java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.1.24-112bae1 [2019-09-08 16:29:50,550 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-09-08 16:29:50,553 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-09-08 16:29:50,573 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-09-08 16:29:50,573 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-09-08 16:29:50,575 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-09-08 16:29:50,578 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-09-08 16:29:50,588 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-09-08 16:29:50,593 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-09-08 16:29:50,596 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-09-08 16:29:50,599 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-09-08 16:29:50,601 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-09-08 16:29:50,601 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-09-08 16:29:50,603 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-09-08 16:29:50,605 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-09-08 16:29:50,607 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-09-08 16:29:50,608 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-09-08 16:29:50,610 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-09-08 16:29:50,611 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-09-08 16:29:50,616 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-09-08 16:29:50,620 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-09-08 16:29:50,622 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-09-08 16:29:50,624 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-09-08 16:29:50,625 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-09-08 16:29:50,629 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-09-08 16:29:50,629 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-09-08 16:29:50,629 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-09-08 16:29:50,632 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-09-08 16:29:50,633 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-09-08 16:29:50,634 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-09-08 16:29:50,634 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-09-08 16:29:50,636 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-09-08 16:29:50,637 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-09-08 16:29:50,638 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-09-08 16:29:50,640 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-09-08 16:29:50,640 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-09-08 16:29:50,641 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-09-08 16:29:50,641 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-09-08 16:29:50,641 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-09-08 16:29:50,642 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-09-08 16:29:50,643 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-09-08 16:29:50,644 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2019-09-08 16:29:50,683 INFO L113 SettingsManager]: Loading preferences was successful [2019-09-08 16:29:50,684 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-09-08 16:29:50,688 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-09-08 16:29:50,688 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-09-08 16:29:50,689 INFO L138 SettingsManager]: * Use SBE=true [2019-09-08 16:29:50,689 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-09-08 16:29:50,692 INFO L138 SettingsManager]: * sizeof long=4 [2019-09-08 16:29:50,692 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-09-08 16:29:50,693 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-09-08 16:29:50,693 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-09-08 16:29:50,693 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-09-08 16:29:50,693 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-09-08 16:29:50,693 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-09-08 16:29:50,693 INFO L138 SettingsManager]: * sizeof long double=12 [2019-09-08 16:29:50,694 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-09-08 16:29:50,694 INFO L138 SettingsManager]: * Use constant arrays=true [2019-09-08 16:29:50,694 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-09-08 16:29:50,694 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-09-08 16:29:50,694 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-09-08 16:29:50,695 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-09-08 16:29:50,695 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-09-08 16:29:50,695 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-09-08 16:29:50,696 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-09-08 16:29:50,697 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-09-08 16:29:50,697 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-09-08 16:29:50,697 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-09-08 16:29:50,697 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-09-08 16:29:50,697 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-09-08 16:29:50,697 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-09-08 16:29:50,755 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-09-08 16:29:50,770 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-09-08 16:29:50,773 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-09-08 16:29:50,775 INFO L271 PluginConnector]: Initializing CDTParser... [2019-09-08 16:29:50,776 INFO L275 PluginConnector]: CDTParser initialized [2019-09-08 16:29:50,776 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i [2019-09-08 16:29:50,842 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb177a3e4/330b168f1afe4915bde8ad9f1da274e2/FLAGb6955d4b8 [2019-09-08 16:29:51,662 INFO L306 CDTParser]: Found 1 translation units. [2019-09-08 16:29:51,663 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i [2019-09-08 16:29:51,695 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb177a3e4/330b168f1afe4915bde8ad9f1da274e2/FLAGb6955d4b8 [2019-09-08 16:29:52,176 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb177a3e4/330b168f1afe4915bde8ad9f1da274e2 [2019-09-08 16:29:52,187 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-09-08 16:29:52,189 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2019-09-08 16:29:52,190 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-09-08 16:29:52,190 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-09-08 16:29:52,194 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-09-08 16:29:52,195 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.09 04:29:52" (1/1) ... [2019-09-08 16:29:52,198 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@141d4c75 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:52, skipping insertion in model container [2019-09-08 16:29:52,198 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.09 04:29:52" (1/1) ... [2019-09-08 16:29:52,206 INFO L142 MainTranslator]: Starting translation in SV-COMP mode [2019-09-08 16:29:52,336 INFO L173 MainTranslator]: Built tables and reachable declarations [2019-09-08 16:29:54,100 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-09-08 16:29:54,143 INFO L188 MainTranslator]: Completed pre-run [2019-09-08 16:29:54,494 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-09-08 16:29:54,643 INFO L192 MainTranslator]: Completed translation [2019-09-08 16:29:54,644 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:54 WrapperNode [2019-09-08 16:29:54,644 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-09-08 16:29:54,645 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-09-08 16:29:54,646 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-09-08 16:29:54,646 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-09-08 16:29:54,664 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:54" (1/1) ... [2019-09-08 16:29:54,664 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:54" (1/1) ... [2019-09-08 16:29:54,751 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:54" (1/1) ... [2019-09-08 16:29:54,754 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:54" (1/1) ... [2019-09-08 16:29:54,940 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:54" (1/1) ... [2019-09-08 16:29:54,964 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:54" (1/1) ... [2019-09-08 16:29:54,985 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:54" (1/1) ... [2019-09-08 16:29:55,009 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-09-08 16:29:55,010 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-09-08 16:29:55,010 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-09-08 16:29:55,010 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-09-08 16:29:55,011 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:54" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-09-08 16:29:55,071 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2019-09-08 16:29:55,071 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-09-08 16:29:55,071 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~X~int~TO~int [2019-09-08 16:29:55,072 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2019-09-08 16:29:55,072 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_set_bit [2019-09-08 16:29:55,072 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_clear_bit [2019-09-08 16:29:55,072 INFO L138 BoogieDeclarations]: Found implementation of procedure __arch_swab32 [2019-09-08 16:29:55,072 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab16 [2019-09-08 16:29:55,073 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab32 [2019-09-08 16:29:55,073 INFO L138 BoogieDeclarations]: Found implementation of procedure __preempt_count_add [2019-09-08 16:29:55,073 INFO L138 BoogieDeclarations]: Found implementation of procedure __preempt_count_sub [2019-09-08 16:29:55,073 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2019-09-08 16:29:55,073 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock [2019-09-08 16:29:55,074 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock [2019-09-08 16:29:55,074 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2019-09-08 16:29:55,074 INFO L138 BoogieDeclarations]: Found implementation of procedure __rcu_read_lock [2019-09-08 16:29:55,074 INFO L138 BoogieDeclarations]: Found implementation of procedure __rcu_read_unlock [2019-09-08 16:29:55,074 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_lock_acquire [2019-09-08 16:29:55,075 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_lock_release [2019-09-08 16:29:55,076 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_held [2019-09-08 16:29:55,076 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock [2019-09-08 16:29:55,076 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_unlock [2019-09-08 16:29:55,076 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_from_user [2019-09-08 16:29:55,076 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2019-09-08 16:29:55,076 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reserve [2019-09-08 16:29:55,077 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reset_network_header [2019-09-08 16:29:55,077 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2019-09-08 16:29:55,077 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2019-09-08 16:29:55,077 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2019-09-08 16:29:55,077 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ptr [2019-09-08 16:29:55,077 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ulong [2019-09-08 16:29:55,077 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2019-09-08 16:29:55,078 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2019-09-08 16:29:55,078 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2019-09-08 16:29:55,078 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_trap [2019-09-08 16:29:55,078 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2019-09-08 16:29:55,078 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2019-09-08 16:29:55,078 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_dormant_on [2019-09-08 16:29:55,078 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_dormant_off [2019-09-08 16:29:55,079 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_to_hdlc [2019-09-08 16:29:55,079 INFO L138 BoogieDeclarations]: Found implementation of procedure __in_dev_get_rcu [2019-09-08 16:29:55,079 INFO L138 BoogieDeclarations]: Found implementation of procedure state [2019-09-08 16:29:55,079 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_hard_header [2019-09-08 16:29:55,079 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_keepalive_send [2019-09-08 16:29:55,079 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_type_trans [2019-09-08 16:29:55,079 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_rx [2019-09-08 16:29:55,080 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_timer [2019-09-08 16:29:55,080 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_start [2019-09-08 16:29:55,080 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_stop [2019-09-08 16:29:55,080 INFO L138 BoogieDeclarations]: Found implementation of procedure cisco_ioctl [2019-09-08 16:29:55,080 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_init [2019-09-08 16:29:55,080 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_exit [2019-09-08 16:29:55,080 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_1 [2019-09-08 16:29:55,080 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize_hdlc_proto_3 [2019-09-08 16:29:55,081 INFO L138 BoogieDeclarations]: Found implementation of procedure choose_timer_1 [2019-09-08 16:29:55,081 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_1 [2019-09-08 16:29:55,081 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_1 [2019-09-08 16:29:55,081 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2019-09-08 16:29:55,081 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_consume_skb_5 [2019-09-08 16:29:55,081 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_6 [2019-09-08 16:29:55,081 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_7 [2019-09-08 16:29:55,082 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_8 [2019-09-08 16:29:55,082 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_11 [2019-09-08 16:29:55,082 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_12 [2019-09-08 16:29:55,082 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_sync_13 [2019-09-08 16:29:55,082 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_init [2019-09-08 16:29:55,082 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_add [2019-09-08 16:29:55,082 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2019-09-08 16:29:55,083 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_contains [2019-09-08 16:29:55,083 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_is_empty [2019-09-08 16:29:55,083 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2019-09-08 16:29:55,083 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_err_ptr [2019-09-08 16:29:55,083 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_ptr_err [2019-09-08 16:29:55,083 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err_or_null [2019-09-08 16:29:55,084 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2019-09-08 16:29:55,084 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2019-09-08 16:29:55,084 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2019-09-08 16:29:55,084 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free_int [2019-09-08 16:29:55,084 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb [2019-09-08 16:29:55,084 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_netdev_alloc_skb [2019-09-08 16:29:55,084 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_current [2019-09-08 16:29:55,085 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2019-09-08 16:29:55,085 INFO L138 BoogieDeclarations]: Found implementation of procedure __copy_from_user_overflow [2019-09-08 16:29:55,085 INFO L138 BoogieDeclarations]: Found implementation of procedure __copy_to_user_overflow [2019-09-08 16:29:55,085 INFO L138 BoogieDeclarations]: Found implementation of procedure __dev_kfree_skb_any [2019-09-08 16:29:55,085 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2019-09-08 16:29:55,085 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_from_user [2019-09-08 16:29:55,086 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_to_user [2019-09-08 16:29:55,086 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock [2019-09-08 16:29:55,086 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2019-09-08 16:29:55,086 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_unlock [2019-09-08 16:29:55,086 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_unlock_irqrestore [2019-09-08 16:29:55,086 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2019-09-08 16:29:55,086 INFO L138 BoogieDeclarations]: Found implementation of procedure attach_hdlc_protocol [2019-09-08 16:29:55,087 INFO L138 BoogieDeclarations]: Found implementation of procedure capable [2019-09-08 16:29:55,087 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2019-09-08 16:29:55,087 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer_sync [2019-09-08 16:29:55,087 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_queue_xmit [2019-09-08 16:29:55,087 INFO L138 BoogieDeclarations]: Found implementation of procedure linkwatch_fire_event [2019-09-08 16:29:55,087 INFO L138 BoogieDeclarations]: Found implementation of procedure lock_acquire [2019-09-08 16:29:55,087 INFO L138 BoogieDeclarations]: Found implementation of procedure lock_is_held [2019-09-08 16:29:55,088 INFO L138 BoogieDeclarations]: Found implementation of procedure lock_release [2019-09-08 16:29:55,088 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_suspicious [2019-09-08 16:29:55,088 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2019-09-08 16:29:55,088 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_info [2019-09-08 16:29:55,088 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_warn [2019-09-08 16:29:55,088 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_is_watching [2019-09-08 16:29:55,088 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_lockdep_current_cpu_online [2019-09-08 16:29:55,089 INFO L138 BoogieDeclarations]: Found implementation of procedure register_hdlc_protocol [2019-09-08 16:29:55,089 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2019-09-08 16:29:55,089 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2019-09-08 16:29:55,089 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2019-09-08 16:29:55,089 INFO L138 BoogieDeclarations]: Found implementation of procedure unregister_hdlc_protocol [2019-09-08 16:29:55,089 INFO L138 BoogieDeclarations]: Found implementation of procedure external_alloc [2019-09-08 16:29:55,089 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2019-09-08 16:29:55,090 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2019-09-08 16:29:55,090 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2019-09-08 16:29:55,090 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2019-09-08 16:29:55,090 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2019-09-08 16:29:55,090 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_set_bit [2019-09-08 16:29:55,090 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_clear_bit [2019-09-08 16:29:55,090 INFO L130 BoogieDeclarations]: Found specification of procedure __arch_swab32 [2019-09-08 16:29:55,091 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab16 [2019-09-08 16:29:55,091 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab32 [2019-09-08 16:29:55,091 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2019-09-08 16:29:55,091 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2019-09-08 16:29:55,091 INFO L130 BoogieDeclarations]: Found specification of procedure strcmp [2019-09-08 16:29:55,091 INFO L130 BoogieDeclarations]: Found specification of procedure __preempt_count_add [2019-09-08 16:29:55,092 INFO L130 BoogieDeclarations]: Found specification of procedure __preempt_count_sub [2019-09-08 16:29:55,092 INFO L130 BoogieDeclarations]: Found specification of procedure lock_acquire [2019-09-08 16:29:55,092 INFO L130 BoogieDeclarations]: Found specification of procedure lock_release [2019-09-08 16:29:55,092 INFO L130 BoogieDeclarations]: Found specification of procedure lock_is_held [2019-09-08 16:29:55,092 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_suspicious [2019-09-08 16:29:55,092 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2019-09-08 16:29:55,092 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock [2019-09-08 16:29:55,093 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2019-09-08 16:29:55,093 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_unlock [2019-09-08 16:29:55,093 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_unlock_irqrestore [2019-09-08 16:29:55,093 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2019-09-08 16:29:55,093 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock [2019-09-08 16:29:55,093 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock [2019-09-08 16:29:55,093 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2019-09-08 16:29:55,094 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2019-09-08 16:29:55,094 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer_sync [2019-09-08 16:29:55,094 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_sync_13 [2019-09-08 16:29:55,094 INFO L130 BoogieDeclarations]: Found specification of procedure __rcu_read_lock [2019-09-08 16:29:55,094 INFO L130 BoogieDeclarations]: Found specification of procedure __rcu_read_unlock [2019-09-08 16:29:55,094 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_is_watching [2019-09-08 16:29:55,095 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_lockdep_current_cpu_online [2019-09-08 16:29:55,095 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_lock_acquire [2019-09-08 16:29:55,095 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_lock_release [2019-09-08 16:29:55,095 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2019-09-08 16:29:55,095 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_held [2019-09-08 16:29:55,095 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock [2019-09-08 16:29:55,095 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-09-08 16:29:55,096 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_unlock [2019-09-08 16:29:55,096 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_from_user [2019-09-08 16:29:55,096 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2019-09-08 16:29:55,096 INFO L130 BoogieDeclarations]: Found specification of procedure __copy_from_user_overflow [2019-09-08 16:29:55,096 INFO L130 BoogieDeclarations]: Found specification of procedure __copy_to_user_overflow [2019-09-08 16:29:55,096 INFO L130 BoogieDeclarations]: Found specification of procedure copy_from_user [2019-09-08 16:29:55,096 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2019-09-08 16:29:55,096 INFO L130 BoogieDeclarations]: Found specification of procedure capable [2019-09-08 16:29:55,097 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_6 [2019-09-08 16:29:55,097 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_7 [2019-09-08 16:29:55,097 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_8 [2019-09-08 16:29:55,097 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_11 [2019-09-08 16:29:55,097 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_consume_skb_5 [2019-09-08 16:29:55,097 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2019-09-08 16:29:55,097 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2019-09-08 16:29:55,097 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2019-09-08 16:29:55,098 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reserve [2019-09-08 16:29:55,098 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2019-09-08 16:29:55,098 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2019-09-08 16:29:55,098 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2019-09-08 16:29:55,098 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2019-09-08 16:29:55,098 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reset_network_header [2019-09-08 16:29:55,098 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_12 [2019-09-08 16:29:55,099 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2019-09-08 16:29:55,099 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2019-09-08 16:29:55,099 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2019-09-08 16:29:55,099 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2019-09-08 16:29:55,099 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2019-09-08 16:29:55,099 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_uint [2019-09-08 16:29:55,099 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ushort [2019-09-08 16:29:55,099 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ulong [2019-09-08 16:29:55,100 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2019-09-08 16:29:55,100 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assume [2019-09-08 16:29:55,100 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2019-09-08 16:29:55,100 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2019-09-08 16:29:55,100 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2019-09-08 16:29:55,100 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2019-09-08 16:29:55,100 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2019-09-08 16:29:55,101 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ptr [2019-09-08 16:29:55,101 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ulong [2019-09-08 16:29:55,101 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2019-09-08 16:29:55,101 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2019-09-08 16:29:55,101 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_trap [2019-09-08 16:29:55,101 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_1 [2019-09-08 16:29:55,101 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize_hdlc_proto_3 [2019-09-08 16:29:55,102 INFO L130 BoogieDeclarations]: Found specification of procedure choose_timer_1 [2019-09-08 16:29:55,102 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_1 [2019-09-08 16:29:55,102 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_1 [2019-09-08 16:29:55,102 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2019-09-08 16:29:55,102 INFO L130 BoogieDeclarations]: Found specification of procedure dev_queue_xmit [2019-09-08 16:29:55,102 INFO L130 BoogieDeclarations]: Found specification of procedure __dev_kfree_skb_any [2019-09-08 16:29:55,102 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2019-09-08 16:29:55,102 INFO L130 BoogieDeclarations]: Found specification of procedure linkwatch_fire_event [2019-09-08 16:29:55,103 INFO L130 BoogieDeclarations]: Found specification of procedure netif_dormant_on [2019-09-08 16:29:55,103 INFO L130 BoogieDeclarations]: Found specification of procedure netif_dormant_off [2019-09-08 16:29:55,103 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_warn [2019-09-08 16:29:55,103 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_info [2019-09-08 16:29:55,103 INFO L130 BoogieDeclarations]: Found specification of procedure register_hdlc_protocol [2019-09-08 16:29:55,103 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_hdlc_protocol [2019-09-08 16:29:55,103 INFO L130 BoogieDeclarations]: Found specification of procedure dev_to_hdlc [2019-09-08 16:29:55,104 INFO L130 BoogieDeclarations]: Found specification of procedure attach_hdlc_protocol [2019-09-08 16:29:55,104 INFO L130 BoogieDeclarations]: Found specification of procedure __in_dev_get_rcu [2019-09-08 16:29:55,104 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_ioctl [2019-09-08 16:29:55,104 INFO L130 BoogieDeclarations]: Found specification of procedure state [2019-09-08 16:29:55,104 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_hard_header [2019-09-08 16:29:55,104 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_keepalive_send [2019-09-08 16:29:55,104 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_type_trans [2019-09-08 16:29:55,104 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_rx [2019-09-08 16:29:55,105 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_timer [2019-09-08 16:29:55,105 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_start [2019-09-08 16:29:55,105 INFO L130 BoogieDeclarations]: Found specification of procedure cisco_stop [2019-09-08 16:29:55,105 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2019-09-08 16:29:55,105 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~X~int~TO~int [2019-09-08 16:29:55,105 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2019-09-08 16:29:55,105 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2019-09-08 16:29:55,106 INFO L130 BoogieDeclarations]: Found specification of procedure mod_init [2019-09-08 16:29:55,106 INFO L130 BoogieDeclarations]: Found specification of procedure mod_exit [2019-09-08 16:29:55,106 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2019-09-08 16:29:55,106 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2019-09-08 16:29:55,106 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2019-09-08 16:29:55,106 INFO L130 BoogieDeclarations]: Found specification of procedure main [2019-09-08 16:29:55,106 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_init [2019-09-08 16:29:55,106 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_add [2019-09-08 16:29:55,107 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2019-09-08 16:29:55,107 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_contains [2019-09-08 16:29:55,107 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_is_empty [2019-09-08 16:29:55,107 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2019-09-08 16:29:55,107 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_err_ptr [2019-09-08 16:29:55,107 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_ptr_err [2019-09-08 16:29:55,107 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err_or_null [2019-09-08 16:29:55,107 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free_int [2019-09-08 16:29:55,108 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_netdev_alloc_skb [2019-09-08 16:29:55,108 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb [2019-09-08 16:29:55,108 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_current [2019-09-08 16:29:55,108 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_bool [2019-09-08 16:29:55,108 INFO L130 BoogieDeclarations]: Found specification of procedure external_alloc [2019-09-08 16:29:55,108 INFO L130 BoogieDeclarations]: Found specification of procedure free [2019-09-08 16:29:55,108 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2019-09-08 16:29:55,108 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2019-09-08 16:29:55,109 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2019-09-08 16:29:55,109 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-09-08 16:29:55,109 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2019-09-08 16:29:55,109 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2019-09-08 16:29:55,109 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2019-09-08 16:29:55,109 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2019-09-08 16:29:55,861 INFO L684 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2019-09-08 16:30:34,765 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-09-08 16:30:34,766 INFO L283 CfgBuilder]: Removed 4 assume(true) statements. [2019-09-08 16:30:34,768 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.09 04:30:34 BoogieIcfgContainer [2019-09-08 16:30:34,768 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-09-08 16:30:34,769 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-09-08 16:30:34,769 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-09-08 16:30:34,772 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-09-08 16:30:34,775 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.09 04:29:52" (1/3) ... [2019-09-08 16:30:34,777 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ee92d14 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.09 04:30:34, skipping insertion in model container [2019-09-08 16:30:34,778 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.09 04:29:54" (2/3) ... [2019-09-08 16:30:34,779 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ee92d14 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.09 04:30:34, skipping insertion in model container [2019-09-08 16:30:34,786 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.09 04:30:34" (3/3) ... [2019-09-08 16:30:34,788 INFO L109 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wan--hdlc_cisco.ko-entry_point.cil.out.i [2019-09-08 16:30:34,799 INFO L152 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-09-08 16:30:34,813 INFO L164 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2019-09-08 16:30:34,831 INFO L252 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2019-09-08 16:30:34,871 INFO L128 ementStrategyFactory]: Using default assertion order modulation [2019-09-08 16:30:34,872 INFO L377 AbstractCegarLoop]: Interprodecural is true [2019-09-08 16:30:34,872 INFO L378 AbstractCegarLoop]: Hoare is true [2019-09-08 16:30:34,872 INFO L379 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-09-08 16:30:34,872 INFO L380 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-09-08 16:30:34,872 INFO L381 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-09-08 16:30:34,872 INFO L382 AbstractCegarLoop]: Difference is false [2019-09-08 16:30:34,873 INFO L383 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-09-08 16:30:34,873 INFO L388 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-09-08 16:30:34,909 INFO L276 IsEmpty]: Start isEmpty. Operand 696 states. [2019-09-08 16:30:34,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2019-09-08 16:30:34,927 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 16:30:34,928 INFO L399 BasicCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 16:30:34,930 INFO L418 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 16:30:34,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 16:30:34,934 INFO L82 PathProgramCache]: Analyzing trace with hash -1355050783, now seen corresponding path program 1 times [2019-09-08 16:30:34,936 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 16:30:34,936 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 16:30:35,004 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:35,005 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 16:30:35,005 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:35,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 16:30:35,417 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2019-09-08 16:30:35,419 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 16:30:35,420 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-09-08 16:30:35,424 INFO L454 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-09-08 16:30:35,439 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-09-08 16:30:35,440 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 16:30:35,442 INFO L87 Difference]: Start difference. First operand 696 states. Second operand 3 states. [2019-09-08 16:30:35,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 16:30:35,747 INFO L93 Difference]: Finished difference Result 1959 states and 2541 transitions. [2019-09-08 16:30:35,748 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-09-08 16:30:35,750 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 68 [2019-09-08 16:30:35,751 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 16:30:35,791 INFO L225 Difference]: With dead ends: 1959 [2019-09-08 16:30:35,791 INFO L226 Difference]: Without dead ends: 1281 [2019-09-08 16:30:35,807 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-09-08 16:30:35,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1281 states. [2019-09-08 16:30:36,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1281 to 1281. [2019-09-08 16:30:36,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1281 states. [2019-09-08 16:30:36,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1281 states to 1281 states and 1639 transitions. [2019-09-08 16:30:36,019 INFO L78 Accepts]: Start accepts. Automaton has 1281 states and 1639 transitions. Word has length 68 [2019-09-08 16:30:36,020 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 16:30:36,020 INFO L475 AbstractCegarLoop]: Abstraction has 1281 states and 1639 transitions. [2019-09-08 16:30:36,020 INFO L476 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-09-08 16:30:36,020 INFO L276 IsEmpty]: Start isEmpty. Operand 1281 states and 1639 transitions. [2019-09-08 16:30:36,033 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2019-09-08 16:30:36,033 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 16:30:36,033 INFO L399 BasicCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 16:30:36,033 INFO L418 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 16:30:36,034 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 16:30:36,034 INFO L82 PathProgramCache]: Analyzing trace with hash 1984348686, now seen corresponding path program 1 times [2019-09-08 16:30:36,034 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 16:30:36,034 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 16:30:36,039 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:36,040 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 16:30:36,040 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:36,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 16:30:36,197 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2019-09-08 16:30:36,198 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 16:30:36,198 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-09-08 16:30:36,200 INFO L454 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-09-08 16:30:36,200 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-09-08 16:30:36,201 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-09-08 16:30:36,201 INFO L87 Difference]: Start difference. First operand 1281 states and 1639 transitions. Second operand 5 states. [2019-09-08 16:30:36,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 16:30:36,324 INFO L93 Difference]: Finished difference Result 2537 states and 3247 transitions. [2019-09-08 16:30:36,324 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-09-08 16:30:36,325 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 72 [2019-09-08 16:30:36,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 16:30:36,334 INFO L225 Difference]: With dead ends: 2537 [2019-09-08 16:30:36,335 INFO L226 Difference]: Without dead ends: 1280 [2019-09-08 16:30:36,340 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2019-09-08 16:30:36,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1280 states. [2019-09-08 16:30:36,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1280 to 1280. [2019-09-08 16:30:36,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1280 states. [2019-09-08 16:30:36,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1280 states to 1280 states and 1635 transitions. [2019-09-08 16:30:36,408 INFO L78 Accepts]: Start accepts. Automaton has 1280 states and 1635 transitions. Word has length 72 [2019-09-08 16:30:36,409 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 16:30:36,409 INFO L475 AbstractCegarLoop]: Abstraction has 1280 states and 1635 transitions. [2019-09-08 16:30:36,409 INFO L476 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-09-08 16:30:36,409 INFO L276 IsEmpty]: Start isEmpty. Operand 1280 states and 1635 transitions. [2019-09-08 16:30:36,421 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2019-09-08 16:30:36,421 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 16:30:36,422 INFO L399 BasicCegarLoop]: trace histogram [7, 7, 7, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 16:30:36,422 INFO L418 AbstractCegarLoop]: === Iteration 3 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 16:30:36,422 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 16:30:36,423 INFO L82 PathProgramCache]: Analyzing trace with hash -1687933508, now seen corresponding path program 1 times [2019-09-08 16:30:36,423 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 16:30:36,423 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 16:30:36,427 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:36,428 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 16:30:36,428 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:36,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 16:30:36,665 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2019-09-08 16:30:36,665 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 16:30:36,666 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-09-08 16:30:36,666 INFO L454 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-09-08 16:30:36,666 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-09-08 16:30:36,667 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-09-08 16:30:36,667 INFO L87 Difference]: Start difference. First operand 1280 states and 1635 transitions. Second operand 6 states. [2019-09-08 16:30:37,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 16:30:37,634 INFO L93 Difference]: Finished difference Result 3793 states and 4889 transitions. [2019-09-08 16:30:37,634 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-09-08 16:30:37,634 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 102 [2019-09-08 16:30:37,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 16:30:37,648 INFO L225 Difference]: With dead ends: 3793 [2019-09-08 16:30:37,649 INFO L226 Difference]: Without dead ends: 2521 [2019-09-08 16:30:37,653 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2019-09-08 16:30:37,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2521 states. [2019-09-08 16:30:37,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2521 to 2521. [2019-09-08 16:30:37,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2521 states. [2019-09-08 16:30:37,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2521 states to 2521 states and 3244 transitions. [2019-09-08 16:30:37,770 INFO L78 Accepts]: Start accepts. Automaton has 2521 states and 3244 transitions. Word has length 102 [2019-09-08 16:30:37,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 16:30:37,771 INFO L475 AbstractCegarLoop]: Abstraction has 2521 states and 3244 transitions. [2019-09-08 16:30:37,771 INFO L476 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-09-08 16:30:37,771 INFO L276 IsEmpty]: Start isEmpty. Operand 2521 states and 3244 transitions. [2019-09-08 16:30:37,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 209 [2019-09-08 16:30:37,782 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 16:30:37,783 INFO L399 BasicCegarLoop]: trace histogram [8, 8, 8, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 16:30:37,783 INFO L418 AbstractCegarLoop]: === Iteration 4 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 16:30:37,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 16:30:37,784 INFO L82 PathProgramCache]: Analyzing trace with hash 347190858, now seen corresponding path program 1 times [2019-09-08 16:30:37,784 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 16:30:37,784 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 16:30:37,787 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:37,787 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 16:30:37,787 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:37,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 16:30:37,983 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2019-09-08 16:30:37,984 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 16:30:37,984 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-09-08 16:30:37,985 INFO L454 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-09-08 16:30:37,985 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-09-08 16:30:37,985 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-09-08 16:30:37,985 INFO L87 Difference]: Start difference. First operand 2521 states and 3244 transitions. Second operand 5 states. [2019-09-08 16:30:38,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 16:30:38,123 INFO L93 Difference]: Finished difference Result 5042 states and 6550 transitions. [2019-09-08 16:30:38,123 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-09-08 16:30:38,124 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 208 [2019-09-08 16:30:38,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 16:30:38,140 INFO L225 Difference]: With dead ends: 5042 [2019-09-08 16:30:38,140 INFO L226 Difference]: Without dead ends: 2545 [2019-09-08 16:30:38,149 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-09-08 16:30:38,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2545 states. [2019-09-08 16:30:38,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2545 to 2541. [2019-09-08 16:30:38,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2541 states. [2019-09-08 16:30:38,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2541 states to 2541 states and 3273 transitions. [2019-09-08 16:30:38,277 INFO L78 Accepts]: Start accepts. Automaton has 2541 states and 3273 transitions. Word has length 208 [2019-09-08 16:30:38,278 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 16:30:38,278 INFO L475 AbstractCegarLoop]: Abstraction has 2541 states and 3273 transitions. [2019-09-08 16:30:38,279 INFO L476 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-09-08 16:30:38,279 INFO L276 IsEmpty]: Start isEmpty. Operand 2541 states and 3273 transitions. [2019-09-08 16:30:38,293 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 214 [2019-09-08 16:30:38,293 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 16:30:38,293 INFO L399 BasicCegarLoop]: trace histogram [8, 8, 7, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 16:30:38,294 INFO L418 AbstractCegarLoop]: === Iteration 5 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 16:30:38,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 16:30:38,294 INFO L82 PathProgramCache]: Analyzing trace with hash -727155111, now seen corresponding path program 1 times [2019-09-08 16:30:38,294 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 16:30:38,294 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 16:30:38,297 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:38,297 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 16:30:38,297 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:38,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-09-08 16:30:38,710 INFO L134 CoverageAnalysis]: Checked inductivity of 129 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2019-09-08 16:30:38,710 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-09-08 16:30:38,711 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2019-09-08 16:30:38,711 INFO L454 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-09-08 16:30:38,712 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-09-08 16:30:38,712 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2019-09-08 16:30:38,712 INFO L87 Difference]: Start difference. First operand 2541 states and 3273 transitions. Second operand 10 states. [2019-09-08 16:30:38,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-09-08 16:30:38,962 INFO L93 Difference]: Finished difference Result 5090 states and 6602 transitions. [2019-09-08 16:30:38,963 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-09-08 16:30:38,963 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 213 [2019-09-08 16:30:38,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-09-08 16:30:38,980 INFO L225 Difference]: With dead ends: 5090 [2019-09-08 16:30:38,980 INFO L226 Difference]: Without dead ends: 2573 [2019-09-08 16:30:38,990 INFO L628 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2019-09-08 16:30:38,994 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2573 states. [2019-09-08 16:30:39,094 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2573 to 2569. [2019-09-08 16:30:39,094 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2569 states. [2019-09-08 16:30:39,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2569 states to 2569 states and 3299 transitions. [2019-09-08 16:30:39,107 INFO L78 Accepts]: Start accepts. Automaton has 2569 states and 3299 transitions. Word has length 213 [2019-09-08 16:30:39,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-09-08 16:30:39,108 INFO L475 AbstractCegarLoop]: Abstraction has 2569 states and 3299 transitions. [2019-09-08 16:30:39,108 INFO L476 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-09-08 16:30:39,108 INFO L276 IsEmpty]: Start isEmpty. Operand 2569 states and 3299 transitions. [2019-09-08 16:30:39,119 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 279 [2019-09-08 16:30:39,120 INFO L391 BasicCegarLoop]: Found error trace [2019-09-08 16:30:39,120 INFO L399 BasicCegarLoop]: trace histogram [8, 8, 7, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-09-08 16:30:39,120 INFO L418 AbstractCegarLoop]: === Iteration 6 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-09-08 16:30:39,121 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-09-08 16:30:39,121 INFO L82 PathProgramCache]: Analyzing trace with hash 724672818, now seen corresponding path program 1 times [2019-09-08 16:30:39,121 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2019-09-08 16:30:39,121 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2019-09-08 16:30:39,124 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:39,124 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-09-08 16:30:39,124 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-09-08 16:30:39,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-09-08 16:30:40,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-09-08 16:30:40,558 INFO L466 BasicCegarLoop]: Counterexample might be feasible [2019-09-08 16:30:40,727 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 322071007517500 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# [2019-09-08 16:30:40,729 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 322071007517476 could not be translated for associated CType ARRAY#_15_~~Element~0# [2019-09-08 16:30:40,729 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 322071007517523 could not be translated for associated CType ARRAY#_15_~~Element~0# [2019-09-08 16:30:40,730 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 322071007517508 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# [2019-09-08 16:30:40,730 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 322071007517481 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# [2019-09-08 16:30:40,731 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 322071007517515 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# [2019-09-08 16:30:40,787 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,789 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,790 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,791 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,791 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,794 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,794 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,795 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,796 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,804 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,804 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,805 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,805 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,806 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,807 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,808 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,808 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,879 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,880 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,881 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,881 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,882 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,883 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,888 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,888 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,890 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,891 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,892 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,892 WARN L1298 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-09-08 16:30:40,970 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 08.09 04:30:40 BoogieIcfgContainer [2019-09-08 16:30:40,971 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-09-08 16:30:40,976 INFO L168 Benchmark]: Toolchain (without parser) took 48783.60 ms. Allocated memory was 132.1 MB in the beginning and 1.2 GB in the end (delta: 1.1 GB). Free memory was 79.4 MB in the beginning and 352.8 MB in the end (delta: -273.4 MB). Peak memory consumption was 778.8 MB. Max. memory is 7.1 GB. [2019-09-08 16:30:40,978 INFO L168 Benchmark]: CDTParser took 0.26 ms. Allocated memory is still 132.1 MB. Free memory was 106.6 MB in the beginning and 106.3 MB in the end (delta: 210.0 kB). Peak memory consumption was 210.0 kB. Max. memory is 7.1 GB. [2019-09-08 16:30:40,984 INFO L168 Benchmark]: CACSL2BoogieTranslator took 2455.09 ms. Allocated memory was 132.1 MB in the beginning and 225.4 MB in the end (delta: 93.3 MB). Free memory was 79.2 MB in the beginning and 85.4 MB in the end (delta: -6.2 MB). Peak memory consumption was 92.4 MB. Max. memory is 7.1 GB. [2019-09-08 16:30:40,985 INFO L168 Benchmark]: Boogie Preprocessor took 363.93 ms. Allocated memory was 225.4 MB in the beginning and 272.1 MB in the end (delta: 46.7 MB). Free memory was 85.4 MB in the beginning and 219.6 MB in the end (delta: -134.2 MB). Peak memory consumption was 32.5 MB. Max. memory is 7.1 GB. [2019-09-08 16:30:40,986 INFO L168 Benchmark]: RCFGBuilder took 39758.62 ms. Allocated memory was 272.1 MB in the beginning and 1.2 GB in the end (delta: 911.2 MB). Free memory was 219.6 MB in the beginning and 323.5 MB in the end (delta: -103.9 MB). Peak memory consumption was 1.1 GB. Max. memory is 7.1 GB. [2019-09-08 16:30:40,987 INFO L168 Benchmark]: TraceAbstraction took 6201.69 ms. Allocated memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 1.0 MB). Free memory was 323.5 MB in the beginning and 352.8 MB in the end (delta: -29.4 MB). There was no memory consumed. Max. memory is 7.1 GB. [2019-09-08 16:30:40,999 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26 ms. Allocated memory is still 132.1 MB. Free memory was 106.6 MB in the beginning and 106.3 MB in the end (delta: 210.0 kB). Peak memory consumption was 210.0 kB. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 2455.09 ms. Allocated memory was 132.1 MB in the beginning and 225.4 MB in the end (delta: 93.3 MB). Free memory was 79.2 MB in the beginning and 85.4 MB in the end (delta: -6.2 MB). Peak memory consumption was 92.4 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 363.93 ms. Allocated memory was 225.4 MB in the beginning and 272.1 MB in the end (delta: 46.7 MB). Free memory was 85.4 MB in the beginning and 219.6 MB in the end (delta: -134.2 MB). Peak memory consumption was 32.5 MB. Max. memory is 7.1 GB. * RCFGBuilder took 39758.62 ms. Allocated memory was 272.1 MB in the beginning and 1.2 GB in the end (delta: 911.2 MB). Free memory was 219.6 MB in the beginning and 323.5 MB in the end (delta: -103.9 MB). Peak memory consumption was 1.1 GB. Max. memory is 7.1 GB. * TraceAbstraction took 6201.69 ms. Allocated memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 1.0 MB). Free memory was 323.5 MB in the beginning and 352.8 MB in the end (delta: -29.4 MB). There was no memory consumed. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 322071007517500 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 322071007517476 could not be translated for associated CType ARRAY#_15_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 322071007517523 could not be translated for associated CType ARRAY#_15_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 322071007517508 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 322071007517481 could not be translated for associated CType STRUCT~~header_ops?create~*((*sk_buff *net_device USHORT *VOID *VOID UINT ) : INT)?parse~*((*sk_buff *UCHAR ) : INT)?rebuild~*((*sk_buff ) : INT)?cache~*((*neighbour *hh_cache ~__be16~0 ) : INT)?cache_update~*((*hh_cache *net_device *UCHAR ) : VOID)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 322071007517515 could not be translated for associated CType STRUCT~~hdlc_proto?open~*((*net_device ) : INT)?close~*((*net_device ) : VOID)?start~*((*net_device ) : VOID)?stop~*((*net_device ) : VOID)?detach~*((*net_device ) : VOID)?ioctl~*((*net_device *ifreq ) : INT)?type_trans~*((*sk_buff *net_device ) : ~__be16~0)?netif_rx~*((*sk_buff ) : INT)?xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?module~*module?next~*hdlc_proto# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch269 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch271 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 5549]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseOr at line 5112. Possible FailurePath: [L5572] int LDV_IN_INTERRUPT = 1; [L5573] struct sk_buff *proto_group1 ; [L5574] int ldv_state_variable_0 ; [L5575] int ldv_state_variable_3 ; [L5576] int ldv_timer_state_1 = 0; [L5577] int ldv_state_variable_2 ; [L5578] struct net_device *proto_group0 ; [L5579] int ref_cnt ; [L5580] int ldv_state_variable_1 ; [L5581] struct timer_list *ldv_timer_list_1 ; [L5959-L5961] static struct hdlc_proto proto = {0, 0, & cisco_start, & cisco_stop, 0, & cisco_ioctl, & cisco_type_trans, & cisco_rx, 0, & __this_module, 0}; [L5962] static struct header_ops const cisco_header_ops = {& cisco_hard_header, 0, 0, 0, 0}; [L6073] int ldv_retval_0 ; [L6369] Element set_impl[15] ; [L6370] int last_index = 0; [L6504] Set LDV_SKBS ; VAL [\old(cisco_header_ops)=null, \old(cisco_header_ops)=null, \old(last_index)=322071007517518, \old(LDV_IN_INTERRUPT)=322071007517474, \old(ldv_retval_0)=322071007517472, \old(LDV_SKBS)=322071007517480, \old(LDV_SKBS)=322071007517461, \old(ldv_state_variable_0)=322071007517485, \old(ldv_state_variable_1)=322071007517519, \old(ldv_state_variable_2)=322071007517513, \old(ldv_state_variable_3)=322071007517542, \old(ldv_timer_list_1)=322071007517527, \old(ldv_timer_list_1)=322071007517526, \old(ldv_timer_state_1)=322071007517538, \old(proto)=null, \old(proto)=null, \old(proto_group0)=322071007517507, \old(proto_group0)=322071007517503, \old(proto_group1)=322071007517493, \old(proto_group1)=322071007517475, \old(ref_cnt)=322071007517509, \old(set_impl)=null, \old(set_impl)=null, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6137] struct ifreq *ldvarg0 ; [L6138] void *tmp ; [L6139] unsigned int ldvarg1 ; [L6140] unsigned int tmp___0 ; [L6141] unsigned short ldvarg4 ; [L6142] unsigned short tmp___1 ; [L6143] struct sk_buff *ldvarg3 ; [L6144] void *tmp___2 ; [L6145] struct net_device *ldvarg5 ; [L6146] void *tmp___3 ; [L6147] void *ldvarg2 ; [L6148] void *tmp___4 ; [L6149] void *ldvarg6 ; [L6150] void *tmp___5 ; [L6151] int tmp___6 ; [L6152] int tmp___7 ; [L6153] int tmp___8 ; [L6154] int tmp___9 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6156] CALL, EXPR ldv_zalloc(40UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=40, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5506] void *p ; [L5507] void *tmp ; [L5508] int tmp___0 ; [L5510] tmp___0 = __VERIFIER_nondet_int() [L5511] COND TRUE tmp___0 != 0 [L5512] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=40, \result={0:0}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, size=40, tmp___0=1] [L6156] RET, EXPR ldv_zalloc(40UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(40UL)={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6156] tmp = ldv_zalloc(40UL) [L6157] ldvarg0 = (struct ifreq *)tmp [L6158] tmp___0 = __VERIFIER_nondet_uint() [L6159] ldvarg1 = tmp___0 [L6160] tmp___1 = __VERIFIER_nondet_ushort() [L6161] ldvarg4 = tmp___1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg4=56094, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094] [L6162] CALL, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=232, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5506] void *p ; [L5507] void *tmp ; [L5508] int tmp___0 ; [L5510] tmp___0 = __VERIFIER_nondet_int() [L5511] COND TRUE tmp___0 != 0 [L5512] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=232, \result={0:0}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, size=232, tmp___0=1] [L6162] RET, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg4=56094, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094] [L6162] tmp___2 = ldv_zalloc(232UL) [L6163] ldvarg3 = (struct sk_buff *)tmp___2 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg3={0:0}, ldvarg4=56094, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}] [L6164] CALL, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=3264, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5506] void *p ; [L5507] void *tmp ; [L5508] int tmp___0 ; [L5510] tmp___0 = __VERIFIER_nondet_int() [L5511] COND TRUE tmp___0 != 0 [L5512] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=3264, \result={0:0}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, size=3264, tmp___0=1] [L6164] RET, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg3={0:0}, ldvarg4=56094, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}] [L6164] tmp___3 = ldv_zalloc(3264UL) [L6165] ldvarg5 = (struct net_device *)tmp___3 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}] [L6166] CALL, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=1, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5506] void *p ; [L5507] void *tmp ; [L5508] int tmp___0 ; [L5510] tmp___0 = __VERIFIER_nondet_int() [L5511] COND TRUE tmp___0 != 0 [L5512] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=1, \result={0:0}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, size=1, tmp___0=1] [L6166] RET, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}] [L6166] tmp___4 = ldv_zalloc(1UL) [L6167] ldvarg2 = tmp___4 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}] [L6168] CALL, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=1, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5506] void *p ; [L5507] void *tmp ; [L5508] int tmp___0 ; [L5510] tmp___0 = __VERIFIER_nondet_int() [L5511] COND TRUE tmp___0 != 0 [L5512] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=1, \result={0:0}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, size=1, tmp___0=1] [L6168] RET, EXPR ldv_zalloc(1UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}] [L6168] tmp___5 = ldv_zalloc(1UL) [L6169] ldvarg6 = tmp___5 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}] [L6170] CALL ldv_initialize() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6523] CALL ldv_set_init(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={-16:0}] [L6375] set = set_impl [L6376] last_index = 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={-16:0}, set_impl={-16:0}] [L6523] RET ldv_set_init(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6170] RET ldv_initialize() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}] [L6171] ldv_state_variable_1 = 1 [L6172] ref_cnt = 0 [L6173] ldv_state_variable_0 = 1 [L6174] ldv_state_variable_3 = 0 [L6175] ldv_state_variable_2 = 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}] [L6177] tmp___6 = __VERIFIER_nondet_int() [L6179] case 0: [L6185] case 1: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1] [L6186] COND TRUE ldv_state_variable_0 != 0 [L6187] tmp___7 = __VERIFIER_nondet_int() [L6189] case 0: [L6197] case 1: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1] [L6198] COND TRUE ldv_state_variable_0 == 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1] [L6199] CALL, EXPR mod_init() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6062] FCALL register_hdlc_protocol(& proto) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6063] return (0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6199] RET, EXPR mod_init() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, mod_init()=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1] [L6199] ldv_retval_0 = mod_init() [L6200] COND TRUE ldv_retval_0 == 0 [L6201] ldv_state_variable_0 = 3 [L6202] ldv_state_variable_2 = 1 [L6203] ldv_state_variable_3 = 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1] [L6204] CALL ldv_initialize_hdlc_proto_3() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6096] void *tmp ; [L6097] void *tmp___0 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6099] CALL, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=232, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5506] void *p ; [L5507] void *tmp ; [L5508] int tmp___0 ; [L5510] tmp___0 = __VERIFIER_nondet_int() [L5511] COND TRUE tmp___0 != 0 [L5512] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=232, \result={0:0}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, size=232, tmp___0=1] [L6099] RET, EXPR ldv_zalloc(232UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(232UL)={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6099] tmp = ldv_zalloc(232UL) [L6100] proto_group1 = (struct sk_buff *)tmp VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}] [L6101] CALL, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=3264, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5506] void *p ; [L5507] void *tmp ; [L5508] int tmp___0 ; [L5510] tmp___0 = __VERIFIER_nondet_int() [L5511] COND TRUE tmp___0 != 0 [L5512] return ((void *)0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=3264, \result={0:0}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, size=3264, tmp___0=1] [L6101] RET, EXPR ldv_zalloc(3264UL) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(3264UL)={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}] [L6101] tmp___0 = ldv_zalloc(3264UL) [L6102] proto_group0 = (struct net_device *)tmp___0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0={0:0}] [L6204] RET ldv_initialize_hdlc_proto_3() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1] [L6207] COND FALSE !(ldv_retval_0 != 0) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1] [L6177] tmp___6 = __VERIFIER_nondet_int() [L6179] case 0: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1] [L6180] COND TRUE ldv_state_variable_1 != 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1] [L6181] CALL choose_timer_1(ldv_timer_list_1) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, timer={0:0}] [L6109] LDV_IN_INTERRUPT = 2 [L6110] EXPR timer->data [L6110] EXPR timer->function VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, timer={0:0}, timer={0:0}, timer->data=4294967305, timer->function={322071007517531:322071007517505}] [L6110] CALL (*(timer->function))(timer->data) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5872] struct net_device *dev ; [L5873] hdlc_device *hdlc ; [L5874] struct hdlc_device *tmp ; [L5875] struct cisco_state *st ; [L5876] struct cisco_state *tmp___0 ; [L5877] __u32 tmp___1 ; [L5878] __u32 tmp___2 ; [L5880] dev = (struct net_device *)arg VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5881] CALL, EXPR dev_to_hdlc(dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5633] void *tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, dev={0:9}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5635] CALL, EXPR netdev_priv((struct net_device const *)dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5590] return ((void *)dev + 3264U); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={0:3273}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, dev={0:9}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5635] RET, EXPR netdev_priv((struct net_device const *)dev) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, dev={0:9}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, netdev_priv((struct net_device const *)dev)={0:3273}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5635] tmp = netdev_priv((struct net_device const *)dev) [L5636] return ((struct hdlc_device *)tmp); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={0:3273}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, dev={0:9}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:3273}] [L5881] RET, EXPR dev_to_hdlc(dev) VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, dev_to_hdlc(dev)={0:3273}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5881] tmp = dev_to_hdlc(dev) [L5882] hdlc = tmp VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:3273}] [L5883] CALL, EXPR state(hdlc) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, hdlc={0:3273}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5665] EXPR hdlc->state [L5665] return ((struct cisco_state *)hdlc->state); [L5883] RET, EXPR state(hdlc) VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, state(hdlc)={-16:52}, tmp={0:3273}] [L5883] tmp___0 = state(hdlc) [L5884] st = tmp___0 VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, tmp={0:3273}, tmp___0={-16:52}] [L5885] CALL spin_lock(& st->lock) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-16:136}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5252] FCALL _raw_spin_lock(& lock->ldv_6338.rlock) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-16:136}, lock={-16:136}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5885] RET spin_lock(& st->lock) VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, tmp={0:3273}, tmp___0={-16:52}] [L5886] EXPR st->up [L5886] st->up != 0 && (long )((st->last_poll + (unsigned long )(st->settings.timeout * 250U)) - (unsigned long )jiffies) < 0L [L5886] EXPR st->last_poll [L5886] EXPR st->settings.timeout [L5886] st->up != 0 && (long )((st->last_poll + (unsigned long )(st->settings.timeout * 250U)) - (unsigned long )jiffies) < 0L VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, st->last_poll=322071007517460, st->settings.timeout=0, st->up=2, st->up != 0 && (long )((st->last_poll + (unsigned long )(st->settings.timeout * 250U)) - (unsigned long )jiffies) < 0L=0, tmp={0:3273}, tmp___0={-16:52}] [L5886] COND FALSE !(st->up != 0 && (long )((st->last_poll + (unsigned long )(st->settings.timeout * 250U)) - (unsigned long )jiffies) < 0L) [L5892] EXPR st->rxseq VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, st->rxseq=322071007517502, tmp={0:3273}, tmp___0={-16:52}] [L5892] CALL, EXPR __fswab32(st->rxseq) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=322071007517502, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5117] __u32 tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=322071007517502, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=322071007517502] [L5119] CALL, EXPR __arch_swab32(val) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=322071007517502, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5106] return (val); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=322071007517502, \result=322071007517502, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=322071007517502] [L5119] RET, EXPR __arch_swab32(val) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=322071007517502, __arch_swab32(val)=322071007517502, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=322071007517502] [L5119] tmp = __arch_swab32(val) [L5120] return (tmp); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=322071007517502, \result=322071007517502, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp=4294892350, val=322071007517502] [L5892] RET, EXPR __fswab32(st->rxseq) VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __fswab32(st->rxseq)=322071007517502, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, st->rxseq=322071007517502, tmp={0:3273}, tmp___0={-16:52}] [L5892] tmp___1 = __fswab32(st->rxseq) [L5893] EXPR st->txseq [L5893] st->txseq = st->txseq + 1U [L5894] EXPR st->txseq VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, st->txseq=1, tmp={0:3273}, tmp___0={-16:52}, tmp___1=4294892350] [L5894] CALL, EXPR __fswab32(st->txseq) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=1, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5117] __u32 tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=1, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=1] [L5119] CALL, EXPR __arch_swab32(val) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=1, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5106] return (val); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=1, \result=1, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=1] [L5119] RET, EXPR __arch_swab32(val) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=1, __arch_swab32(val)=1, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=1] [L5119] tmp = __arch_swab32(val) [L5120] return (tmp); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=1, \result=1, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp=1, val=1] [L5894] RET, EXPR __fswab32(st->txseq) VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __fswab32(st->txseq)=1, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, st->txseq=1, tmp={0:3273}, tmp___0={-16:52}, tmp___1=4294892350] [L5894] tmp___2 = __fswab32(st->txseq) [L5895] CALL cisco_keepalive_send(dev, 2U, tmp___2, tmp___1) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5690] struct sk_buff *skb ; [L5691] struct cisco_packet *data ; [L5692] __u32 tmp ; [L5693] __u32 tmp___0 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, type=2] [L5695] CALL, EXPR ldv_dev_alloc_skb_12(22U) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(length)=22, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6351] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(length)=22, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, length=22, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6353] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6507] void *skb ; [L6508] void *tmp___7 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6510] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=204, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5506] void *p ; [L5507] void *tmp ; [L5508] int tmp___0 ; [L5510] tmp___0 = __VERIFIER_nondet_int() [L5511] COND FALSE !(tmp___0 != 0) [L5514] EXPR, FCALL calloc(1UL, size) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=204, __this_module={322071007517478:322071007517510}, calloc(1UL, size)={-2:0}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, size=204, tmp___0=0] [L5514] tmp = calloc(1UL, size) [L5515] p = tmp [L5517] return (p); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(size)=204, \result={-2:0}, __this_module={322071007517478:322071007517510}, calloc(1UL, size)={-2:0}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, p={-2:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, size=204, tmp={-2:0}, tmp___0=0] [L6510] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, ldv_zalloc(sizeof(struct sk_buff___0 ))={-2:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6510] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6511] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, tmp___7={-2:0}] [L6512] COND FALSE !(! skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, tmp___7={-2:0}] [L6515] CALL ldv_set_add(LDV_SKBS, skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, e={-2:0}, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={-16:0}] [L6383] int i ; [L6385] i = 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, e={-2:0}, e={-2:0}, i=0, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-16:0}] [L6386] COND TRUE 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, e={-2:0}, e={-2:0}, i=0, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-16:0}] [L6387] COND FALSE !(i < last_index) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, e={-2:0}, e={-2:0}, i=0, jiffies=4294892308, last_index=0, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-16:0}] [L6397] COND TRUE last_index < 15 [L6398] set_impl[last_index] = e [L6399] last_index = last_index + 1 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, e={-2:0}, e={-2:0}, i=0, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-16:0}] [L6515] RET ldv_set_add(LDV_SKBS, skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, tmp___7={-2:0}] [L6516] return (skb); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={-2:0}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, tmp___7={-2:0}] [L6353] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(length)=22, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, ldv_skb_alloc()={-2:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, length=22, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6353] tmp = ldv_skb_alloc() [L6354] return (tmp); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(length)=22, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result={-2:0}, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, length=22, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={-2:0}] [L5695] RET, EXPR ldv_dev_alloc_skb_12(22U) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, ldv_dev_alloc_skb_12(22U)={-2:0}, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, type=2] [L5695] skb = ldv_dev_alloc_skb_12(22U) [L5696] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, type=2] [L5701] CALL skb_reserve(skb, 4) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(len)=4, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}] [L5464] EXPR skb->data [L5464] skb->data = skb->data + (unsigned long )len [L5465] EXPR skb->tail [L5465] skb->tail = skb->tail + (sk_buff_data_t )len [L5701] RET skb_reserve(skb, 4) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, type=2] [L5702] CALL cisco_hard_header(skb, dev, 32821, (void const *)0, (void const *)0, 0U) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(len)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=32821, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, daddr={0:0}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, set_impl={-16:0}, skb={-2:0}] [L5671] struct hdlc_header *data ; [L5672] __u16 tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(len)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=32821, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, daddr={0:0}, daddr={0:0}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, len=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, saddr={0:0}, set_impl={-16:0}, skb={-2:0}, skb={-2:0}, type=32821] [L5674] CALL skb_push(skb, 4U) VAL [\old(arg1)=4, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg0={-2:0}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6684] CALL, EXPR external_alloc() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6695] return __VERIFIER_nondet_pointer(); [L6684] RET, EXPR external_alloc() VAL [\old(arg1)=4, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg0={-2:0}, arg0={-2:0}, arg1=4, cisco_header_ops={-4:0}, external_alloc()={322071007517536:322071007517491}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6684] return (unsigned char *)external_alloc(); [L5674] RET skb_push(skb, 4U) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(len)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=32821, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, daddr={0:0}, daddr={0:0}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, len=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, saddr={0:0}, set_impl={-16:0}, skb={-2:0}, skb={-2:0}, skb_push(skb, 4U)={322071007517536:322071007517491}, type=32821] [L5675] EXPR skb->data [L5675] data = (struct hdlc_header *)skb->data [L5676] COND TRUE (unsigned int )type == 32821U [L5677] data->address = 143U VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(len)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=32821, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, daddr={0:0}, daddr={0:0}, data={-16:116}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, len=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, saddr={0:0}, set_impl={-16:0}, skb={-2:0}, skb={-2:0}, type=32821] [L5681] data->control = 0U VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(len)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=32821, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, daddr={0:0}, daddr={0:0}, data={-16:116}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, len=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, saddr={0:0}, set_impl={-16:0}, skb={-2:0}, skb={-2:0}, type=32821] [L5682] CALL, EXPR __fswab16((int )type) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=32821, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5112] return ((__u16 )((int )((short )((int )val << 8)) | (int )((short )((int )val >> 8)))); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=32821, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=32821] [L5682] RET, EXPR __fswab16((int )type) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(len)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=32821, __fswab16((int )type)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, daddr={0:0}, daddr={0:0}, data={-16:116}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, len=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, saddr={0:0}, set_impl={-16:0}, skb={-2:0}, skb={-2:0}, type=32821] [L5682] tmp = __fswab16((int )type) [L5683] data->protocol = tmp [L5684] return (4); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(len)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=32821, \result=4, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, daddr={0:0}, daddr={0:0}, data={-16:116}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, len=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, saddr={0:0}, saddr={0:0}, set_impl={-16:0}, skb={-2:0}, skb={-2:0}, tmp=0, type=32821] [L5702] RET cisco_hard_header(skb, dev, 32821, (void const *)0, (void const *)0, 0U) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_hard_header(skb, dev, 32821, (void const *)0, (void const *)0, 0U)=4, cisco_header_ops={-4:0}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, type=2] [L5703] EXPR skb->data [L5703] data = (struct cisco_packet *)skb->data + 4U [L5704] CALL, EXPR __fswab32(type) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5117] __u32 tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=2] [L5119] CALL, EXPR __arch_swab32(val) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5106] return (val); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=2, \result=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=2] [L5119] RET, EXPR __arch_swab32(val) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=2, __arch_swab32(val)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=2] [L5119] tmp = __arch_swab32(val) [L5120] return (tmp); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=2, \result=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp=2, val=2] [L5704] RET, EXPR __fswab32(type) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __fswab32(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, data={-16:188}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, type=2] [L5704] tmp = __fswab32(type) [L5705] data->type = tmp [L5706] data->par1 = par1 [L5707] data->par2 = par2 [L5708] data->rel = 65535U VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, data={-16:188}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, tmp=2, type=2] [L5709] CALL, EXPR __fswab32(((__u32 )jiffies + 75000U) * 4U) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=48, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5117] __u32 tmp ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=48, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=48] [L5119] CALL, EXPR __arch_swab32(val) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=48, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5106] return (val); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=48, \result=48, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=48] [L5119] RET, EXPR __arch_swab32(val) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=48, __arch_swab32(val)=48, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, val=48] [L5119] tmp = __arch_swab32(val) [L5120] return (tmp); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(val)=48, \result=48, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp=48, val=48] [L5709] RET, EXPR __fswab32(((__u32 )jiffies + 75000U) * 4U) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __fswab32(((__u32 )jiffies + 75000U) * 4U)=48, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, data={-16:188}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, tmp=2, type=2] [L5709] tmp___0 = __fswab32(((__u32 )jiffies + 75000U) * 4U) [L5710] data->time = tmp___0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, data={-16:188}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, tmp=2, tmp___0=48, type=2] [L5711] CALL skb_put(skb, 18U) VAL [\old(arg1)=18, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg0={-2:0}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6688] CALL, EXPR external_alloc() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6695] return __VERIFIER_nondet_pointer(); [L6688] RET, EXPR external_alloc() VAL [\old(arg1)=18, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg0={-2:0}, arg0={-2:0}, arg1=18, cisco_header_ops={-4:0}, external_alloc()={322071007517540:322071007517496}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6688] return (unsigned char *)external_alloc(); [L5711] RET skb_put(skb, 18U) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, data={-16:188}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, skb_put(skb, 18U)={322071007517540:322071007517496}, tmp=2, tmp___0=48, type=2] [L5712] skb->priority = 7U [L5713] skb->dev = dev VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, data={-16:188}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, tmp=2, tmp___0=48, type=2] [L5714] CALL skb_reset_network_header(skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}] [L5472] EXPR skb->data [L5472] EXPR skb->head [L5472] skb->network_header = (int )((__u16 )((long )skb->data)) - (int )((__u16 )((long )skb->head)) [L5714] RET skb_reset_network_header(skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, data={-16:188}, dev={0:9}, dev={0:9}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, tmp=2, tmp___0=48, type=2] [L5715] CALL dev_queue_xmit(skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg0={-2:0}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6638] return __VERIFIER_nondet_int(); [L5715] RET dev_queue_xmit(skb) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(par1)=1, \old(par2)=4294892350, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \old(type)=2, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, data={-16:188}, dev={0:9}, dev={0:9}, dev_queue_xmit(skb)=0, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, par1=1, par2=4294892350, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, skb={-2:0}, tmp=2, tmp___0=48, type=2] [L5895] RET cisco_keepalive_send(dev, 2U, tmp___2, tmp___1) VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, tmp={0:3273}, tmp___0={-16:52}, tmp___1=4294892350, tmp___2=1] [L5896] CALL spin_unlock(& st->lock) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-16:136}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5259] FCALL _raw_spin_unlock(& lock->ldv_6338.rlock) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, lock={-16:136}, lock={-16:136}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5896] RET spin_unlock(& st->lock) VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, tmp={0:3273}, tmp___0={-16:52}, tmp___1=4294892350, tmp___2=1] [L5897] EXPR st->settings.interval [L5897] st->timer.expires = (unsigned long )(st->settings.interval * 250U) + (unsigned long )jiffies [L5898] st->timer.function = & cisco_timer [L5899] st->timer.data = arg VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, tmp={0:3273}, tmp___0={-16:52}, tmp___1=4294892350, tmp___2=1] [L5900] FCALL add_timer(& st->timer) VAL [\old(arg)=9, \old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, arg=9, cisco_header_ops={-4:0}, dev={0:9}, hdlc={0:3273}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, st={-16:52}, tmp={0:3273}, tmp___0={-16:52}, tmp___1=4294892350, tmp___2=1] [L6110] RET (*(timer->function))(timer->data) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=2, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=0, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, timer={0:0}, timer={0:0}, timer->data=4294967305, timer->function={322071007517531:322071007517505}] [L6111] LDV_IN_INTERRUPT = 1 [L6112] ldv_timer_state_1 = 2 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, timer={0:0}, timer={0:0}] [L6181] RET choose_timer_1(ldv_timer_list_1) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=0, tmp___7=1] [L6177] tmp___6 = __VERIFIER_nondet_int() [L6179] case 0: [L6185] case 1: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=1] [L6186] COND TRUE ldv_state_variable_0 != 0 [L6187] tmp___7 = __VERIFIER_nondet_int() [L6189] case 0: VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0] [L6190] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0] [L6191] CALL mod_exit() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6069] FCALL unregister_hdlc_protocol(& proto) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6191] RET mod_exit() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0] [L6192] ldv_state_variable_0 = 2 VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, ldvarg0={0:0}, ldvarg1=4294892380, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=56094, ldvarg5={0:0}, ldvarg6={0:0}, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp={0:0}, tmp___0=4294892380, tmp___1=56094, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5={0:0}, tmp___6=1, tmp___7=0] [L6310] CALL ldv_check_final_state() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6574] int tmp___7 ; VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6576] CALL, EXPR ldv_set_is_empty(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set_impl={-16:0}] [L6465] return (last_index == 0); VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, \result=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={-16:0}] [L6576] RET, EXPR ldv_set_is_empty(LDV_SKBS) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_set_is_empty(LDV_SKBS)=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L6576] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6577] COND FALSE !(\read(tmp___7)) VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}, tmp___7=0] [L6579] CALL ldv_error() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] [L5549] __VERIFIER_error() VAL [\old(last_index)=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(proto_group0)=0, \old(proto_group0)=0, \old(proto_group1)=0, \old(proto_group1)=0, \old(ref_cnt)=0, __this_module={322071007517478:322071007517510}, cisco_header_ops={-4:0}, jiffies=4294892308, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_timer_list_1={0:0}, ldv_timer_state_1=2, proto={-18:0}, proto_group0={0:0}, proto_group1={0:0}, ref_cnt=0, set_impl={-16:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 117 procedures, 800 locations, 1 error locations. UNSAFE Result, 6.1s OverallTime, 6 OverallIterations, 8 TraceHistogramMax, 1.9s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 4594 SDtfs, 2477 SDslu, 15557 SDs, 0 SdLazy, 441 SolverSat, 13 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.7s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 35 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2569occurred in iteration=5, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 5 MinimizatonAttempts, 8 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.0s SsaConstructionTime, 0.9s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 941 NumberOfCodeBlocks, 941 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 658 ConstructedInterpolants, 0 QuantifiedInterpolants, 157156 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 5 InterpolantComputations, 5 PerfectInterpolantSequences, 427/427 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request...