./Ultimate.py --spec ../sv-benchmarks/c/properties/no-overflow.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for overflows Using default analysis Version 798a7b37 Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Overflow-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! overflow) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 6c4ab0d347d6c58a2b5191b2f18450c386609151b3047d9385b0116d6b1677b6 --- Real Ultimate output --- This is Ultimate 0.3.0-?-798a7b3-m [2025-03-04 11:36:14,050 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-03-04 11:36:14,099 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Overflow-64bit-Automizer_Default.epf [2025-03-04 11:36:14,102 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-03-04 11:36:14,103 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-03-04 11:36:14,119 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-03-04 11:36:14,120 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-03-04 11:36:14,120 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-03-04 11:36:14,120 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-03-04 11:36:14,120 INFO L153 SettingsManager]: * Use memory slicer=true [2025-03-04 11:36:14,120 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-03-04 11:36:14,121 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-03-04 11:36:14,121 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-03-04 11:36:14,121 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-03-04 11:36:14,121 INFO L153 SettingsManager]: * Use SBE=true [2025-03-04 11:36:14,121 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-03-04 11:36:14,121 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-03-04 11:36:14,121 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-03-04 11:36:14,121 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * Check absence of signed integer overflows=ASSERTandASSUME [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * Use constant arrays=true [2025-03-04 11:36:14,122 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-03-04 11:36:14,122 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-03-04 11:36:14,123 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-03-04 11:36:14,123 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-03-04 11:36:14,123 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-03-04 11:36:14,123 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-03-04 11:36:14,123 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-03-04 11:36:14,123 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-03-04 11:36:14,123 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-03-04 11:36:14,123 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-03-04 11:36:14,123 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-03-04 11:36:14,123 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-03-04 11:36:14,124 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-03-04 11:36:14,124 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! overflow) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6c4ab0d347d6c58a2b5191b2f18450c386609151b3047d9385b0116d6b1677b6 [2025-03-04 11:36:14,354 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-03-04 11:36:14,363 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-03-04 11:36:14,366 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-03-04 11:36:14,367 INFO L270 PluginConnector]: Initializing CDTParser... [2025-03-04 11:36:14,367 INFO L274 PluginConnector]: CDTParser initialized [2025-03-04 11:36:14,369 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i [2025-03-04 11:36:15,540 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9e8d129e3/7e2b2b2a02a3475492fd387077fb24b1/FLAG9f6009089 [2025-03-04 11:36:16,043 INFO L384 CDTParser]: Found 1 translation units. [2025-03-04 11:36:16,044 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i [2025-03-04 11:36:16,073 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9e8d129e3/7e2b2b2a02a3475492fd387077fb24b1/FLAG9f6009089 [2025-03-04 11:36:16,109 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9e8d129e3/7e2b2b2a02a3475492fd387077fb24b1 [2025-03-04 11:36:16,111 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-03-04 11:36:16,112 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-03-04 11:36:16,114 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-03-04 11:36:16,114 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-03-04 11:36:16,117 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-03-04 11:36:16,118 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 04.03 11:36:16" (1/1) ... [2025-03-04 11:36:16,119 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2a5388c3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:16, skipping insertion in model container [2025-03-04 11:36:16,119 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 04.03 11:36:16" (1/1) ... [2025-03-04 11:36:16,192 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-03-04 11:36:16,619 WARN L1383 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [5877] [2025-03-04 11:36:16,619 WARN L1383 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [5878-5879] [2025-03-04 11:36:17,506 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-04 11:36:17,524 INFO L200 MainTranslator]: Completed pre-run [2025-03-04 11:36:17,646 WARN L1383 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [5877] [2025-03-04 11:36:17,646 WARN L1383 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [5878-5879] [2025-03-04 11:36:17,649 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5960-5961] [2025-03-04 11:36:17,655 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; addl %1,%0": "+m" (v->counter): "ir" (i)); [6015] [2025-03-04 11:36:17,831 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-04 11:36:17,868 INFO L204 MainTranslator]: Completed translation [2025-03-04 11:36:17,869 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17 WrapperNode [2025-03-04 11:36:17,870 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-03-04 11:36:17,871 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-03-04 11:36:17,871 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-03-04 11:36:17,871 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-03-04 11:36:17,875 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:17,927 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,003 INFO L138 Inliner]: procedures = 168, calls = 1550, calls flagged for inlining = 61, calls inlined = 45, statements flattened = 2818 [2025-03-04 11:36:18,003 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-03-04 11:36:18,004 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-03-04 11:36:18,004 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-03-04 11:36:18,004 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-03-04 11:36:18,010 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,011 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,022 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,182 INFO L175 MemorySlicer]: Split 733 memory accesses to 18 slices as follows [2, 29, 203, 1, 0, 182, 232, 7, 2, 8, 1, 21, 11, 8, 8, 8, 2, 8]. 32 percent of accesses are in the largest equivalence class. The 274 initializations are split as follows [2, 0, 0, 0, 0, 8, 232, 0, 0, 8, 0, 0, 0, 8, 0, 8, 0, 8]. The 279 writes are split as follows [0, 8, 174, 0, 0, 60, 0, 0, 1, 0, 0, 21, 11, 0, 4, 0, 0, 0]. [2025-03-04 11:36:18,186 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,186 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,258 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,266 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,284 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,293 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,319 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-03-04 11:36:18,321 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-03-04 11:36:18,321 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-03-04 11:36:18,321 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-03-04 11:36:18,322 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (1/1) ... [2025-03-04 11:36:18,326 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-03-04 11:36:18,357 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 11:36:18,369 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-03-04 11:36:18,372 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-03-04 11:36:18,388 INFO L130 BoogieDeclarations]: Found specification of procedure nla_get_u32 [2025-03-04 11:36:18,389 INFO L138 BoogieDeclarations]: Found implementation of procedure nla_get_u32 [2025-03-04 11:36:18,389 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2025-03-04 11:36:18,389 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2025-03-04 11:36:18,389 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#0 [2025-03-04 11:36:18,389 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#1 [2025-03-04 11:36:18,389 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#2 [2025-03-04 11:36:18,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#3 [2025-03-04 11:36:18,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#4 [2025-03-04 11:36:18,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#5 [2025-03-04 11:36:18,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#6 [2025-03-04 11:36:18,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#7 [2025-03-04 11:36:18,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#8 [2025-03-04 11:36:18,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#9 [2025-03-04 11:36:18,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#10 [2025-03-04 11:36:18,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#11 [2025-03-04 11:36:18,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#12 [2025-03-04 11:36:18,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#13 [2025-03-04 11:36:18,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#14 [2025-03-04 11:36:18,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#15 [2025-03-04 11:36:18,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#16 [2025-03-04 11:36:18,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#17 [2025-03-04 11:36:18,391 INFO L130 BoogieDeclarations]: Found specification of procedure lookup_flow [2025-03-04 11:36:18,391 INFO L138 BoogieDeclarations]: Found implementation of procedure lookup_flow [2025-03-04 11:36:18,391 INFO L130 BoogieDeclarations]: Found specification of procedure qdisc_create_dflt [2025-03-04 11:36:18,392 INFO L138 BoogieDeclarations]: Found implementation of procedure qdisc_create_dflt [2025-03-04 11:36:18,392 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#0 [2025-03-04 11:36:18,392 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#1 [2025-03-04 11:36:18,392 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#2 [2025-03-04 11:36:18,393 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#3 [2025-03-04 11:36:18,393 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#4 [2025-03-04 11:36:18,393 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#5 [2025-03-04 11:36:18,393 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#6 [2025-03-04 11:36:18,393 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#7 [2025-03-04 11:36:18,393 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#8 [2025-03-04 11:36:18,393 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#9 [2025-03-04 11:36:18,393 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#10 [2025-03-04 11:36:18,393 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#11 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#12 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#13 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#14 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#15 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#16 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#17 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#4 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#5 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#6 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#7 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#8 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#9 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#10 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#11 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#12 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#13 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#14 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#15 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#16 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#17 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2025-03-04 11:36:18,394 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#6 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#7 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#8 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#9 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#10 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#11 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#12 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#13 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#14 [2025-03-04 11:36:18,394 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#15 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#16 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#17 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure qdisc_reset [2025-03-04 11:36:18,395 INFO L138 BoogieDeclarations]: Found implementation of procedure qdisc_reset [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure nla_put_u32 [2025-03-04 11:36:18,395 INFO L138 BoogieDeclarations]: Found implementation of procedure nla_put_u32 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_dump_class [2025-03-04 11:36:18,395 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_dump_class [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#0 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#1 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#2 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#3 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#4 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#5 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#6 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#7 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#8 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#9 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#10 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#11 [2025-03-04 11:36:18,395 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#12 [2025-03-04 11:36:18,396 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#13 [2025-03-04 11:36:18,396 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#14 [2025-03-04 11:36:18,396 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#15 [2025-03-04 11:36:18,396 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#16 [2025-03-04 11:36:18,396 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#17 [2025-03-04 11:36:18,396 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#0 [2025-03-04 11:36:18,396 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#1 [2025-03-04 11:36:18,396 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#2 [2025-03-04 11:36:18,396 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#3 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#4 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#5 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#6 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#7 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#8 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#9 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#10 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#11 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#12 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#13 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#14 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#15 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#16 [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#17 [2025-03-04 11:36:18,397 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-03-04 11:36:18,397 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-03-04 11:36:18,397 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_change [2025-03-04 11:36:18,398 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_change [2025-03-04 11:36:18,398 INFO L130 BoogieDeclarations]: Found specification of procedure constant_test_bit [2025-03-04 11:36:18,398 INFO L138 BoogieDeclarations]: Found implementation of procedure constant_test_bit [2025-03-04 11:36:18,398 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_dump_class_stats [2025-03-04 11:36:18,398 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_dump_class_stats [2025-03-04 11:36:18,398 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2025-03-04 11:36:18,398 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2025-03-04 11:36:18,398 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_put [2025-03-04 11:36:18,398 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_put [2025-03-04 11:36:18,398 INFO L130 BoogieDeclarations]: Found specification of procedure qdisc_enqueue [2025-03-04 11:36:18,398 INFO L138 BoogieDeclarations]: Found implementation of procedure qdisc_enqueue [2025-03-04 11:36:18,398 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_bind_filter [2025-03-04 11:36:18,398 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_bind_filter [2025-03-04 11:36:18,398 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2025-03-04 11:36:18,398 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2025-03-04 11:36:18,398 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#6 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#7 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#8 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#9 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#10 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#11 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#12 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#13 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#14 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#15 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#16 [2025-03-04 11:36:18,399 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#17 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_dump [2025-03-04 11:36:18,400 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_dump [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2025-03-04 11:36:18,400 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_drop [2025-03-04 11:36:18,400 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_drop [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_pr_debug [2025-03-04 11:36:18,400 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_pr_debug [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2025-03-04 11:36:18,400 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2025-03-04 11:36:18,400 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_init [2025-03-04 11:36:18,400 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_init [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_get [2025-03-04 11:36:18,400 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_get [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure qdisc_priv [2025-03-04 11:36:18,400 INFO L138 BoogieDeclarations]: Found implementation of procedure qdisc_priv [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure nla_len [2025-03-04 11:36:18,400 INFO L138 BoogieDeclarations]: Found implementation of procedure nla_len [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#7 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#8 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#9 [2025-03-04 11:36:18,400 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#10 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#11 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#12 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#13 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#14 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#15 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#16 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#17 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure nla_put [2025-03-04 11:36:18,401 INFO L138 BoogieDeclarations]: Found implementation of procedure nla_put [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2025-03-04 11:36:18,401 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~int [2025-03-04 11:36:18,401 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~int [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure tasklet_schedule [2025-03-04 11:36:18,401 INFO L138 BoogieDeclarations]: Found implementation of procedure tasklet_schedule [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#7 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#8 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#9 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#10 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#11 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#12 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#13 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#14 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#15 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#16 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#17 [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure qdisc_dequeue_peeked [2025-03-04 11:36:18,401 INFO L138 BoogieDeclarations]: Found implementation of procedure qdisc_dequeue_peeked [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_walk [2025-03-04 11:36:18,401 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_walk [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_delete [2025-03-04 11:36:18,401 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_delete [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_find_tcf [2025-03-04 11:36:18,401 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_find_tcf [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_long_read [2025-03-04 11:36:18,401 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_long_read [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~$Pointer$ [2025-03-04 11:36:18,401 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~$Pointer$ [2025-03-04 11:36:18,401 INFO L130 BoogieDeclarations]: Found specification of procedure list_add [2025-03-04 11:36:18,402 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add [2025-03-04 11:36:18,402 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_reset [2025-03-04 11:36:18,402 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_reset [2025-03-04 11:36:18,403 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-03-04 11:36:18,403 INFO L130 BoogieDeclarations]: Found specification of procedure tcf_destroy_chain [2025-03-04 11:36:18,403 INFO L138 BoogieDeclarations]: Found implementation of procedure tcf_destroy_chain [2025-03-04 11:36:18,403 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2025-03-04 11:36:18,403 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2025-03-04 11:36:18,403 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_dequeue [2025-03-04 11:36:18,403 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_dequeue [2025-03-04 11:36:18,403 INFO L130 BoogieDeclarations]: Found specification of procedure kfree_skb [2025-03-04 11:36:18,403 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree_skb [2025-03-04 11:36:18,403 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_enqueue [2025-03-04 11:36:18,403 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_enqueue [2025-03-04 11:36:18,403 INFO L130 BoogieDeclarations]: Found specification of procedure nla_data [2025-03-04 11:36:18,403 INFO L138 BoogieDeclarations]: Found implementation of procedure nla_data [2025-03-04 11:36:18,403 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_peek [2025-03-04 11:36:18,403 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_peek [2025-03-04 11:36:18,403 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_leaf [2025-03-04 11:36:18,403 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_leaf [2025-03-04 11:36:18,403 INFO L130 BoogieDeclarations]: Found specification of procedure fput [2025-03-04 11:36:18,404 INFO L138 BoogieDeclarations]: Found implementation of procedure fput [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2025-03-04 11:36:18,404 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_destroy [2025-03-04 11:36:18,404 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_destroy [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure atm_tc_graft [2025-03-04 11:36:18,404 INFO L138 BoogieDeclarations]: Found implementation of procedure atm_tc_graft [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure skb_tail_pointer [2025-03-04 11:36:18,404 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_tail_pointer [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#0 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#1 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#2 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#3 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#4 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#5 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#6 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#7 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#8 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#9 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#10 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#11 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#12 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#13 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#14 [2025-03-04 11:36:18,404 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#15 [2025-03-04 11:36:18,405 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#16 [2025-03-04 11:36:18,405 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#17 [2025-03-04 11:36:18,405 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2025-03-04 11:36:18,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2025-03-04 11:36:18,405 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-03-04 11:36:18,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-03-04 11:36:18,886 INFO L256 CfgBuilder]: Building ICFG [2025-03-04 11:36:18,888 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2025-03-04 11:36:19,140 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6271: havoc #t~mem90; [2025-03-04 11:36:19,346 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8527: havoc #t~ret613.base, #t~ret613.offset; [2025-03-04 11:36:19,396 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2025-03-04 11:36:19,406 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6258: call ULTIMATE.dealloc(~#value.base, ~#value.offset);havoc ~#value.base, ~#value.offset; [2025-03-04 11:36:19,899 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6989: havoc #t~mem285#1;call ULTIMATE.dealloc(~#tb~0#1.base, ~#tb~0#1.offset);havoc ~#tb~0#1.base, ~#tb~0#1.offset;call ULTIMATE.dealloc(~#error~0#1.base, ~#error~0#1.offset);havoc ~#error~0#1.base, ~#error~0#1.offset;call ULTIMATE.dealloc(~#descriptor~5#1.base, ~#descriptor~5#1.offset);havoc ~#descriptor~5#1.base, ~#descriptor~5#1.offset;call ULTIMATE.dealloc(~#descriptor___0~2#1.base, ~#descriptor___0~2#1.offset);havoc ~#descriptor___0~2#1.base, ~#descriptor___0~2#1.offset;call ULTIMATE.dealloc(~#descriptor___1~1#1.base, ~#descriptor___1~1#1.offset);havoc ~#descriptor___1~1#1.base, ~#descriptor___1~1#1.offset;call ULTIMATE.dealloc(~#descriptor___2~1#1.base, ~#descriptor___2~1#1.offset);havoc ~#descriptor___2~1#1.base, ~#descriptor___2~1#1.offset;call ULTIMATE.dealloc(~#descriptor___3~0#1.base, ~#descriptor___3~0#1.offset);havoc ~#descriptor___3~0#1.base, ~#descriptor___3~0#1.offset;call ULTIMATE.dealloc(~#descriptor___4~0#1.base, ~#descriptor___4~0#1.offset);havoc ~#descriptor___4~0#1.base, ~#descriptor___4~0#1.offset;call ULTIMATE.dealloc(~#descriptor___5~0#1.base, ~#descriptor___5~0#1.offset);havoc ~#descriptor___5~0#1.base, ~#descriptor___5~0#1.offset;call ULTIMATE.dealloc(~#descriptor___6~0#1.base, ~#descriptor___6~0#1.offset);havoc ~#descriptor___6~0#1.base, ~#descriptor___6~0#1.offset;call ULTIMATE.dealloc(~#descriptor___7~0#1.base, ~#descriptor___7~0#1.offset);havoc ~#descriptor___7~0#1.base, ~#descriptor___7~0#1.offset; [2025-03-04 11:36:19,899 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6843: havoc #t~mem238#1; [2025-03-04 11:36:19,899 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8512: havoc nla_parse_#t~nondet609#1; [2025-03-04 11:36:19,899 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8562: havoc sockfd_lookup_#t~ret621#1.base, sockfd_lookup_#t~ret621#1.offset; [2025-03-04 11:36:19,899 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6790: havoc #t~mem216#1; [2025-03-04 11:36:19,920 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8478: havoc gnet_stats_copy_basic_#t~nondet603#1; [2025-03-04 11:36:19,920 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8482: havoc gnet_stats_copy_queue_#t~nondet604#1; [2025-03-04 11:36:20,022 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6598: call ULTIMATE.dealloc(~#descriptor~3#1.base, ~#descriptor~3#1.offset);havoc ~#descriptor~3#1.base, ~#descriptor~3#1.offset;call ULTIMATE.dealloc(~#descriptor___0~1#1.base, ~#descriptor___0~1#1.offset);havoc ~#descriptor___0~1#1.base, ~#descriptor___0~1#1.offset;call ULTIMATE.dealloc(~#descriptor___1~0#1.base, ~#descriptor___1~0#1.offset);havoc ~#descriptor___1~0#1.base, ~#descriptor___1~0#1.offset;call ULTIMATE.dealloc(~#descriptor___2~0#1.base, ~#descriptor___2~0#1.offset);havoc ~#descriptor___2~0#1.base, ~#descriptor___2~0#1.offset; [2025-03-04 11:36:20,042 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8537: havoc rcu_read_lock_bh_held_#t~nondet614#1; [2025-03-04 11:36:20,043 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8471: havoc debug_lockdep_rcu_enabled_#t~nondet602#1; [2025-03-04 11:36:20,086 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L7425: call ULTIMATE.dealloc(~#descriptor~13.base, ~#descriptor~13.offset);havoc ~#descriptor~13.base, ~#descriptor~13.offset; [2025-03-04 11:36:20,185 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L7469: call ULTIMATE.dealloc(~#descriptor~14#1.base, ~#descriptor~14#1.offset);havoc ~#descriptor~14#1.base, ~#descriptor~14#1.offset;call ULTIMATE.dealloc(~#descriptor___0~4#1.base, ~#descriptor___0~4#1.offset);havoc ~#descriptor___0~4#1.base, ~#descriptor___0~4#1.offset; [2025-03-04 11:36:20,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6546: call ULTIMATE.dealloc(~#descriptor~2.base, ~#descriptor~2.offset);havoc ~#descriptor~2.base, ~#descriptor~2.offset;call ULTIMATE.dealloc(~#descriptor___0~0.base, ~#descriptor___0~0.offset);havoc ~#descriptor___0~0.base, ~#descriptor___0~0.offset; [2025-03-04 11:36:20,515 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6242: havoc #t~mem84; [2025-03-04 11:36:20,762 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L7043: call ULTIMATE.dealloc(~#descriptor~7#1.base, ~#descriptor~7#1.offset);havoc ~#descriptor~7#1.base, ~#descriptor~7#1.offset; [2025-03-04 11:36:20,770 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8520: havoc #t~nondet611; [2025-03-04 11:36:20,800 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L7369: call ULTIMATE.dealloc(~#descriptor~11.base, ~#descriptor~11.offset);havoc ~#descriptor~11.base, ~#descriptor~11.offset; [2025-03-04 11:36:20,829 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L7398: call ULTIMATE.dealloc(~#descriptor~12.base, ~#descriptor~12.offset);havoc ~#descriptor~12.base, ~#descriptor~12.offset; [2025-03-04 11:36:20,852 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6538: havoc #t~ite157.base, #t~ite157.offset;havoc #t~mem156.base, #t~mem156.offset;call ULTIMATE.dealloc(~#descriptor~1.base, ~#descriptor~1.offset);havoc ~#descriptor~1.base, ~#descriptor~1.offset; [2025-03-04 11:36:20,872 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6001: havoc #t~mem11.base, #t~mem11.offset; [2025-03-04 11:36:20,982 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6296: havoc nla_nest_end_#t~mem94#1; [2025-03-04 11:36:20,982 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L7626: call ULTIMATE.dealloc(~#descriptor~17#1.base, ~#descriptor~17#1.offset);havoc ~#descriptor~17#1.base, ~#descriptor~17#1.offset;call ULTIMATE.dealloc(~#pvc~0#1.base, ~#pvc~0#1.offset);havoc ~#pvc~0#1.base, ~#pvc~0#1.offset; [2025-03-04 11:36:20,989 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L5968: havoc #t~mem1;havoc #t~bitwise2; [2025-03-04 11:36:21,005 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8442: havoc #t~nondet598; [2025-03-04 11:36:21,010 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8516: havoc #t~nondet610; [2025-03-04 11:36:21,047 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6997: call ULTIMATE.dealloc(~#descriptor~6.base, ~#descriptor~6.offset);havoc ~#descriptor~6.base, ~#descriptor~6.offset; [2025-03-04 11:36:21,074 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L7097: call ULTIMATE.dealloc(~#descriptor~8.base, ~#descriptor~8.offset);havoc ~#descriptor~8.base, ~#descriptor~8.offset; [2025-03-04 11:36:21,079 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6022: havoc atomic64_read_#t~mem19#1; [2025-03-04 11:36:21,118 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L7523: call ULTIMATE.dealloc(~#descriptor~15.base, ~#descriptor~15.offset);havoc ~#descriptor~15.base, ~#descriptor~15.offset; [2025-03-04 11:36:21,194 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8572: havoc tc_classify_compat_#t~nondet622#1; [2025-03-04 11:36:21,194 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L7123: call ULTIMATE.dealloc(~#res~0#1.base, ~#res~0#1.offset);havoc ~#res~0#1.base, ~#res~0#1.offset;call ULTIMATE.dealloc(~#descriptor~9#1.base, ~#descriptor~9#1.offset);havoc ~#descriptor~9#1.base, ~#descriptor~9#1.offset; [2025-03-04 11:36:21,240 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L7563: call ULTIMATE.dealloc(~#descriptor~16#1.base, ~#descriptor~16#1.offset);havoc ~#descriptor~16#1.base, ~#descriptor~16#1.offset; [2025-03-04 11:36:21,311 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6483: call ULTIMATE.dealloc(~#descriptor~0.base, ~#descriptor~0.offset);havoc ~#descriptor~0.base, ~#descriptor~0.offset; [2025-03-04 11:36:21,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L6179: havoc #t~mem55.base, #t~mem55.offset;havoc #t~mem56; [2025-03-04 11:36:25,588 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8541: havoc register_qdisc_#t~nondet615#1; [2025-03-04 11:36:25,588 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8579: havoc unregister_qdisc_#t~nondet623#1; [2025-03-04 11:36:25,588 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8498: havoc ldv_probe_2_#t~nondet606#1; [2025-03-04 11:36:25,588 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L8502: havoc ldv_setup_1_#t~nondet607#1; [2025-03-04 11:36:25,892 INFO L? ?]: Removed 1174 outVars from TransFormulas that were not future-live. [2025-03-04 11:36:25,892 INFO L307 CfgBuilder]: Performing block encoding [2025-03-04 11:36:25,925 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-03-04 11:36:25,928 INFO L336 CfgBuilder]: Removed 1 assume(true) statements. [2025-03-04 11:36:25,930 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 04.03 11:36:25 BoogieIcfgContainer [2025-03-04 11:36:25,930 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-03-04 11:36:25,931 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2025-03-04 11:36:25,933 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2025-03-04 11:36:25,936 INFO L274 PluginConnector]: TraceAbstraction initialized [2025-03-04 11:36:25,936 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 04.03 11:36:16" (1/3) ... [2025-03-04 11:36:25,937 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2d7d2e52 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 04.03 11:36:25, skipping insertion in model container [2025-03-04 11:36:25,937 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 11:36:17" (2/3) ... [2025-03-04 11:36:25,937 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2d7d2e52 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 04.03 11:36:25, skipping insertion in model container [2025-03-04 11:36:25,938 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 04.03 11:36:25" (3/3) ... [2025-03-04 11:36:25,938 INFO L128 eAbstractionObserver]: Analyzing ICFG 43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i [2025-03-04 11:36:25,950 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2025-03-04 11:36:25,951 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG 43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-net--sched--sch_atm.ko-entry_point.cil.out.i that has 71 procedures, 1057 locations, 1 initial locations, 37 loop locations, and 22 error locations. [2025-03-04 11:36:26,016 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2025-03-04 11:36:26,024 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@498176a4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2025-03-04 11:36:26,024 INFO L334 AbstractCegarLoop]: Starting to check reachability of 22 error locations. [2025-03-04 11:36:26,030 INFO L276 IsEmpty]: Start isEmpty. Operand has 971 states, 683 states have (on average 1.3645680819912152) internal successors, (932), 712 states have internal predecessors, (932), 213 states have call successors, (213), 53 states have call predecessors, (213), 52 states have return successors, (209), 209 states have call predecessors, (209), 209 states have call successors, (209) [2025-03-04 11:36:26,039 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2025-03-04 11:36:26,039 INFO L210 NwaCegarLoop]: Found error trace [2025-03-04 11:36:26,040 INFO L218 NwaCegarLoop]: trace histogram [9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 11:36:26,040 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW === [atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 19 more)] === [2025-03-04 11:36:26,043 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 11:36:26,044 INFO L85 PathProgramCache]: Analyzing trace with hash -595777730, now seen corresponding path program 1 times [2025-03-04 11:36:26,049 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 11:36:26,050 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [775024457] [2025-03-04 11:36:26,050 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 11:36:26,050 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 11:36:26,391 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 72 statements into 1 equivalence classes. [2025-03-04 11:36:26,535 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 72 of 72 statements. [2025-03-04 11:36:26,536 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 11:36:26,536 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 11:36:26,823 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2025-03-04 11:36:26,824 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 11:36:26,824 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [775024457] [2025-03-04 11:36:26,824 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [775024457] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 11:36:26,824 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 11:36:26,825 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-04 11:36:26,826 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [66649950] [2025-03-04 11:36:26,826 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 11:36:26,829 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-04 11:36:26,829 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 11:36:26,845 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-04 11:36:26,845 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 11:36:26,849 INFO L87 Difference]: Start difference. First operand has 971 states, 683 states have (on average 1.3645680819912152) internal successors, (932), 712 states have internal predecessors, (932), 213 states have call successors, (213), 53 states have call predecessors, (213), 52 states have return successors, (209), 209 states have call predecessors, (209), 209 states have call successors, (209) Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2025-03-04 11:36:27,188 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 11:36:27,190 INFO L93 Difference]: Finished difference Result 2561 states and 3614 transitions. [2025-03-04 11:36:27,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-04 11:36:27,193 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 72 [2025-03-04 11:36:27,194 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-04 11:36:27,218 INFO L225 Difference]: With dead ends: 2561 [2025-03-04 11:36:27,219 INFO L226 Difference]: Without dead ends: 1564 [2025-03-04 11:36:27,231 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 11:36:27,234 INFO L435 NwaCegarLoop]: 1346 mSDtfsCounter, 889 mSDsluCounter, 1238 mSDsCounter, 0 mSdLazyCounter, 81 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 889 SdHoareTripleChecker+Valid, 2584 SdHoareTripleChecker+Invalid, 83 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 81 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2025-03-04 11:36:27,238 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [889 Valid, 2584 Invalid, 83 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2025-03-04 11:36:27,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1564 states. [2025-03-04 11:36:27,377 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1564 to 1550. [2025-03-04 11:36:27,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1550 states, 1110 states have (on average 1.3486486486486486) internal successors, (1497), 1131 states have internal predecessors, (1497), 335 states have call successors, (335), 87 states have call predecessors, (335), 87 states have return successors, (335), 334 states have call predecessors, (335), 335 states have call successors, (335) [2025-03-04 11:36:27,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1550 states to 1550 states and 2167 transitions. [2025-03-04 11:36:27,401 INFO L78 Accepts]: Start accepts. Automaton has 1550 states and 2167 transitions. Word has length 72 [2025-03-04 11:36:27,402 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-04 11:36:27,403 INFO L471 AbstractCegarLoop]: Abstraction has 1550 states and 2167 transitions. [2025-03-04 11:36:27,403 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2025-03-04 11:36:27,403 INFO L276 IsEmpty]: Start isEmpty. Operand 1550 states and 2167 transitions. [2025-03-04 11:36:27,409 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2025-03-04 11:36:27,410 INFO L210 NwaCegarLoop]: Found error trace [2025-03-04 11:36:27,411 INFO L218 NwaCegarLoop]: trace histogram [9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 11:36:27,411 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2025-03-04 11:36:27,411 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW === [atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 19 more)] === [2025-03-04 11:36:27,411 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 11:36:27,412 INFO L85 PathProgramCache]: Analyzing trace with hash 203454803, now seen corresponding path program 1 times [2025-03-04 11:36:27,412 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 11:36:27,412 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1696187769] [2025-03-04 11:36:27,412 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 11:36:27,413 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 11:36:27,619 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 78 statements into 1 equivalence classes. [2025-03-04 11:36:27,664 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 78 of 78 statements. [2025-03-04 11:36:27,665 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 11:36:27,665 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 11:36:27,823 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2025-03-04 11:36:27,823 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 11:36:27,823 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1696187769] [2025-03-04 11:36:27,824 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1696187769] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 11:36:27,824 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 11:36:27,824 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-04 11:36:27,824 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [887344558] [2025-03-04 11:36:27,824 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 11:36:27,825 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-04 11:36:27,825 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 11:36:27,825 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-04 11:36:27,825 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 11:36:27,826 INFO L87 Difference]: Start difference. First operand 1550 states and 2167 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2025-03-04 11:36:28,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 11:36:28,020 INFO L93 Difference]: Finished difference Result 3567 states and 4963 transitions. [2025-03-04 11:36:28,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-04 11:36:28,021 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 78 [2025-03-04 11:36:28,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-04 11:36:28,036 INFO L225 Difference]: With dead ends: 3567 [2025-03-04 11:36:28,036 INFO L226 Difference]: Without dead ends: 2038 [2025-03-04 11:36:28,042 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 11:36:28,043 INFO L435 NwaCegarLoop]: 1862 mSDtfsCounter, 650 mSDsluCounter, 1212 mSDsCounter, 0 mSdLazyCounter, 88 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 650 SdHoareTripleChecker+Valid, 3074 SdHoareTripleChecker+Invalid, 90 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 88 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2025-03-04 11:36:28,043 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [650 Valid, 3074 Invalid, 90 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 88 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2025-03-04 11:36:28,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2038 states. [2025-03-04 11:36:28,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2038 to 2028. [2025-03-04 11:36:28,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2028 states, 1461 states have (on average 1.3456536618754278) internal successors, (1966), 1483 states have internal predecessors, (1966), 429 states have call successors, (429), 120 states have call predecessors, (429), 120 states have return successors, (429), 428 states have call predecessors, (429), 429 states have call successors, (429) [2025-03-04 11:36:28,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2028 states to 2028 states and 2824 transitions. [2025-03-04 11:36:28,143 INFO L78 Accepts]: Start accepts. Automaton has 2028 states and 2824 transitions. Word has length 78 [2025-03-04 11:36:28,144 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-04 11:36:28,144 INFO L471 AbstractCegarLoop]: Abstraction has 2028 states and 2824 transitions. [2025-03-04 11:36:28,144 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2025-03-04 11:36:28,144 INFO L276 IsEmpty]: Start isEmpty. Operand 2028 states and 2824 transitions. [2025-03-04 11:36:28,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2025-03-04 11:36:28,146 INFO L210 NwaCegarLoop]: Found error trace [2025-03-04 11:36:28,146 INFO L218 NwaCegarLoop]: trace histogram [12, 12, 12, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 11:36:28,146 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2025-03-04 11:36:28,146 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW === [atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 19 more)] === [2025-03-04 11:36:28,146 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 11:36:28,146 INFO L85 PathProgramCache]: Analyzing trace with hash -247591638, now seen corresponding path program 1 times [2025-03-04 11:36:28,146 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 11:36:28,146 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1934676241] [2025-03-04 11:36:28,146 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 11:36:28,146 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 11:36:28,370 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 103 statements into 1 equivalence classes. [2025-03-04 11:36:28,412 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 103 of 103 statements. [2025-03-04 11:36:28,412 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 11:36:28,412 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 11:36:28,648 INFO L134 CoverageAnalysis]: Checked inductivity of 266 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 266 trivial. 0 not checked. [2025-03-04 11:36:28,649 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 11:36:28,649 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1934676241] [2025-03-04 11:36:28,649 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1934676241] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 11:36:28,649 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 11:36:28,649 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2025-03-04 11:36:28,649 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [560267344] [2025-03-04 11:36:28,649 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 11:36:28,650 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-03-04 11:36:28,650 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 11:36:28,650 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-04 11:36:28,650 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 11:36:28,651 INFO L87 Difference]: Start difference. First operand 2028 states and 2824 transitions. Second operand has 3 states, 2 states have (on average 22.5) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2025-03-04 11:36:28,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 11:36:28,850 INFO L93 Difference]: Finished difference Result 4024 states and 5607 transitions. [2025-03-04 11:36:28,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-04 11:36:28,851 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 22.5) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 103 [2025-03-04 11:36:28,851 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-03-04 11:36:28,871 INFO L225 Difference]: With dead ends: 4024 [2025-03-04 11:36:28,871 INFO L226 Difference]: Without dead ends: 4014 [2025-03-04 11:36:28,873 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 11:36:28,875 INFO L435 NwaCegarLoop]: 1306 mSDtfsCounter, 1274 mSDsluCounter, 1266 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1274 SdHoareTripleChecker+Valid, 2572 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2025-03-04 11:36:28,876 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [1274 Valid, 2572 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2025-03-04 11:36:28,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4014 states. [2025-03-04 11:36:28,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4014 to 4006. [2025-03-04 11:36:28,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4006 states, 2902 states have (on average 1.3407994486560992) internal successors, (3891), 2929 states have internal predecessors, (3891), 848 states have call successors, (848), 238 states have call predecessors, (848), 238 states have return successors, (848), 846 states have call predecessors, (848), 848 states have call successors, (848) [2025-03-04 11:36:28,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4006 states to 4006 states and 5587 transitions. [2025-03-04 11:36:28,998 INFO L78 Accepts]: Start accepts. Automaton has 4006 states and 5587 transitions. Word has length 103 [2025-03-04 11:36:28,999 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-03-04 11:36:28,999 INFO L471 AbstractCegarLoop]: Abstraction has 4006 states and 5587 transitions. [2025-03-04 11:36:28,999 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 22.5) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2025-03-04 11:36:28,999 INFO L276 IsEmpty]: Start isEmpty. Operand 4006 states and 5587 transitions. [2025-03-04 11:36:29,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2025-03-04 11:36:29,003 INFO L210 NwaCegarLoop]: Found error trace [2025-03-04 11:36:29,003 INFO L218 NwaCegarLoop]: trace histogram [12, 12, 12, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 11:36:29,003 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2025-03-04 11:36:29,003 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting atm_tc_putErr1ASSERT_VIOLATIONINTEGER_OVERFLOW === [atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 19 more)] === [2025-03-04 11:36:29,003 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 11:36:29,004 INFO L85 PathProgramCache]: Analyzing trace with hash 118867149, now seen corresponding path program 1 times [2025-03-04 11:36:29,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 11:36:29,004 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [508998308] [2025-03-04 11:36:29,004 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 11:36:29,004 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 11:36:29,206 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 117 statements into 1 equivalence classes. [2025-03-04 11:36:29,318 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 117 of 117 statements. [2025-03-04 11:36:29,318 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 11:36:29,318 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-03-04 11:36:29,318 INFO L348 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2025-03-04 11:36:29,341 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 117 statements into 1 equivalence classes. [2025-03-04 11:36:29,418 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 117 of 117 statements. [2025-03-04 11:36:29,419 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 11:36:29,419 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-03-04 11:36:29,495 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2025-03-04 11:36:29,496 INFO L340 BasicCegarLoop]: Counterexample is feasible [2025-03-04 11:36:29,496 INFO L782 garLoopResultBuilder]: Registering result UNSAFE for location atm_tc_putErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_changeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_changeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_putErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_getErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_getErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location nla_lenErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location nla_lenErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_walkErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_walkErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_dump_classErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location atm_tc_dump_classErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 22 remaining) [2025-03-04 11:36:29,498 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 22 remaining) [2025-03-04 11:36:29,499 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 22 remaining) [2025-03-04 11:36:29,499 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 22 remaining) [2025-03-04 11:36:29,499 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 22 remaining) [2025-03-04 11:36:29,499 INFO L782 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 22 remaining) [2025-03-04 11:36:29,499 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2025-03-04 11:36:29,500 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2025-03-04 11:36:29,609 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2025-03-04 11:36:29,611 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 04.03 11:36:29 BoogieIcfgContainer [2025-03-04 11:36:29,611 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2025-03-04 11:36:29,612 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2025-03-04 11:36:29,612 INFO L270 PluginConnector]: Initializing Witness Printer... [2025-03-04 11:36:29,612 INFO L274 PluginConnector]: Witness Printer initialized [2025-03-04 11:36:29,612 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 04.03 11:36:25" (3/4) ... [2025-03-04 11:36:29,613 INFO L140 WitnessPrinter]: Generating witness for reachability counterexample [2025-03-04 11:36:29,737 INFO L127 tionWitnessGenerator]: Generated YAML witness of length 51. [2025-03-04 11:36:29,800 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2025-03-04 11:36:29,800 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.yml [2025-03-04 11:36:29,801 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2025-03-04 11:36:29,801 INFO L158 Benchmark]: Toolchain (without parser) took 13689.64ms. Allocated memory was 167.8MB in the beginning and 553.6MB in the end (delta: 385.9MB). Free memory was 113.4MB in the beginning and 238.8MB in the end (delta: -125.4MB). Peak memory consumption was 261.3MB. Max. memory is 16.1GB. [2025-03-04 11:36:29,801 INFO L158 Benchmark]: CDTParser took 0.56ms. Allocated memory is still 201.3MB. Free memory is still 116.3MB. There was no memory consumed. Max. memory is 16.1GB. [2025-03-04 11:36:29,802 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1755.73ms. Allocated memory is still 167.8MB. Free memory was 113.4MB in the beginning and 79.3MB in the end (delta: 34.1MB). Peak memory consumption was 107.4MB. Max. memory is 16.1GB. [2025-03-04 11:36:29,802 INFO L158 Benchmark]: Boogie Procedure Inliner took 132.93ms. Allocated memory is still 167.8MB. Free memory was 78.5MB in the beginning and 64.1MB in the end (delta: 14.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2025-03-04 11:36:29,802 INFO L158 Benchmark]: Boogie Preprocessor took 315.50ms. Allocated memory is still 167.8MB. Free memory was 64.1MB in the beginning and 48.1MB in the end (delta: 15.9MB). Peak memory consumption was 28.0MB. Max. memory is 16.1GB. [2025-03-04 11:36:29,802 INFO L158 Benchmark]: IcfgBuilder took 7609.05ms. Allocated memory was 167.8MB in the beginning and 394.3MB in the end (delta: 226.5MB). Free memory was 48.1MB in the beginning and 154.5MB in the end (delta: -106.3MB). Peak memory consumption was 172.4MB. Max. memory is 16.1GB. [2025-03-04 11:36:29,802 INFO L158 Benchmark]: TraceAbstraction took 3679.87ms. Allocated memory was 394.3MB in the beginning and 553.6MB in the end (delta: 159.4MB). Free memory was 154.5MB in the beginning and 268.1MB in the end (delta: -113.7MB). Peak memory consumption was 43.6MB. Max. memory is 16.1GB. [2025-03-04 11:36:29,802 INFO L158 Benchmark]: Witness Printer took 188.85ms. Allocated memory is still 553.6MB. Free memory was 268.1MB in the beginning and 238.8MB in the end (delta: 29.4MB). Peak memory consumption was 33.6MB. Max. memory is 16.1GB. [2025-03-04 11:36:29,803 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.56ms. Allocated memory is still 201.3MB. Free memory is still 116.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1755.73ms. Allocated memory is still 167.8MB. Free memory was 113.4MB in the beginning and 79.3MB in the end (delta: 34.1MB). Peak memory consumption was 107.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 132.93ms. Allocated memory is still 167.8MB. Free memory was 78.5MB in the beginning and 64.1MB in the end (delta: 14.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 315.50ms. Allocated memory is still 167.8MB. Free memory was 64.1MB in the beginning and 48.1MB in the end (delta: 15.9MB). Peak memory consumption was 28.0MB. Max. memory is 16.1GB. * IcfgBuilder took 7609.05ms. Allocated memory was 167.8MB in the beginning and 394.3MB in the end (delta: 226.5MB). Free memory was 48.1MB in the beginning and 154.5MB in the end (delta: -106.3MB). Peak memory consumption was 172.4MB. Max. memory is 16.1GB. * TraceAbstraction took 3679.87ms. Allocated memory was 394.3MB in the beginning and 553.6MB in the end (delta: 159.4MB). Free memory was 154.5MB in the beginning and 268.1MB in the end (delta: -113.7MB). Peak memory consumption was 43.6MB. Max. memory is 16.1GB. * Witness Printer took 188.85ms. Allocated memory is still 553.6MB. Free memory was 268.1MB in the beginning and 238.8MB in the end (delta: 29.4MB). Peak memory consumption was 33.6MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 5960]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [5960-5961] - GenericResultAtLocation [Line: 6015]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; addl %1,%0": "+m" (v->counter): "ir" (i)); [6015] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - CounterExampleResult [Line: 6623]: integer overflow possible integer overflow possible We found a FailurePath: [L6128] struct sk_buff *atm_qdisc_ops_group1 ; [L6129] int LDV_IN_INTERRUPT = 1; [L6130] int ldv_state_variable_2 ; [L6131] int ref_cnt ; [L6132] int ldv_state_variable_1 ; [L6133] struct Qdisc *atm_qdisc_ops_group0 ; [L6134] int ldv_state_variable_0 ; [L6135] struct Qdisc *atm_class_ops_group0 ; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6705-L6707] static u8 const llc_oui_ip[8U] = { 170U, 170U, 3U, 0U, 0U, 0U, 8U, 0U}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L6708-L6712] static struct nla_policy const atm_policy[7U] = { {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {(unsigned short)0, (unsigned short)0}, {3U, (unsigned short)0}}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7768-L7771] static struct Qdisc_class_ops const atm_class_ops = {0, & atm_tc_graft, & atm_tc_leaf, 0, & atm_tc_get, & atm_tc_put, & atm_tc_change, & atm_tc_delete, & atm_tc_walk, & atm_tc_find_tcf, & atm_tc_bind_filter, & atm_tc_put, & atm_tc_dump_class, & atm_tc_dump_class_stats}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7772-L7775] static struct Qdisc_ops atm_qdisc_ops = {0, & atm_class_ops, {'a', 't', 'm', '\000'}, 176, & atm_tc_enqueue, & atm_tc_dequeue, & atm_tc_peek, & atm_tc_drop, & atm_tc_init, & atm_tc_reset, & atm_tc_destroy, 0, 0, & atm_tc_dump, 0, & __this_module}; [L7791] int ldv_retval_0 ; [L7792] int ldv_retval_1 ; [L8379] int ldv_spin = 0; VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L7820] struct nlattr *ldvarg0 ; [L7821] void *tmp ; [L7822] struct qdisc_walker *ldvarg18 ; [L7823] void *tmp___0 ; [L7824] unsigned long ldvarg11 ; [L7825] unsigned long tmp___1 ; [L7826] u32 ldvarg20 ; [L7827] u32 tmp___2 ; [L7828] unsigned long ldvarg7 ; [L7829] unsigned long tmp___3 ; [L7830] u32 ldvarg3 ; [L7831] u32 tmp___4 ; [L7832] unsigned long ldvarg12 ; [L7833] unsigned long tmp___5 ; [L7834] struct nlattr **ldvarg1 ; [L7835] void *tmp___6 ; [L7836] u32 ldvarg8 ; [L7837] u32 tmp___7 ; [L7838] unsigned long ldvarg13 ; [L7839] unsigned long tmp___8 ; [L7840] struct gnet_dump *ldvarg10 ; [L7841] void *tmp___9 ; [L7842] unsigned long ldvarg9 ; [L7843] unsigned long tmp___10 ; [L7844] struct tcmsg *ldvarg5 ; [L7845] void *tmp___11 ; [L7846] struct sk_buff *ldvarg6 ; [L7847] void *tmp___12 ; [L7848] struct Qdisc **ldvarg15 ; [L7849] void *tmp___13 ; [L7850] struct Qdisc *ldvarg16 ; [L7851] void *tmp___14 ; [L7852] unsigned long ldvarg21 ; [L7853] unsigned long tmp___15 ; [L7854] unsigned long ldvarg17 ; [L7855] unsigned long tmp___16 ; [L7856] unsigned long *ldvarg4 ; [L7857] void *tmp___17 ; [L7858] unsigned long ldvarg14 ; [L7859] unsigned long tmp___18 ; [L7860] unsigned long ldvarg19 ; [L7861] unsigned long tmp___19 ; [L7862] u32 ldvarg2 ; [L7863] u32 tmp___20 ; [L7864] int tmp___21 ; [L7865] int tmp___22 ; [L7866] int tmp___23 ; [L7867] int tmp___24 ; VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L7869] CALL, EXPR ldv_zalloc(4UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=4, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=4] [L7869] RET, EXPR ldv_zalloc(4UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L7869] tmp = ldv_zalloc(4UL) [L7870] ldvarg0 = (struct nlattr *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, llc_oui_ip={172:0}, ref_cnt=0] [L7871] CALL, EXPR ldv_zalloc(24UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=24, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=24] [L7871] RET, EXPR ldv_zalloc(24UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, llc_oui_ip={172:0}, ref_cnt=0] [L7871] tmp___0 = ldv_zalloc(24UL) [L7872] ldvarg18 = (struct qdisc_walker *)tmp___0 [L7873] tmp___1 = __VERIFIER_nondet_ulong() [L7874] ldvarg11 = tmp___1 [L7875] tmp___2 = __VERIFIER_nondet_u32() [L7876] ldvarg20 = tmp___2 [L7877] tmp___3 = __VERIFIER_nondet_ulong() [L7878] ldvarg7 = tmp___3 [L7879] tmp___4 = __VERIFIER_nondet_u32() [L7880] ldvarg3 = tmp___4 [L7881] tmp___5 = __VERIFIER_nondet_ulong() [L7882] ldvarg12 = tmp___5 VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg11=520, ldvarg12=0, ldvarg18={0:0}, ldvarg20=451, ldvarg3=466, ldvarg7=490, llc_oui_ip={172:0}, ref_cnt=0] [L7883] CALL, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=8, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=8] [L7883] RET, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg11=520, ldvarg12=0, ldvarg18={0:0}, ldvarg20=451, ldvarg3=466, ldvarg7=490, llc_oui_ip={172:0}, ref_cnt=0] [L7883] tmp___6 = ldv_zalloc(8UL) [L7884] ldvarg1 = (struct nlattr **)tmp___6 [L7885] tmp___7 = __VERIFIER_nondet_u32() [L7886] ldvarg8 = tmp___7 [L7887] tmp___8 = __VERIFIER_nondet_ulong() [L7888] ldvarg13 = tmp___8 VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg3=466, ldvarg7=490, ldvarg8=480, llc_oui_ip={172:0}, ref_cnt=0] [L7889] CALL, EXPR ldv_zalloc(88UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=88, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=88] [L7889] RET, EXPR ldv_zalloc(88UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg3=466, ldvarg7=490, ldvarg8=480, llc_oui_ip={172:0}, ref_cnt=0] [L7889] tmp___9 = ldv_zalloc(88UL) [L7890] ldvarg10 = (struct gnet_dump *)tmp___9 [L7891] tmp___10 = __VERIFIER_nondet_ulong() [L7892] ldvarg9 = tmp___10 VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg3=466, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7893] CALL, EXPR ldv_zalloc(20UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=20, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=20] [L7893] RET, EXPR ldv_zalloc(20UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg3=466, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7893] tmp___11 = ldv_zalloc(20UL) [L7894] ldvarg5 = (struct tcmsg *)tmp___11 VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg3=466, ldvarg5={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7895] CALL, EXPR ldv_zalloc(232UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=232, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=232] [L7895] RET, EXPR ldv_zalloc(232UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg3=466, ldvarg5={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7895] tmp___12 = ldv_zalloc(232UL) [L7896] ldvarg6 = (struct sk_buff *)tmp___12 VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg3=466, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7897] CALL, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=8, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=8] [L7897] RET, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg3=466, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7897] tmp___13 = ldv_zalloc(8UL) [L7898] ldvarg15 = (struct Qdisc **)tmp___13 VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg15={0:0}, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg3=466, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7899] CALL, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=448, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=448] [L7899] RET, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg15={0:0}, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg3=466, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7899] tmp___14 = ldv_zalloc(448UL) [L7900] ldvarg16 = (struct Qdisc *)tmp___14 [L7901] tmp___15 = __VERIFIER_nondet_ulong() [L7902] ldvarg21 = tmp___15 [L7903] tmp___16 = __VERIFIER_nondet_ulong() [L7904] ldvarg17 = tmp___16 VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg3=466, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7905] CALL, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=8, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0, size=8] [L7905] RET, EXPR ldv_zalloc(8UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg3=466, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7905] tmp___17 = ldv_zalloc(8UL) [L7906] ldvarg4 = (unsigned long *)tmp___17 [L7907] tmp___18 = __VERIFIER_nondet_ulong() [L7908] ldvarg14 = tmp___18 [L7909] tmp___19 = __VERIFIER_nondet_ulong() [L7910] ldvarg19 = tmp___19 [L7911] tmp___20 = __VERIFIER_nondet_u32() [L7912] ldvarg2 = tmp___20 [L7913] FCALL ldv_initialize() [L7914] ldv_state_variable_1 = 0 [L7915] ref_cnt = 0 [L7916] ldv_state_variable_0 = 1 [L7917] ldv_state_variable_2 = 0 VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0] [L7919] tmp___21 = __VERIFIER_nondet_int() [L7921] case 0: [L8066] case 1: [L8068] tmp___23 = __VERIFIER_nondet_int() [L8070] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___21=1, tmp___23=1] [L8066] case 1: [L8078] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___21=1] [L8066] case 1: [L8080] CALL, EXPR atm_init() [L7778] int tmp ; [L7780] CALL, EXPR register_qdisc(& atm_qdisc_ops) [L8541] return __VERIFIER_nondet_int(); [L7780] RET, EXPR register_qdisc(& atm_qdisc_ops) [L7780] tmp = register_qdisc(& atm_qdisc_ops) [L7781] return (tmp); VAL [LDV_IN_INTERRUPT=1, \result=0, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, llc_oui_ip={172:0}, ref_cnt=0] [L8080] RET, EXPR atm_init() [L8080] ldv_retval_1 = atm_init() [L8066] case 1: [L8082] ldv_state_variable_0 = 3 [L8083] ldv_state_variable_2 = 1 [L8084] CALL ldv_initialize_Qdisc_class_ops_2() [L7811] void *tmp ; VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7813] CALL, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=448, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0, size=448] [L7813] RET, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7813] tmp = ldv_zalloc(448UL) [L7814] atm_class_ops_group0 = (struct Qdisc *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L8084] RET ldv_initialize_Qdisc_class_ops_2() [L8085] ldv_state_variable_1 = 1 [L8086] CALL ldv_initialize_Qdisc_ops_1() [L7799] void *tmp ; [L7800] void *tmp___0 ; VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7802] CALL, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=448, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0, size=448] [L7802] RET, EXPR ldv_zalloc(448UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7802] tmp = ldv_zalloc(448UL) [L7803] atm_qdisc_ops_group0 = (struct Qdisc *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7804] CALL, EXPR ldv_zalloc(232UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6070] void *p ; [L6071] void *tmp ; [L6072] int tmp___0 ; [L6074] tmp___0 = __VERIFIER_nondet_int() [L6075] COND TRUE tmp___0 != 0 [L6076] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=232, \result={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0, size=232] [L7804] RET, EXPR ldv_zalloc(232UL) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L7804] tmp___0 = ldv_zalloc(232UL) [L7805] atm_qdisc_ops_group1 = (struct sk_buff *)tmp___0 VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L8086] RET ldv_initialize_Qdisc_ops_1() [L8066] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___21=1] [L7919] tmp___21 = __VERIFIER_nondet_int() [L7921] case 0: [L8066] case 1: [L8104] case 2: [L8106] tmp___24 = __VERIFIER_nondet_int() [L8108] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8120] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8132] case 2: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8144] case 3: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8156] case 4: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8168] case 5: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8176] case 6: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: [L8188] case 7: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8104] case 2: VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg10={0:0}, ldvarg11=520, ldvarg12=0, ldvarg13=502, ldvarg14=489, ldvarg15={0:0}, ldvarg16={0:0}, ldvarg17=514, ldvarg18={0:0}, ldvarg19=496, ldvarg1={0:0}, ldvarg20=451, ldvarg21=526, ldvarg2=507, ldvarg3=466, ldvarg4={0:0}, ldvarg5={0:0}, ldvarg6={0:0}, ldvarg7=490, ldvarg8=480, ldvarg9=515, llc_oui_ip={172:0}, ref_cnt=0, tmp___24=7] [L8190] CALL atm_tc_put(atm_class_ops_group0, ldvarg12) VAL [LDV_IN_INTERRUPT=1, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6595] struct atm_qdisc_data *p ; [L6596] void *tmp ; [L6597] struct atm_flow_data *flow ; [L6598] struct _ddebug descriptor ; [L6599] long tmp___0 ; [L6600] struct _ddebug descriptor___0 ; [L6601] long tmp___1 ; [L6602] struct _ddebug descriptor___1 ; [L6603] long tmp___2 ; [L6604] struct _ddebug descriptor___2 ; [L6605] long tmp___3 ; [L6606] long tmp___4 ; VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, cl=0, descriptor={179:0}, descriptor___0={177:0}, descriptor___1={178:0}, descriptor___2={180:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0, sch={0:0}] [L6608] CALL, EXPR qdisc_priv(sch) VAL [LDV_IN_INTERRUPT=1, \old(q)={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6442] return ((void *)q + 448U); VAL [LDV_IN_INTERRUPT=1, \old(q)={0:0}, \result={0:448}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6608] RET, EXPR qdisc_priv(sch) VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, cl=0, descriptor={179:0}, descriptor___0={177:0}, descriptor___1={178:0}, descriptor___2={180:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0, sch={0:0}] [L6608] tmp = qdisc_priv(sch) [L6609] p = (struct atm_qdisc_data *)tmp [L6610] flow = (struct atm_flow_data *)cl [L6611] descriptor.modname = "sch_atm" [L6612] descriptor.function = "atm_tc_put" [L6613] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--net--X--defaultlinux-3.16-rc1.tar.xz--X--43_2a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/1382/dscv_tempdir/dscv/ri/43_2a/net/sched/sch_atm.o.c.prepared" [L6614] descriptor.format = "atm_tc_put(sch %p,[qdisc %p],flow %p)\n" [L6615] descriptor.lineno = 168U [L6616] descriptor.flags = 0U [L6617] EXPR descriptor.flags VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, descriptor={179:0}, descriptor___0={177:0}, descriptor___1={178:0}, descriptor___2={180:0}, flow={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, p={0:448}, ref_cnt=0, sch={0:0}] [L6617] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [LDV_IN_INTERRUPT=1, \old(c)=0, \old(exp)=0, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6118] return (exp); VAL [LDV_IN_INTERRUPT=1, \old(c)=0, \old(exp)=0, \result=0, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, ref_cnt=0] [L6617] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, descriptor={179:0}, descriptor___0={177:0}, descriptor___1={178:0}, descriptor___2={180:0}, flow={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, p={0:448}, ref_cnt=0, sch={0:0}] [L6617] tmp___0 = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L6618] COND FALSE !(tmp___0 != 0L) VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, descriptor={179:0}, descriptor___0={177:0}, descriptor___1={178:0}, descriptor___2={180:0}, flow={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, p={0:448}, ref_cnt=0, sch={0:0}] [L6623] EXPR flow->ref VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, descriptor={179:0}, descriptor___0={177:0}, descriptor___1={178:0}, descriptor___2={180:0}, flow={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, p={0:448}, ref_cnt=0, sch={0:0}] [L6623] flow->ref - 1 VAL [LDV_IN_INTERRUPT=1, \old(cl)=0, \old(sch)={0:0}, __this_module={498:495}, atm_class_ops={174:0}, atm_class_ops_group0={0:0}, atm_policy={173:0}, atm_qdisc_ops={175:0}, atm_qdisc_ops_group0={0:0}, atm_qdisc_ops_group1={0:0}, descriptor={179:0}, descriptor___0={177:0}, descriptor___1={178:0}, descriptor___2={180:0}, flow={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, llc_oui_ip={172:0}, p={0:448}, ref_cnt=0, sch={0:0}] - UnprovableResult [Line: 6891]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6891]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6623]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6567]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6567]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6242]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6242]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7080]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7080]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6295]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6295]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8252]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8252]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8172]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8172]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8055]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8055]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7935]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7935]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7929]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7929]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 71 procedures, 1057 locations, 22 error locations. Started 1 CEGAR loops. OverallTime: 3.5s, OverallIterations: 4, TraceHistogramMax: 12, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2813 SdHoareTripleChecker+Valid, 0.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2813 mSDsluCounter, 8230 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3716 mSDsCounter, 14 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 213 IncrementalHoareTripleChecker+Invalid, 227 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 14 mSolverCounterUnsat, 4514 mSDtfsCounter, 213 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 8 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4006occurred in iteration=3, InterpolantAutomatonStates: 9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 3 MinimizatonAttempts, 32 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 370 NumberOfCodeBlocks, 370 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 250 ConstructedInterpolants, 0 QuantifiedInterpolants, 334 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 3 InterpolantComputations, 3 PerfectInterpolantSequences, 554/554 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available RESULT: Ultimate proved your program to be incorrect! [2025-03-04 11:36:29,834 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE(OVERFLOW)