:49,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6507: assume ppp_async_encode_#t~short216#1;havoc ppp_async_encode_#t~mem215#1;havoc ppp_async_encode_#t~short216#1; [2025-02-08 02:49:49,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6507: assume !ppp_async_encode_#t~short216#1;havoc ppp_async_encode_#t~mem215#1;havoc ppp_async_encode_#t~short216#1; [2025-02-08 02:49:49,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6664: havoc ldv_kfree_skb_16_~ldv_func_arg1#1.base, ldv_kfree_skb_16_~ldv_func_arg1#1.offset;havoc ldv_kfree_skb_16_#in~ldv_func_arg1#1.base, ldv_kfree_skb_16_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_kfree_skb_16 } true;havoc #t~mem267#1.base, #t~mem267#1.offset;call write~$Pointer$#1(0, 0, ~ap#1.base, 212 + ~ap#1.offset, 8); [2025-02-08 02:49:49,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558: call write~int#1(ppp_async_encode_#t~bitwise232#1, ppp_async_encode_~tmp___18~0#1.base, ppp_async_encode_~tmp___18~0#1.offset, 1);havoc ppp_async_encode_#t~bitwise232#1; [2025-02-08 02:49:49,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558-4: assume false;ppp_async_encode_#t~bitwise232#1 := (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256); [2025-02-08 02:49:49,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558-4: assume !false; [2025-02-08 02:49:49,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558-3: assume 32 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256);ppp_async_encode_#t~bitwise232#1 := 0; [2025-02-08 02:49:49,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558-3: assume !(32 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256)); [2025-02-08 02:49:49,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558-2: havoc ppp_async_encode_#t~bitwise232#1;assume (((((if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256) < 0 || ppp_async_encode_#t~bitwise232#1 > 0) && ((if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256) >= 0 || ppp_async_encode_#t~bitwise232#1 < 0)) && ((if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256) < 0 || ppp_async_encode_#t~bitwise232#1 <= 32 + (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256))) && ppp_async_encode_#t~bitwise232#1 >= -2147483648) && ppp_async_encode_#t~bitwise232#1 <= 2147483647; [2025-02-08 02:49:49,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558-1: [2025-02-08 02:49:49,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558-5: assume 0 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256);ppp_async_encode_#t~bitwise232#1 := 32; [2025-02-08 02:49:49,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558-5: assume !(0 == (if ppp_async_encode_~c~3#1 % 256 <= 127 then ppp_async_encode_~c~3#1 % 256 else ppp_async_encode_~c~3#1 % 256 - 256)); [2025-02-08 02:49:49,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6666: ~done~0#1 := 1; [2025-02-08 02:49:49,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6666-1: SUMMARY for call clear_bit(1, ~ap#1.base, 160 + ~ap#1.offset); srcloc: null [2025-02-08 02:49:49,279 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder has thrown an exception: java.lang.ArrayIndexOutOfBoundsException: Index -1 out of bounds for length 2 at de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.cfg.CfgBuilder$ProcedureCfgBuilder.buildCodeBlock(CfgBuilder.java:761) at de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.cfg.CfgBuilder$ProcedureCfgBuilder.buildCodeBlock(CfgBuilder.java:742) at de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.cfg.CfgBuilder$ProcedureCfgBuilder.buildProcedureCfgFromImplementation(CfgBuilder.java:676) at de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.cfg.CfgBuilder.createIcfg(CfgBuilder.java:291) at de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.IcfgBuilderObserver.process(IcfgBuilderObserver.java:88) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.DFSTreeWalker.runObserver(DFSTreeWalker.java:65) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.runObserver(BaseWalker.java:93) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.run(BaseWalker.java:86) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:166) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:150) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:127) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:233) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:227) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:144) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:106) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:319) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2025-02-08 02:49:49,285 INFO L158 Benchmark]: Toolchain (without parser) took 2912.67ms. Allocated memory is still 167.8MB. Free memory was 125.5MB in the beginning and 85.3MB in the end (delta: 40.1MB). Peak memory consumption was 89.1MB. Max. memory is 16.1GB. [2025-02-08 02:49:49,286 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 201.3MB. Free memory is still 124.7MB. There was no memory consumed. Max. memory is 16.1GB. [2025-02-08 02:49:49,286 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1571.39ms. Allocated memory is still 167.8MB. Free memory was 125.5MB in the beginning and 70.2MB in the end (delta: 55.3MB). Peak memory consumption was 104.3MB. Max. memory is 16.1GB. [2025-02-08 02:49:49,286 INFO L158 Benchmark]: Boogie Procedure Inliner took 165.05ms. Allocated memory is still 167.8MB. Free memory was 70.2MB in the beginning and 104.9MB in the end (delta: -34.7MB). Peak memory consumption was 27.6MB. Max. memory is 16.1GB. [2025-02-08 02:49:49,287 INFO L158 Benchmark]: Boogie Preprocessor took 302.02ms. Allocated memory is still 167.8MB. Free memory was 104.9MB in the beginning and 83.6MB in the end (delta: 21.3MB). Peak memory consumption was 70.1MB. Max. memory is 16.1GB. [2025-02-08 02:49:49,287 INFO L158 Benchmark]: IcfgBuilder took 870.07ms. Allocated memory is still 167.8MB. Free memory was 83.6MB in the beginning and 85.3MB in the end (delta: -1.7MB). Peak memory consumption was 50.1MB. Max. memory is 16.1GB. [2025-02-08 02:49:49,289 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 201.3MB. Free memory is still 124.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1571.39ms. Allocated memory is still 167.8MB. Free memory was 125.5MB in the beginning and 70.2MB in the end (delta: 55.3MB). Peak memory consumption was 104.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 165.05ms. Allocated memory is still 167.8MB. Free memory was 70.2MB in the beginning and 104.9MB in the end (delta: -34.7MB). Peak memory consumption was 27.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 302.02ms. Allocated memory is still 167.8MB. Free memory was 104.9MB in the beginning and 83.6MB in the end (delta: 21.3MB). Peak memory consumption was 70.1MB. Max. memory is 16.1GB. * IcfgBuilder took 870.07ms. Allocated memory is still 167.8MB. Free memory was 83.6MB in the beginning and 85.3MB in the end (delta: -1.7MB). Peak memory consumption was 50.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder: - ExceptionOrErrorResult: ArrayIndexOutOfBoundsException: Index -1 out of bounds for length 2 de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder: ArrayIndexOutOfBoundsException: Index -1 out of bounds for length 2: de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.cfg.CfgBuilder$ProcedureCfgBuilder.buildCodeBlock(CfgBuilder.java:761) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 5282]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [5282] - GenericResultAtLocation [Line: 5289]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; btr %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr)); [5289] - GenericResultAtLocation [Line: 5297]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5297-5298] - GenericResultAtLocation [Line: 5306]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; btr %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5306-5307] - GenericResultAtLocation [Line: 5320]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [5320] - GenericResultAtLocation [Line: 5383]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [5383] - GenericResultAtLocation [Line: 5391]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; decl %0; sete %1": "+m" (v->counter), "=qm" (c): : "memory"); [5391-5392] - GenericResultAtLocation [Line: 5963]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5963] - GenericResultAtLocation [Line: 5966]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5966] - GenericResultAtLocation [Line: 5969]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5969] - GenericResultAtLocation [Line: 5972]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5972] - GenericResultAtLocation [Line: 5975]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5975] - GenericResultAtLocation [Line: 5991]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5991-5992] - GenericResultAtLocation [Line: 5995]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5995-5996] - GenericResultAtLocation [Line: 5999]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5999-6000] - GenericResultAtLocation [Line: 6003]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [6003-6004] - GenericResultAtLocation [Line: 6007]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [6007-6008] - GenericResultAtLocation [Line: 6031]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6031-6032] - GenericResultAtLocation [Line: 6035]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6035-6036] - GenericResultAtLocation [Line: 6039]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6039-6040] - GenericResultAtLocation [Line: 6043]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6043-6044] - GenericResultAtLocation [Line: 6047]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6047-6048] - GenericResultAtLocation [Line: 6176]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6176] - GenericResultAtLocation [Line: 6179]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6179] - GenericResultAtLocation [Line: 6182]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6182] - GenericResultAtLocation [Line: 6185]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6185] - GenericResultAtLocation [Line: 6188]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6188] - GenericResultAtLocation [Line: 6200]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu), "=r" (__val_gu): "0" (p), "i" (4UL)); [6200-6201] - GenericResultAtLocation [Line: 6218]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6218-6219] - GenericResultAtLocation [Line: 6222]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6222-6223] - GenericResultAtLocation [Line: 6226]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6226-6227] - GenericResultAtLocation [Line: 6230]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6230-6231] - GenericResultAtLocation [Line: 6234]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6234-6235] - GenericResultAtLocation [Line: 6247]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___0), "=r" (__val_gu___0): "0" ((u32 *)argp), "i" (4UL)); [6247-6248] - GenericResultAtLocation [Line: 6261]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6261-6262] - GenericResultAtLocation [Line: 6265]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6265-6266] - GenericResultAtLocation [Line: 6269]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6269-6270] - GenericResultAtLocation [Line: 6273]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6273-6274] - GenericResultAtLocation [Line: 6277]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6277-6278] - GenericResultAtLocation [Line: 6290]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___1), "=r" (__val_gu___1): "0" ((u32 *)argp), "i" (4UL)); [6290-6291] - GenericResultAtLocation [Line: 6328]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6328-6329] - GenericResultAtLocation [Line: 6332]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6332-6333] - GenericResultAtLocation [Line: 6336]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6336-6337] - GenericResultAtLocation [Line: 6340]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6340-6341] - GenericResultAtLocation [Line: 6344]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6344-6345] - GenericResultAtLocation [Line: 6357]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___2), "=r" (__val_gu___2): "0" (p), "i" (4UL)); [6357-6358] RESULT: Ultimate could not prove your program: Toolchain returned no result. [2025-02-08 02:49:49,309 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f78e25bf76e2d1d395e5e41868c5ddb628a36f1efdf095bb509ea6a3a366617b --- Real Ultimate output --- This is Ultimate 0.3.0-?-48c9605-m [2025-02-08 02:49:51,342 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-02-08 02:49:51,447 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2025-02-08 02:49:51,458 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-02-08 02:49:51,465 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-02-08 02:49:51,497 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-02-08 02:49:51,498 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-02-08 02:49:51,498 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-02-08 02:49:51,498 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-02-08 02:49:51,499 INFO L153 SettingsManager]: * Use memory slicer=true [2025-02-08 02:49:51,500 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-02-08 02:49:51,500 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-02-08 02:49:51,501 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-02-08 02:49:51,501 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-02-08 02:49:51,501 INFO L153 SettingsManager]: * Use SBE=true [2025-02-08 02:49:51,501 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-02-08 02:49:51,501 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-02-08 02:49:51,502 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-02-08 02:49:51,502 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-02-08 02:49:51,502 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-02-08 02:49:51,502 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-02-08 02:49:51,502 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2025-02-08 02:49:51,502 INFO L153 SettingsManager]: * Use bitvectors instead of ints=true [2025-02-08 02:49:51,502 INFO L153 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2025-02-08 02:49:51,502 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-02-08 02:49:51,502 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-02-08 02:49:51,502 INFO L153 SettingsManager]: * Use constant arrays=true [2025-02-08 02:49:51,502 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-02-08 02:49:51,503 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-02-08 02:49:51,503 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-02-08 02:49:51,503 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-02-08 02:49:51,503 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:49:51,503 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-02-08 02:49:51,503 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-02-08 02:49:51,504 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-02-08 02:49:51,504 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-02-08 02:49:51,504 INFO L153 SettingsManager]: * Trace refinement strategy=FOX [2025-02-08 02:49:51,504 INFO L153 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2025-02-08 02:49:51,504 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-02-08 02:49:51,504 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-02-08 02:49:51,504 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-02-08 02:49:51,504 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-02-08 02:49:51,504 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f78e25bf76e2d1d395e5e41868c5ddb628a36f1efdf095bb509ea6a3a366617b [2025-02-08 02:49:51,752 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-02-08 02:49:51,759 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-02-08 02:49:51,764 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-02-08 02:49:51,765 INFO L270 PluginConnector]: Initializing CDTParser... [2025-02-08 02:49:51,766 INFO L274 PluginConnector]: CDTParser initialized [2025-02-08 02:49:51,766 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i [2025-02-08 02:49:52,995 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/362865708/4d8fd499a4a34cd997bc947f27868903/FLAG7818e7626 [2025-02-08 02:49:53,553 INFO L384 CDTParser]: Found 1 translation units. [2025-02-08 02:49:53,553 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i [2025-02-08 02:49:53,585 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/362865708/4d8fd499a4a34cd997bc947f27868903/FLAG7818e7626 [2025-02-08 02:49:53,617 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/362865708/4d8fd499a4a34cd997bc947f27868903 [2025-02-08 02:49:53,619 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-02-08 02:49:53,620 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-02-08 02:49:53,623 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-02-08 02:49:53,623 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-02-08 02:49:53,626 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-02-08 02:49:53,627 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:49:53" (1/1) ... [2025-02-08 02:49:53,627 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@d0b701c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:53, skipping insertion in model container [2025-02-08 02:49:53,627 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:49:53" (1/1) ... [2025-02-08 02:49:53,698 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-02-08 02:49:54,335 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i[162928,162941] [2025-02-08 02:49:54,449 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,455 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,486 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,501 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,506 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,507 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,508 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,514 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,516 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,561 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,561 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,564 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,564 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,565 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,565 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,565 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,566 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,566 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,570 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,578 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,607 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,607 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,613 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,614 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,615 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,635 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,635 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,638 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,640 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,641 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,641 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,641 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,641 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,641 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,641 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,642 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,642 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,735 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,766 WARN L1100 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2025-02-08 02:49:54,767 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:49:54,790 INFO L200 MainTranslator]: Completed pre-run [2025-02-08 02:49:54,875 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [5282] [2025-02-08 02:49:54,877 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; btr %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr)); [5289] [2025-02-08 02:49:54,877 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5297-5298] [2025-02-08 02:49:54,878 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; btr %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5306-5307] [2025-02-08 02:49:54,879 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [5320] [2025-02-08 02:49:54,882 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [5383] [2025-02-08 02:49:54,883 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; decl %0; sete %1": "+m" (v->counter), "=qm" (c): : "memory"); [5391-5392] [2025-02-08 02:49:54,897 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--ppp--ppp_async.ko-entry_point.cil.out.i[162928,162941] [2025-02-08 02:49:54,913 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5963] [2025-02-08 02:49:54,913 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5966] [2025-02-08 02:49:54,913 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5969] [2025-02-08 02:49:54,913 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5972] [2025-02-08 02:49:54,913 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5975] [2025-02-08 02:49:54,914 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5991-5992] [2025-02-08 02:49:54,917 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5995-5996] [2025-02-08 02:49:54,918 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5999-6000] [2025-02-08 02:49:54,918 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [6003-6004] [2025-02-08 02:49:54,918 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [6007-6008] [2025-02-08 02:49:54,919 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6031-6032] [2025-02-08 02:49:54,919 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6035-6036] [2025-02-08 02:49:54,919 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6039-6040] [2025-02-08 02:49:54,919 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6043-6044] [2025-02-08 02:49:54,919 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6047-6048] [2025-02-08 02:49:54,927 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6176] [2025-02-08 02:49:54,928 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6179] [2025-02-08 02:49:54,928 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6182] [2025-02-08 02:49:54,928 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6185] [2025-02-08 02:49:54,932 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6188] [2025-02-08 02:49:54,933 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu), "=r" (__val_gu): "0" (p), "i" (4UL)); [6200-6201] [2025-02-08 02:49:54,933 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6218-6219] [2025-02-08 02:49:54,933 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6222-6223] [2025-02-08 02:49:54,934 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6226-6227] [2025-02-08 02:49:54,934 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6230-6231] [2025-02-08 02:49:54,934 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6234-6235] [2025-02-08 02:49:54,934 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___0), "=r" (__val_gu___0): "0" ((u32 *)argp), "i" (4UL)); [6247-6248] [2025-02-08 02:49:54,934 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6261-6262] [2025-02-08 02:49:54,934 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6265-6266] [2025-02-08 02:49:54,935 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6269-6270] [2025-02-08 02:49:54,935 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6273-6274] [2025-02-08 02:49:54,935 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6277-6278] [2025-02-08 02:49:54,935 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___1), "=r" (__val_gu___1): "0" ((u32 *)argp), "i" (4UL)); [6290-6291] [2025-02-08 02:49:54,936 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6328-6329] [2025-02-08 02:49:54,937 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6332-6333] [2025-02-08 02:49:54,937 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6336-6337] [2025-02-08 02:49:54,938 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6340-6341] [2025-02-08 02:49:54,938 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6344-6345] [2025-02-08 02:49:54,939 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___2), "=r" (__val_gu___2): "0" (p), "i" (4UL)); [6357-6358] [2025-02-08 02:49:54,989 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:49:55,078 INFO L204 MainTranslator]: Completed translation [2025-02-08 02:49:55,079 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55 WrapperNode [2025-02-08 02:49:55,079 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-02-08 02:49:55,080 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-02-08 02:49:55,080 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-02-08 02:49:55,080 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-02-08 02:49:55,084 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,119 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,176 INFO L138 Inliner]: procedures = 192, calls = 596, calls flagged for inlining = 99, calls inlined = 93, statements flattened = 2378 [2025-02-08 02:49:55,177 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-02-08 02:49:55,177 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-02-08 02:49:55,177 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-02-08 02:49:55,178 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-02-08 02:49:55,184 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,184 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,205 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,435 INFO L175 MemorySlicer]: Split 317 memory accesses to 7 slices as follows [2, 229, 13, 28, 1, 20, 24]. 72 percent of accesses are in the largest equivalence class. The 23 initializations are split as follows [2, 6, 0, 0, 0, 15, 0]. The 152 writes are split as follows [0, 100, 13, 13, 0, 2, 24]. [2025-02-08 02:49:55,435 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,435 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,480 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,483 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,490 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,496 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,512 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-02-08 02:49:55,516 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-02-08 02:49:55,516 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-02-08 02:49:55,516 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-02-08 02:49:55,517 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:49:55" (1/1) ... [2025-02-08 02:49:55,525 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:49:55,543 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-02-08 02:49:55,557 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-02-08 02:49:55,562 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-02-08 02:49:55,578 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2025-02-08 02:49:55,579 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1#0 [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1#1 [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1#2 [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1#3 [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1#4 [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1#5 [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1#6 [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8#0 [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8#1 [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8#2 [2025-02-08 02:49:55,579 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8#3 [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8#4 [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8#5 [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8#6 [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_async_push [2025-02-08 02:49:55,580 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_async_push [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reserve [2025-02-08 02:49:55,580 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reserve [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#0 [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#1 [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#2 [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#3 [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#4 [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#5 [2025-02-08 02:49:55,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#6 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#0 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#1 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#2 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#3 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#4 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#5 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#6 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2#0 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2#1 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2#2 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2#3 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2#4 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2#5 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2#6 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2025-02-08 02:49:55,581 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#4 [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#5 [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#6 [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2025-02-08 02:49:55,582 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure crc_ccitt_byte [2025-02-08 02:49:55,582 INFO L138 BoogieDeclarations]: Found implementation of procedure crc_ccitt_byte [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure ap_put [2025-02-08 02:49:55,582 INFO L138 BoogieDeclarations]: Found implementation of procedure ap_put [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_output_wakeup [2025-02-08 02:49:55,582 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_output_wakeup [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#0 [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#1 [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#2 [2025-02-08 02:49:55,582 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#3 [2025-02-08 02:49:55,583 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#4 [2025-02-08 02:49:55,583 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#5 [2025-02-08 02:49:55,583 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#6 [2025-02-08 02:49:55,583 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#0 [2025-02-08 02:49:55,583 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#1 [2025-02-08 02:49:55,583 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#2 [2025-02-08 02:49:55,583 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#3 [2025-02-08 02:49:55,583 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#4 [2025-02-08 02:49:55,583 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#5 [2025-02-08 02:49:55,583 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#6 [2025-02-08 02:49:55,583 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2025-02-08 02:49:55,583 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2025-02-08 02:49:55,583 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-02-08 02:49:55,583 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-02-08 02:49:55,583 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_asynctty_hangup [2025-02-08 02:49:55,583 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_asynctty_hangup [2025-02-08 02:49:55,584 INFO L130 BoogieDeclarations]: Found specification of procedure constant_test_bit [2025-02-08 02:49:55,584 INFO L138 BoogieDeclarations]: Found implementation of procedure constant_test_bit [2025-02-08 02:49:55,584 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2025-02-08 02:49:55,584 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2025-02-08 02:49:55,584 INFO L130 BoogieDeclarations]: Found specification of procedure get_unaligned_be16 [2025-02-08 02:49:55,584 INFO L138 BoogieDeclarations]: Found implementation of procedure get_unaligned_be16 [2025-02-08 02:49:55,584 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2025-02-08 02:49:55,584 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2025-02-08 02:49:55,584 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2025-02-08 02:49:55,584 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2025-02-08 02:49:55,584 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2025-02-08 02:49:55,584 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2025-02-08 02:49:55,584 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4#0 [2025-02-08 02:49:55,584 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4#1 [2025-02-08 02:49:55,584 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4#2 [2025-02-08 02:49:55,584 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4#3 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4#4 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4#5 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4#6 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2#0 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2#1 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2#2 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2#3 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2#4 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2#5 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2#6 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#0 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#1 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#2 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#3 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#4 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#5 [2025-02-08 02:49:55,585 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1#6 [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8#0 [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8#1 [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8#2 [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8#3 [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8#4 [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8#5 [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8#6 [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2025-02-08 02:49:55,586 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure clear_bit [2025-02-08 02:49:55,586 INFO L138 BoogieDeclarations]: Found implementation of procedure clear_bit [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2025-02-08 02:49:55,586 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_asynctty_close [2025-02-08 02:49:55,586 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_asynctty_close [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-02-08 02:49:55,586 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_asynctty_poll [2025-02-08 02:49:55,587 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_asynctty_poll [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_set_bit [2025-02-08 02:49:55,587 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_set_bit [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2025-02-08 02:49:55,587 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8#0 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8#1 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8#2 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8#3 [2025-02-08 02:49:55,587 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8#4 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8#5 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8#6 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2#0 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2#1 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2#2 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2#3 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2#4 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2#5 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2#6 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4#0 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4#1 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4#2 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4#3 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4#4 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4#5 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4#6 [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2025-02-08 02:49:55,588 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_to_user [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure ap_get [2025-02-08 02:49:55,588 INFO L138 BoogieDeclarations]: Found implementation of procedure ap_get [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure tasklet_schedule [2025-02-08 02:49:55,588 INFO L138 BoogieDeclarations]: Found implementation of procedure tasklet_schedule [2025-02-08 02:49:55,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2025-02-08 02:49:55,589 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec_and_test [2025-02-08 02:49:55,589 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec_and_test [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8#0 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8#1 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8#2 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8#3 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8#4 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8#5 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8#6 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#0 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#1 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#2 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#3 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#4 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#5 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#6 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2#0 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2#1 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2#2 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2#3 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2#4 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2#5 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2#6 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#0 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#1 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#2 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#3 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#4 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#5 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#6 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#0 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#1 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#2 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#3 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#4 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#5 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#6 [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2025-02-08 02:49:55,589 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2025-02-08 02:49:55,589 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2025-02-08 02:49:55,589 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#0 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#1 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#2 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#3 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#4 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#5 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#6 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure set_bit [2025-02-08 02:49:55,591 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bit [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure async_lcp_peek [2025-02-08 02:49:55,591 INFO L138 BoogieDeclarations]: Found implementation of procedure async_lcp_peek [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1#0 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1#1 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1#2 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1#3 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1#4 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1#5 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1#6 [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_bh [2025-02-08 02:49:55,591 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_bh [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2025-02-08 02:49:55,591 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_from_user [2025-02-08 02:49:55,591 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_from_user [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-02-08 02:49:55,591 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure ppp_asynctty_ioctl [2025-02-08 02:49:55,591 INFO L138 BoogieDeclarations]: Found implementation of procedure ppp_asynctty_ioctl [2025-02-08 02:49:55,591 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_bh [2025-02-08 02:49:55,591 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_bh [2025-02-08 02:49:56,055 INFO L257 CfgBuilder]: Building ICFG [2025-02-08 02:49:56,058 INFO L287 CfgBuilder]: Building CFG for each procedure with an implementation [2025-02-08 02:49:56,563 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6526: assume ~bvslt~32(ppp_async_encode_~i~0#1, ppp_async_encode_~count~0#1) && ~bvult~64(~bvadd~64(ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset), ~bvadd~64(ppp_async_encode_~buflim~0#1.base, ppp_async_encode_~buflim~0#1.offset)); [2025-02-08 02:49:56,563 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6526: assume !(~bvslt~32(ppp_async_encode_~i~0#1, ppp_async_encode_~count~0#1) && ~bvult~64(~bvadd~64(ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset), ~bvadd~64(ppp_async_encode_~buflim~0#1.base, ppp_async_encode_~buflim~0#1.offset))); [2025-02-08 02:49:56,563 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6551: ppp_async_encode_~c~3#1 := ~bvand~32(255bv32, ~bvashr~32(ppp_async_encode_~fcs~0#1, 8bv32));ppp_async_encode_#t~short211#1 := 0bv32 != ppp_async_encode_~islcp~0#1 && ~bvsle~32(ppp_async_encode_~c~3#1, 31bv32); [2025-02-08 02:49:56,563 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6568: havoc ldv_consume_skb_15_~ldv_func_arg1#1.base, ldv_consume_skb_15_~ldv_func_arg1#1.offset;havoc ldv_consume_skb_15_#in~ldv_func_arg1#1.base, ldv_consume_skb_15_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_consume_skb_15 } true;havoc ppp_async_encode_#t~mem212#1.base, ppp_async_encode_#t~mem212#1.offset;call write~$Pointer$#1(0bv64, 0bv64, ppp_async_encode_~ap#1.base, ~bvadd~64(212bv64, ppp_async_encode_~ap#1.offset), 8bv64);ppp_async_encode_#res#1 := 1bv32; [2025-02-08 02:49:56,564 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7394: SUMMARY for call ldv_skb_free(ldv_kfree_skb_16_~ldv_func_arg1#1.base, ldv_kfree_skb_16_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:49:56,564 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6659-1: SUMMARY for call spin_unlock_bh(~ap#1.base, ~bvadd~64(24bv64, ~ap#1.offset)); srcloc: null [2025-02-08 02:49:56,564 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6659: #res#1 := ~done~0#1; [2025-02-08 02:49:56,564 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-1: assume ppp_async_encode_#t~short211#1; [2025-02-08 02:49:56,564 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552-1: assume !ppp_async_encode_#t~short211#1;call ppp_async_encode_#t~mem210#1 := read~intINTTYPE4#1(ppp_async_encode_~ap#1.base, ~bvadd~64(~bvadd~64(168bv64, ppp_async_encode_~ap#1.offset), ~bvmul~64(4bv64, ~sign_extend~64~32(~bvashr~32(ppp_async_encode_~c~3#1, 5bv32)))), 4bv64);ppp_async_encode_#t~short211#1 := 0bv32 != ~bvand~32(ppp_async_encode_#t~mem210#1, ~bvshl~32(1bv32, ~bvand~32(31bv32, ppp_async_encode_~c~3#1))); [2025-02-08 02:49:56,564 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552: assume ppp_async_encode_#t~short211#1;havoc ppp_async_encode_#t~mem210#1;havoc ppp_async_encode_#t~short211#1;ppp_async_encode_~tmp___17~0#1.base, ppp_async_encode_~tmp___17~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, ~bvadd~64(1bv64, ppp_async_encode_~buf~0#1.offset);call write~intINTTYPE1#1(125bv8, ppp_async_encode_~tmp___17~0#1.base, ppp_async_encode_~tmp___17~0#1.offset, 1bv64);ppp_async_encode_~tmp___18~0#1.base, ppp_async_encode_~tmp___18~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, ~bvadd~64(1bv64, ppp_async_encode_~buf~0#1.offset);call write~intINTTYPE1#1(~bvxor~32(32bv32, ~sign_extend~32~8(ppp_async_encode_~c~3#1[8:0]))[8:0], ppp_async_encode_~tmp___18~0#1.base, ppp_async_encode_~tmp___18~0#1.offset, 1bv64); [2025-02-08 02:49:56,564 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6552: assume !ppp_async_encode_#t~short211#1;havoc ppp_async_encode_#t~mem210#1;havoc ppp_async_encode_#t~short211#1;ppp_async_encode_~tmp___19~0#1.base, ppp_async_encode_~tmp___19~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, ~bvadd~64(1bv64, ppp_async_encode_~buf~0#1.offset);call write~intINTTYPE1#1(ppp_async_encode_~c~3#1[8:0], ppp_async_encode_~tmp___19~0#1.base, ppp_async_encode_~tmp___19~0#1.offset, 1bv64); [2025-02-08 02:49:56,564 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6511-1: SUMMARY for call ppp_async_encode_#t~ret205#1 := crc_ccitt_byte(~zero_extend~32~16(ppp_async_encode_~fcs~0#1[16:0])[16:0], ~zero_extend~32~8(ppp_async_encode_~c~3#1[8:0])[8:0]); srcloc: null [2025-02-08 02:49:56,564 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6511: ppp_async_encode_~tmp___10~0#1 := ppp_async_encode_#t~ret205#1;havoc ppp_async_encode_#t~ret205#1;ppp_async_encode_~fcs~0#1 := ~zero_extend~32~16(ppp_async_encode_~tmp___10~0#1);ppp_async_encode_#t~short207#1 := 0bv32 != ppp_async_encode_~islcp~0#1 && ~bvsle~32(ppp_async_encode_~c~3#1, 31bv32); [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7387: SUMMARY for call ldv_skb_free(ldv_consume_skb_15_~ldv_func_arg1#1.base, ldv_consume_skb_15_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6636: #t~ret239#1 := ppp_async_encode_#res#1;havoc ppp_async_encode_#t~mem183#1, ppp_async_encode_#t~mem184#1.base, ppp_async_encode_#t~mem184#1.offset, ppp_async_encode_#t~mem185#1.base, ppp_async_encode_#t~mem185#1.offset, ppp_async_encode_#t~mem186#1.base, ppp_async_encode_#t~mem186#1.offset, ppp_async_encode_#t~mem187#1, ppp_async_encode_#t~mem188#1, ppp_async_encode_#t~ret189#1, ppp_async_encode_#t~mem190#1, ppp_async_encode_#t~short191#1, ppp_async_encode_#t~mem192#1, ppp_async_encode_#t~short193#1, ppp_async_encode_#t~mem194#1, ppp_async_encode_#t~short195#1, ppp_async_encode_#t~mem196#1, ppp_async_encode_#t~mem197#1, ppp_async_encode_#t~ret198#1, ppp_async_encode_#t~mem199#1, ppp_async_encode_#t~short200#1, ppp_async_encode_#t~ret201#1, ppp_async_encode_#t~mem202#1, ppp_async_encode_#t~mem203#1, ppp_async_encode_#t~short204#1, ppp_async_encode_#t~ret205#1, ppp_async_encode_#t~mem206#1, ppp_async_encode_#t~short207#1, ppp_async_encode_#t~mem208#1, ppp_async_encode_#t~short209#1, ppp_async_encode_#t~mem210#1, ppp_async_encode_#t~short211#1, ppp_async_encode_#t~mem212#1.base, ppp_async_encode_#t~mem212#1.offset, ppp_async_encode_~ap#1.base, ppp_async_encode_~ap#1.offset, ppp_async_encode_~fcs~0#1, ppp_async_encode_~i~0#1, ppp_async_encode_~count~0#1, ppp_async_encode_~c~3#1, ppp_async_encode_~proto~0#1, ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset, ppp_async_encode_~buflim~0#1.base, ppp_async_encode_~buflim~0#1.offset, ppp_async_encode_~data~0#1.base, ppp_async_encode_~data~0#1.offset, ppp_async_encode_~islcp~0#1, ppp_async_encode_~tmp~26#1, ppp_async_encode_~tmp___0~8#1.base, ppp_async_encode_~tmp___0~8#1.offset, ppp_async_encode_~tmp___1~3#1.base, ppp_async_encode_~tmp___1~3#1.offset, ppp_async_encode_~tmp___2~1#1.base, ppp_async_encode_~tmp___2~1#1.offset, ppp_async_encode_~tmp___3~0#1.base, ppp_async_encode_~tmp___3~0#1.offset, ppp_async_encode_~tmp___4~0#1, ppp_async_encode_~tmp___5~0#1.base, ppp_async_encode_~tmp___5~0#1.offset, ppp_async_encode_~tmp___6~0#1.base, ppp_async_encode_~tmp___6~0#1.offset, ppp_async_encode_~tmp___7~0#1.base, ppp_async_encode_~tmp___7~0#1.offset, ppp_async_encode_~tmp___8~0#1, ppp_async_encode_~tmp___9~0#1, ppp_async_encode_~tmp___10~0#1, ppp_async_encode_~tmp___11~0#1.base, ppp_async_encode_~tmp___11~0#1.offset, ppp_async_encode_~tmp___12~0#1.base, ppp_async_encode_~tmp___12~0#1.offset, ppp_async_encode_~tmp___13~0#1.base, ppp_async_encode_~tmp___13~0#1.offset, ppp_async_encode_~tmp___14~0#1.base, ppp_async_encode_~tmp___14~0#1.offset, ppp_async_encode_~tmp___15~0#1.base, ppp_async_encode_~tmp___15~0#1.offset, ppp_async_encode_~tmp___16~0#1.base, ppp_async_encode_~tmp___16~0#1.offset, ppp_async_encode_~tmp___17~0#1.base, ppp_async_encode_~tmp___17~0#1.offset, ppp_async_encode_~tmp___18~0#1.base, ppp_async_encode_~tmp___18~0#1.offset, ppp_async_encode_~tmp___19~0#1.base, ppp_async_encode_~tmp___19~0#1.offset, ppp_async_encode_~tmp___20~0#1.base, ppp_async_encode_~tmp___20~0#1.offset;havoc ppp_async_encode_#in~ap#1.base, ppp_async_encode_#in~ap#1.offset;assume { :end_inline_ppp_async_encode } true;~tmp___1~4#1 := #t~ret239#1;havoc #t~ret239#1; [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6504: ppp_async_encode_~tmp___9~0#1 := ppp_async_encode_~i~0#1;ppp_async_encode_~i~0#1 := ~bvadd~32(1bv32, ppp_async_encode_~i~0#1);call ppp_async_encode_#t~mem202#1 := read~intINTTYPE1#1(ppp_async_encode_~data~0#1.base, ~bvadd~64(ppp_async_encode_~data~0#1.offset, ~sign_extend~64~32(ppp_async_encode_~tmp___9~0#1)), 1bv64);ppp_async_encode_~c~3#1 := ~zero_extend~32~8(ppp_async_encode_#t~mem202#1);havoc ppp_async_encode_#t~mem202#1;ppp_async_encode_#t~short204#1 := 1bv32 == ppp_async_encode_~i~0#1 && 0bv32 == ppp_async_encode_~c~3#1; [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6670: call #t~mem247#1.base, #t~mem247#1.offset := read~$Pointer$#1(~ap#1.base, ~bvadd~64(234bv64, ~ap#1.offset), 8bv64);call write~$Pointer$#1(#t~mem247#1.base, #t~mem247#1.offset, ~ap#1.base, ~bvadd~64(226bv64, ~ap#1.offset), 8bv64);havoc #t~mem247#1.base, #t~mem247#1.offset; [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-1: assume ppp_async_encode_#t~short207#1; [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513-1: assume !ppp_async_encode_#t~short207#1;call ppp_async_encode_#t~mem206#1 := read~intINTTYPE4#1(ppp_async_encode_~ap#1.base, ~bvadd~64(~bvadd~64(168bv64, ppp_async_encode_~ap#1.offset), ~bvmul~64(4bv64, ~sign_extend~64~32(~bvashr~32(ppp_async_encode_~c~3#1, 5bv32)))), 4bv64);ppp_async_encode_#t~short207#1 := 0bv32 != ~bvand~32(ppp_async_encode_#t~mem206#1, ~bvshl~32(1bv32, ~bvand~32(31bv32, ppp_async_encode_~c~3#1))); [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513: assume ppp_async_encode_#t~short207#1;havoc ppp_async_encode_#t~mem206#1;havoc ppp_async_encode_#t~short207#1;ppp_async_encode_~tmp___11~0#1.base, ppp_async_encode_~tmp___11~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, ~bvadd~64(1bv64, ppp_async_encode_~buf~0#1.offset);call write~intINTTYPE1#1(125bv8, ppp_async_encode_~tmp___11~0#1.base, ppp_async_encode_~tmp___11~0#1.offset, 1bv64);ppp_async_encode_~tmp___12~0#1.base, ppp_async_encode_~tmp___12~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, ~bvadd~64(1bv64, ppp_async_encode_~buf~0#1.offset);call write~intINTTYPE1#1(~bvxor~32(32bv32, ~sign_extend~32~8(ppp_async_encode_~c~3#1[8:0]))[8:0], ppp_async_encode_~tmp___12~0#1.base, ppp_async_encode_~tmp___12~0#1.offset, 1bv64); [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6513: assume !ppp_async_encode_#t~short207#1;havoc ppp_async_encode_#t~mem206#1;havoc ppp_async_encode_#t~short207#1;ppp_async_encode_~tmp___13~0#1.base, ppp_async_encode_~tmp___13~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, ~bvadd~64(1bv64, ppp_async_encode_~buf~0#1.offset);call write~intINTTYPE1#1(ppp_async_encode_~c~3#1[8:0], ppp_async_encode_~tmp___13~0#1.base, ppp_async_encode_~tmp___13~0#1.offset, 1bv64); [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6637: assume 0bv32 != ~tmp___1~4#1; [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6637: assume !(0bv32 != ~tmp___1~4#1); [2025-02-08 02:49:56,565 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6662: call #t~mem245#1.base, #t~mem245#1.offset := read~$Pointer$#1(~ap#1.base, ~bvadd~64(212bv64, ~ap#1.offset), 8bv64); [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6530: assume ~bvslt~32(ppp_async_encode_~i~0#1, ppp_async_encode_~count~0#1);call write~$Pointer$#1(ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset, ppp_async_encode_~ap#1.base, ~bvadd~64(234bv64, ppp_async_encode_~ap#1.offset), 8bv64);call write~intINTTYPE4#1(ppp_async_encode_~i~0#1, ppp_async_encode_~ap#1.base, ~bvadd~64(220bv64, ppp_async_encode_~ap#1.offset), 4bv64);call write~intINTTYPE2#1(ppp_async_encode_~fcs~0#1[16:0], ppp_async_encode_~ap#1.base, ~bvadd~64(224bv64, ppp_async_encode_~ap#1.offset), 2bv64);ppp_async_encode_#res#1 := 0bv32; [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6530: assume !~bvslt~32(ppp_async_encode_~i~0#1, ppp_async_encode_~count~0#1);ppp_async_encode_~fcs~0#1 := ~bvnot~32(ppp_async_encode_~fcs~0#1);ppp_async_encode_~c~3#1 := ~bvand~32(255bv32, ppp_async_encode_~fcs~0#1);ppp_async_encode_#t~short209#1 := 0bv32 != ppp_async_encode_~islcp~0#1 && ~bvsle~32(ppp_async_encode_~c~3#1, 31bv32); [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6662-1: SUMMARY for call clear_bit(2bv64, ~ap#1.base, ~bvadd~64(160bv64, ~ap#1.offset)); srcloc: null [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6671-1: SUMMARY for call spin_unlock_bh(~ap#1.base, ~bvadd~64(24bv64, ~ap#1.offset)); srcloc: null [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6638: ~done~0#1 := 1bv32; [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6671: #res#1 := ~done~0#1; [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-1: assume ppp_async_encode_#t~short209#1; [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539-1: assume !ppp_async_encode_#t~short209#1;call ppp_async_encode_#t~mem208#1 := read~intINTTYPE4#1(ppp_async_encode_~ap#1.base, ~bvadd~64(~bvadd~64(168bv64, ppp_async_encode_~ap#1.offset), ~bvmul~64(4bv64, ~sign_extend~64~32(~bvashr~32(ppp_async_encode_~c~3#1, 5bv32)))), 4bv64);ppp_async_encode_#t~short209#1 := 0bv32 != ~bvand~32(ppp_async_encode_#t~mem208#1, ~bvshl~32(1bv32, ~bvand~32(31bv32, ppp_async_encode_~c~3#1))); [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539: assume ppp_async_encode_#t~short209#1;havoc ppp_async_encode_#t~mem208#1;havoc ppp_async_encode_#t~short209#1;ppp_async_encode_~tmp___14~0#1.base, ppp_async_encode_~tmp___14~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, ~bvadd~64(1bv64, ppp_async_encode_~buf~0#1.offset);call write~intINTTYPE1#1(125bv8, ppp_async_encode_~tmp___14~0#1.base, ppp_async_encode_~tmp___14~0#1.offset, 1bv64);ppp_async_encode_~tmp___15~0#1.base, ppp_async_encode_~tmp___15~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, ~bvadd~64(1bv64, ppp_async_encode_~buf~0#1.offset);call write~intINTTYPE1#1(~bvxor~32(32bv32, ~sign_extend~32~8(ppp_async_encode_~c~3#1[8:0]))[8:0], ppp_async_encode_~tmp___15~0#1.base, ppp_async_encode_~tmp___15~0#1.offset, 1bv64); [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6539: assume !ppp_async_encode_#t~short209#1;havoc ppp_async_encode_#t~mem208#1;havoc ppp_async_encode_#t~short209#1;ppp_async_encode_~tmp___16~0#1.base, ppp_async_encode_~tmp___16~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, ~bvadd~64(1bv64, ppp_async_encode_~buf~0#1.offset);call write~intINTTYPE1#1(ppp_async_encode_~c~3#1[8:0], ppp_async_encode_~tmp___16~0#1.base, ppp_async_encode_~tmp___16~0#1.offset, 1bv64); [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6638-1: SUMMARY for call clear_bit(1bv64, ~ap#1.base, ~bvadd~64(160bv64, ~ap#1.offset)); srcloc: null [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6663: assume 0bv64 != ~bvadd~64(#t~mem245#1.base, #t~mem245#1.offset);havoc #t~mem245#1.base, #t~mem245#1.offset;call #t~mem246#1.base, #t~mem246#1.offset := read~$Pointer$#1(~ap#1.base, ~bvadd~64(212bv64, ~ap#1.offset), 8bv64);assume { :begin_inline_ldv_kfree_skb_16 } true;ldv_kfree_skb_16_#in~ldv_func_arg1#1.base, ldv_kfree_skb_16_#in~ldv_func_arg1#1.offset := #t~mem246#1.base, #t~mem246#1.offset;havoc ldv_kfree_skb_16_~ldv_func_arg1#1.base, ldv_kfree_skb_16_~ldv_func_arg1#1.offset;ldv_kfree_skb_16_~ldv_func_arg1#1.base, ldv_kfree_skb_16_~ldv_func_arg1#1.offset := ldv_kfree_skb_16_#in~ldv_func_arg1#1.base, ldv_kfree_skb_16_#in~ldv_func_arg1#1.offset; [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6663: assume !(0bv64 != ~bvadd~64(#t~mem245#1.base, #t~mem245#1.offset));havoc #t~mem245#1.base, #t~mem245#1.offset; [2025-02-08 02:49:56,566 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6564: ppp_async_encode_~tmp___20~0#1.base, ppp_async_encode_~tmp___20~0#1.offset := ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset;ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset := ppp_async_encode_~buf~0#1.base, ~bvadd~64(1bv64, ppp_async_encode_~buf~0#1.offset);call write~intINTTYPE1#1(126bv8, ppp_async_encode_~tmp___20~0#1.base, ppp_async_encode_~tmp___20~0#1.offset, 1bv64);call write~$Pointer$#1(ppp_async_encode_~buf~0#1.base, ppp_async_encode_~buf~0#1.offset, ppp_async_encode_~ap#1.base, ~bvadd~64(234bv64, ppp_async_encode_~ap#1.offset), 8bv64);call ppp_async_encode_#t~mem212#1.base, ppp_async_encode_#t~mem212#1.offset := read~$Pointer$#1(ppp_async_encode_~ap#1.base, ~bvadd~64(212bv64, ppp_async_encode_~ap#1.offset), 8bv64);assume { :begin_inline_ldv_consume_skb_15 } true;ldv_consume_skb_15_#in~ldv_func_arg1#1.base, ldv_consume_skb_15_#in~ldv_func_arg1#1.offset := ppp_async_encode_#t~mem212#1.base, ppp_async_encode_#t~mem212#1.offset;havoc ldv_consume_skb_15_~ldv_func_arg1#1.base, ldv_consume_skb_15_~ldv_func_arg1#1.offset;ldv_consume_skb_15_~ldv_func_arg1#1.base, ldv_consume_skb_15_~ldv_func_arg1#1.offset := ldv_consume_skb_15_#in~ldv_func_arg1#1.base, ldv_consume_skb_15_#in~ldv_func_arg1#1.offset; [2025-02-08 02:49:56,567 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6507-1: assume ppp_async_encode_#t~short204#1;call ppp_async_encode_#t~mem203#1 := read~intINTTYPE4#1(ppp_async_encode_~ap#1.base, ~bvadd~64(8bv64, ppp_async_encode_~ap#1.offset), 4bv64);ppp_async_encode_#t~short204#1 := 0bv32 != ~bvand~32(1bv32, ppp_async_encode_#t~mem203#1); [2025-02-08 02:49:56,567 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6507-1: assume !ppp_async_encode_#t~short204#1; [2025-02-08 02:49:56,567 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6507: assume ppp_async_encode_#t~short204#1;havoc ppp_async_encode_#t~mem203#1;havoc ppp_async_encode_#t~short204#1; [2025-02-08 02:49:56,567 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6507: assume !ppp_async_encode_#t~short204#1;havoc ppp_async_encode_#t~mem203#1;havoc ppp_async_encode_#t~short204#1; [2025-02-08 02:49:56,567 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6664: havoc ldv_kfree_skb_16_~ldv_func_arg1#1.base, ldv_kfree_skb_16_~ldv_func_arg1#1.offset;havoc ldv_kfree_skb_16_#in~ldv_func_arg1#1.base, ldv_kfree_skb_16_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_kfree_skb_16 } true;havoc #t~mem246#1.base, #t~mem246#1.offset;call write~$Pointer$#1(0bv64, 0bv64, ~ap#1.base, ~bvadd~64(212bv64, ~ap#1.offset), 8bv64); [2025-02-08 02:49:56,567 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6666: ~done~0#1 := 1bv32; [2025-02-08 02:49:56,567 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6666-1: SUMMARY for call clear_bit(1bv64, ~ap#1.base, ~bvadd~64(160bv64, ~ap#1.offset)); srcloc: null [2025-02-08 02:49:56,568 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder has thrown an exception: java.lang.ArrayIndexOutOfBoundsException: Index -1 out of bounds for length 2 at de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.cfg.CfgBuilder$ProcedureCfgBuilder.buildCodeBlock(CfgBuilder.java:761) at de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.cfg.CfgBuilder$ProcedureCfgBuilder.buildCodeBlock(CfgBuilder.java:742) at de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.cfg.CfgBuilder$ProcedureCfgBuilder.buildProcedureCfgFromImplementation(CfgBuilder.java:676) at de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.cfg.CfgBuilder.createIcfg(CfgBuilder.java:291) at de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.IcfgBuilderObserver.process(IcfgBuilderObserver.java:88) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.DFSTreeWalker.runObserver(DFSTreeWalker.java:65) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.runObserver(BaseWalker.java:93) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.run(BaseWalker.java:86) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:166) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:150) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:127) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:233) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:227) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:144) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:106) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:319) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2025-02-08 02:49:56,572 INFO L158 Benchmark]: Toolchain (without parser) took 2952.08ms. Allocated memory was 142.6MB in the beginning and 151.0MB in the end (delta: 8.4MB). Free memory was 106.8MB in the beginning and 47.7MB in the end (delta: 59.1MB). Peak memory consumption was 84.0MB. Max. memory is 16.1GB. [2025-02-08 02:49:56,573 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 117.4MB. Free memory is still 82.0MB. There was no memory consumed. Max. memory is 16.1GB. [2025-02-08 02:49:56,573 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1456.46ms. Allocated memory was 142.6MB in the beginning and 151.0MB in the end (delta: 8.4MB). Free memory was 106.8MB in the beginning and 90.0MB in the end (delta: 16.8MB). Peak memory consumption was 100.5MB. Max. memory is 16.1GB. [2025-02-08 02:49:56,573 INFO L158 Benchmark]: Boogie Procedure Inliner took 96.87ms. Allocated memory is still 151.0MB. Free memory was 90.0MB in the beginning and 76.9MB in the end (delta: 13.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2025-02-08 02:49:56,573 INFO L158 Benchmark]: Boogie Preprocessor took 334.98ms. Allocated memory is still 151.0MB. Free memory was 76.9MB in the beginning and 53.3MB in the end (delta: 23.5MB). Peak memory consumption was 54.0MB. Max. memory is 16.1GB. [2025-02-08 02:49:56,573 INFO L158 Benchmark]: IcfgBuilder took 1054.74ms. Allocated memory is still 151.0MB. Free memory was 53.3MB in the beginning and 47.7MB in the end (delta: 5.6MB). Peak memory consumption was 24.3MB. Max. memory is 16.1GB. [2025-02-08 02:49:56,575 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 117.4MB. Free memory is still 82.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1456.46ms. Allocated memory was 142.6MB in the beginning and 151.0MB in the end (delta: 8.4MB). Free memory was 106.8MB in the beginning and 90.0MB in the end (delta: 16.8MB). Peak memory consumption was 100.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 96.87ms. Allocated memory is still 151.0MB. Free memory was 90.0MB in the beginning and 76.9MB in the end (delta: 13.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 334.98ms. Allocated memory is still 151.0MB. Free memory was 76.9MB in the beginning and 53.3MB in the end (delta: 23.5MB). Peak memory consumption was 54.0MB. Max. memory is 16.1GB. * IcfgBuilder took 1054.74ms. Allocated memory is still 151.0MB. Free memory was 53.3MB in the beginning and 47.7MB in the end (delta: 5.6MB). Peak memory consumption was 24.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder: - ExceptionOrErrorResult: ArrayIndexOutOfBoundsException: Index -1 out of bounds for length 2 de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder: ArrayIndexOutOfBoundsException: Index -1 out of bounds for length 2: de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.cfg.CfgBuilder$ProcedureCfgBuilder.buildCodeBlock(CfgBuilder.java:761) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 5282]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [5282] - GenericResultAtLocation [Line: 5289]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; btr %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr)); [5289] - GenericResultAtLocation [Line: 5297]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5297-5298] - GenericResultAtLocation [Line: 5306]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; btr %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5306-5307] - GenericResultAtLocation [Line: 5320]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [5320] - GenericResultAtLocation [Line: 5383]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [5383] - GenericResultAtLocation [Line: 5391]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; decl %0; sete %1": "+m" (v->counter), "=qm" (c): : "memory"); [5391-5392] - GenericResultAtLocation [Line: 5963]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5963] - GenericResultAtLocation [Line: 5966]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5966] - GenericResultAtLocation [Line: 5969]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5969] - GenericResultAtLocation [Line: 5972]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5972] - GenericResultAtLocation [Line: 5975]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [5975] - GenericResultAtLocation [Line: 5991]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5991-5992] - GenericResultAtLocation [Line: 5995]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5995-5996] - GenericResultAtLocation [Line: 5999]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [5999-6000] - GenericResultAtLocation [Line: 6003]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [6003-6004] - GenericResultAtLocation [Line: 6007]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" (p): "ebx"); [6007-6008] - GenericResultAtLocation [Line: 6031]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6031-6032] - GenericResultAtLocation [Line: 6035]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6035-6036] - GenericResultAtLocation [Line: 6039]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6039-6040] - GenericResultAtLocation [Line: 6043]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6043-6044] - GenericResultAtLocation [Line: 6047]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" (p): "ebx"); [6047-6048] - GenericResultAtLocation [Line: 6176]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6176] - GenericResultAtLocation [Line: 6179]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6179] - GenericResultAtLocation [Line: 6182]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6182] - GenericResultAtLocation [Line: 6185]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6185] - GenericResultAtLocation [Line: 6188]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu): "0" (__pu_val), "c" (p): "ebx"); [6188] - GenericResultAtLocation [Line: 6200]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu), "=r" (__val_gu): "0" (p), "i" (4UL)); [6200-6201] - GenericResultAtLocation [Line: 6218]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6218-6219] - GenericResultAtLocation [Line: 6222]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6222-6223] - GenericResultAtLocation [Line: 6226]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6226-6227] - GenericResultAtLocation [Line: 6230]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6230-6231] - GenericResultAtLocation [Line: 6234]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u32 *)argp): "ebx"); [6234-6235] - GenericResultAtLocation [Line: 6247]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___0), "=r" (__val_gu___0): "0" ((u32 *)argp), "i" (4UL)); [6247-6248] - GenericResultAtLocation [Line: 6261]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6261-6262] - GenericResultAtLocation [Line: 6265]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6265-6266] - GenericResultAtLocation [Line: 6269]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6269-6270] - GenericResultAtLocation [Line: 6273]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6273-6274] - GenericResultAtLocation [Line: 6277]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___1): "0" (__pu_val___1), "c" ((u32 *)argp): "ebx"); [6277-6278] - GenericResultAtLocation [Line: 6290]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___1), "=r" (__val_gu___1): "0" ((u32 *)argp), "i" (4UL)); [6290-6291] - GenericResultAtLocation [Line: 6328]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6328-6329] - GenericResultAtLocation [Line: 6332]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6332-6333] - GenericResultAtLocation [Line: 6336]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6336-6337] - GenericResultAtLocation [Line: 6340]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6340-6341] - GenericResultAtLocation [Line: 6344]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu___2): "0" (__pu_val___2), "c" (p): "ebx"); [6344-6345] - GenericResultAtLocation [Line: 6357]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_%P3": "=a" (__ret_gu___2), "=r" (__val_gu___2): "0" (p), "i" (4UL)); [6357-6358] RESULT: Ultimate could not prove your program: Toolchain returned no result. [2025-02-08 02:49:56,594 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: ArrayIndexOutOfBoundsException: Index -1 out of bounds for length 2