java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf --abstractinterpretationv2.abstract.domain IntervalDomain --traceabstraction.trace.refinement.strategy TAIPAN --traceabstraction.abstract.interpretation.mode USE_PREDICATES -i ../../../trunk/examples/svcomp/ldv-validator-v0.6/linux-stable-1b0b0ac-1-108_1a-drivers--net--slip.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.1.24-13a467a-m [2019-10-15 01:01:48,676 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-10-15 01:01:48,678 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-10-15 01:01:48,692 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-10-15 01:01:48,692 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-10-15 01:01:48,693 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-10-15 01:01:48,694 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-10-15 01:01:48,696 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-10-15 01:01:48,698 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-10-15 01:01:48,699 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-10-15 01:01:48,700 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-10-15 01:01:48,701 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-10-15 01:01:48,701 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-10-15 01:01:48,702 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-10-15 01:01:48,703 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-10-15 01:01:48,704 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-10-15 01:01:48,705 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-10-15 01:01:48,706 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-10-15 01:01:48,708 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-10-15 01:01:48,710 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-10-15 01:01:48,711 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-10-15 01:01:48,712 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-10-15 01:01:48,713 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-10-15 01:01:48,714 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-10-15 01:01:48,716 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-10-15 01:01:48,716 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-10-15 01:01:48,717 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-10-15 01:01:48,717 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-10-15 01:01:48,718 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-10-15 01:01:48,719 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-10-15 01:01:48,719 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-10-15 01:01:48,720 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-10-15 01:01:48,720 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-10-15 01:01:48,721 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-10-15 01:01:48,722 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-10-15 01:01:48,722 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-10-15 01:01:48,723 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-10-15 01:01:48,723 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-10-15 01:01:48,723 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-10-15 01:01:48,724 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-10-15 01:01:48,725 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-10-15 01:01:48,726 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2019-10-15 01:01:48,746 INFO L113 SettingsManager]: Loading preferences was successful [2019-10-15 01:01:48,746 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-10-15 01:01:48,748 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-10-15 01:01:48,749 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-10-15 01:01:48,749 INFO L138 SettingsManager]: * Use SBE=true [2019-10-15 01:01:48,749 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-10-15 01:01:48,749 INFO L138 SettingsManager]: * sizeof long=4 [2019-10-15 01:01:48,750 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-10-15 01:01:48,750 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-10-15 01:01:48,750 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-10-15 01:01:48,751 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-10-15 01:01:48,751 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-10-15 01:01:48,751 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-10-15 01:01:48,752 INFO L138 SettingsManager]: * sizeof long double=12 [2019-10-15 01:01:48,752 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-10-15 01:01:48,752 INFO L138 SettingsManager]: * Use constant arrays=true [2019-10-15 01:01:48,752 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-10-15 01:01:48,753 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-10-15 01:01:48,753 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-10-15 01:01:48,753 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-10-15 01:01:48,753 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-10-15 01:01:48,754 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-10-15 01:01:48,754 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-10-15 01:01:48,754 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-10-15 01:01:48,754 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-10-15 01:01:48,754 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-10-15 01:01:48,755 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-10-15 01:01:48,755 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-10-15 01:01:48,755 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2: Abstract domain -> IntervalDomain Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Trace refinement strategy -> TAIPAN Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Abstract interpretation Mode -> USE_PREDICATES [2019-10-15 01:01:49,065 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-10-15 01:01:49,078 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-10-15 01:01:49,081 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-10-15 01:01:49,082 INFO L271 PluginConnector]: Initializing CDTParser... [2019-10-15 01:01:49,082 INFO L275 PluginConnector]: CDTParser initialized [2019-10-15 01:01:49,083 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-validator-v0.6/linux-stable-1b0b0ac-1-108_1a-drivers--net--slip.ko-entry_point.cil.out.i [2019-10-15 01:01:49,156 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6c2910d84/5768229f00294243b8911105558102a5/FLAGfb093696d [2019-10-15 01:01:49,915 INFO L306 CDTParser]: Found 1 translation units. [2019-10-15 01:01:49,916 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ldv-validator-v0.6/linux-stable-1b0b0ac-1-108_1a-drivers--net--slip.ko-entry_point.cil.out.i [2019-10-15 01:01:49,970 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6c2910d84/5768229f00294243b8911105558102a5/FLAGfb093696d [2019-10-15 01:01:50,485 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6c2910d84/5768229f00294243b8911105558102a5 [2019-10-15 01:01:50,495 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-10-15 01:01:50,496 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2019-10-15 01:01:50,497 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-10-15 01:01:50,497 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-10-15 01:01:50,499 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-10-15 01:01:50,500 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 01:01:50" (1/1) ... [2019-10-15 01:01:50,503 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@ca4e384 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:50, skipping insertion in model container [2019-10-15 01:01:50,503 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 01:01:50" (1/1) ... [2019-10-15 01:01:50,512 INFO L142 MainTranslator]: Starting translation in SV-COMP mode [2019-10-15 01:01:50,635 INFO L173 MainTranslator]: Built tables and reachable declarations [2019-10-15 01:01:52,233 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-10-15 01:01:52,270 INFO L188 MainTranslator]: Completed pre-run [2019-10-15 01:01:52,564 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-10-15 01:01:53,012 INFO L192 MainTranslator]: Completed translation [2019-10-15 01:01:53,013 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:53 WrapperNode [2019-10-15 01:01:53,014 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-10-15 01:01:53,015 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-10-15 01:01:53,015 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-10-15 01:01:53,015 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-10-15 01:01:53,029 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:53" (1/1) ... [2019-10-15 01:01:53,029 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:53" (1/1) ... [2019-10-15 01:01:53,112 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:53" (1/1) ... [2019-10-15 01:01:53,113 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:53" (1/1) ... [2019-10-15 01:01:53,227 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:53" (1/1) ... [2019-10-15 01:01:53,261 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:53" (1/1) ... [2019-10-15 01:01:53,278 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:53" (1/1) ... [2019-10-15 01:01:53,310 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-10-15 01:01:53,311 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-10-15 01:01:53,311 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-10-15 01:01:53,311 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-10-15 01:01:53,314 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:53" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-10-15 01:01:53,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2019-10-15 01:01:53,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-10-15 01:01:53,410 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~int [2019-10-15 01:01:53,410 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2019-10-15 01:01:53,410 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bit [2019-10-15 01:01:53,411 INFO L138 BoogieDeclarations]: Found implementation of procedure clear_bit [2019-10-15 01:01:53,411 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_set_bit [2019-10-15 01:01:53,412 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_clear_bit [2019-10-15 01:01:53,412 INFO L138 BoogieDeclarations]: Found implementation of procedure constant_test_bit [2019-10-15 01:01:53,413 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2019-10-15 01:01:53,414 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2019-10-15 01:01:53,414 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2019-10-15 01:01:53,414 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ptr [2019-10-15 01:01:53,416 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ulong [2019-10-15 01:01:53,416 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2019-10-15 01:01:53,416 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2019-10-15 01:01:53,420 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int_nonpositive [2019-10-15 01:01:53,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2019-10-15 01:01:53,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_trap [2019-10-15 01:01:53,421 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2019-10-15 01:01:53,421 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2019-10-15 01:01:53,421 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock [2019-10-15 01:01:53,422 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_bh [2019-10-15 01:01:53,422 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock [2019-10-15 01:01:53,422 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_bh [2019-10-15 01:01:53,422 INFO L138 BoogieDeclarations]: Found implementation of procedure __kmalloc [2019-10-15 01:01:53,422 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2019-10-15 01:01:53,423 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2019-10-15 01:01:53,423 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2019-10-15 01:01:53,423 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reset_mac_header [2019-10-15 01:01:53,423 INFO L138 BoogieDeclarations]: Found implementation of procedure compat_ptr [2019-10-15 01:01:53,423 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_get_tx_queue [2019-10-15 01:01:53,423 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2019-10-15 01:01:53,424 INFO L138 BoogieDeclarations]: Found implementation of procedure unregister_netdevice [2019-10-15 01:01:53,424 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_tx_start_queue [2019-10-15 01:01:53,424 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_start_queue [2019-10-15 01:01:53,425 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_tx_wake_queue [2019-10-15 01:01:53,425 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_wake_queue [2019-10-15 01:01:53,425 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_tx_stop_queue [2019-10-15 01:01:53,425 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_stop_queue [2019-10-15 01:01:53,425 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_tx_queue_stopped [2019-10-15 01:01:53,425 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_queue_stopped [2019-10-15 01:01:53,426 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_running [2019-10-15 01:01:53,426 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_alloc_bufs [2019-10-15 01:01:53,426 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_free_bufs [2019-10-15 01:01:53,426 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_realloc_bufs [2019-10-15 01:01:53,426 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_lock [2019-10-15 01:01:53,426 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_unlock [2019-10-15 01:01:53,426 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_bump [2019-10-15 01:01:53,427 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_encaps [2019-10-15 01:01:53,427 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_write_wakeup [2019-10-15 01:01:53,427 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_tx_timeout [2019-10-15 01:01:53,427 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_xmit [2019-10-15 01:01:53,427 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_close [2019-10-15 01:01:53,427 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_open [2019-10-15 01:01:53,427 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_change_mtu [2019-10-15 01:01:53,428 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_get_stats64 [2019-10-15 01:01:53,428 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_init [2019-10-15 01:01:53,428 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_uninit [2019-10-15 01:01:53,428 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_free_netdev [2019-10-15 01:01:53,428 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_setup [2019-10-15 01:01:53,428 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_receive_buf [2019-10-15 01:01:53,429 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_sync [2019-10-15 01:01:53,429 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_alloc [2019-10-15 01:01:53,429 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_open [2019-10-15 01:01:53,429 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_close [2019-10-15 01:01:53,429 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_hangup [2019-10-15 01:01:53,430 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_esc [2019-10-15 01:01:53,430 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_unesc [2019-10-15 01:01:53,430 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_esc6 [2019-10-15 01:01:53,430 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_unesc6 [2019-10-15 01:01:53,430 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_ioctl [2019-10-15 01:01:53,430 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_compat_ioctl [2019-10-15 01:01:53,431 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_ioctl [2019-10-15 01:01:53,431 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_init [2019-10-15 01:01:53,431 INFO L138 BoogieDeclarations]: Found implementation of procedure slip_exit [2019-10-15 01:01:53,431 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_outfill [2019-10-15 01:01:53,432 INFO L138 BoogieDeclarations]: Found implementation of procedure sl_keepalive [2019-10-15 01:01:53,432 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_target_type_3 [2019-10-15 01:01:53,432 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_net_device_ops_4 [2019-10-15 01:01:53,433 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_1 [2019-10-15 01:01:53,434 INFO L138 BoogieDeclarations]: Found implementation of procedure choose_timer_1 [2019-10-15 01:01:53,434 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_1 [2019-10-15 01:01:53,434 INFO L138 BoogieDeclarations]: Found implementation of procedure choose_timer_2 [2019-10-15 01:01:53,435 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_2 [2019-10-15 01:01:53,435 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_2 [2019-10-15 01:01:53,435 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_2 [2019-10-15 01:01:53,435 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_1 [2019-10-15 01:01:53,435 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2019-10-15 01:01:53,435 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_sync_1 [2019-10-15 01:01:53,435 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_2 [2019-10-15 01:01:53,435 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_sl_alloc_bufs_3 [2019-10-15 01:01:53,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_register_netdevice_4 [2019-10-15 01:01:53,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_sync_5 [2019-10-15 01:01:53,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_sync_6 [2019-10-15 01:01:53,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_7 [2019-10-15 01:01:53,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_8 [2019-10-15 01:01:53,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_9 [2019-10-15 01:01:53,436 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_10 [2019-10-15 01:01:53,437 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_11 [2019-10-15 01:01:53,437 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_12 [2019-10-15 01:01:53,437 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_13 [2019-10-15 01:01:53,437 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_14 [2019-10-15 01:01:53,437 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_15 [2019-10-15 01:01:53,437 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_del_timer_16 [2019-10-15 01:01:53,438 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mod_timer_17 [2019-10-15 01:01:53,438 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_slip_open_18 [2019-10-15 01:01:53,438 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_callback_ret_val [2019-10-15 01:01:53,438 INFO L138 BoogieDeclarations]: Found implementation of procedure __netif_schedule [2019-10-15 01:01:53,438 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2019-10-15 01:01:53,438 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_to_user [2019-10-15 01:01:53,438 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock [2019-10-15 01:01:53,439 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_bh [2019-10-15 01:01:53,439 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_unlock [2019-10-15 01:01:53,439 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_unlock_bh [2019-10-15 01:01:53,439 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2019-10-15 01:01:53,439 INFO L138 BoogieDeclarations]: Found implementation of procedure alloc_netdev_mqs [2019-10-15 01:01:53,440 INFO L138 BoogieDeclarations]: Found implementation of procedure capable [2019-10-15 01:01:53,440 INFO L138 BoogieDeclarations]: Found implementation of procedure consume_skb [2019-10-15 01:01:53,440 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2019-10-15 01:01:53,440 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer_sync [2019-10-15 01:01:53,440 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_alloc_skb [2019-10-15 01:01:53,440 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_close [2019-10-15 01:01:53,441 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_trans_start [2019-10-15 01:01:53,442 INFO L138 BoogieDeclarations]: Found implementation of procedure free_netdev [2019-10-15 01:01:53,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2019-10-15 01:01:53,442 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2019-10-15 01:01:53,442 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2019-10-15 01:01:53,442 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2019-10-15 01:01:53,442 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep_interruptible [2019-10-15 01:01:53,442 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_rx [2019-10-15 01:01:53,443 INFO L138 BoogieDeclarations]: Found implementation of procedure netpoll_trap [2019-10-15 01:01:53,443 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2019-10-15 01:01:53,443 INFO L138 BoogieDeclarations]: Found implementation of procedure register_netdevice [2019-10-15 01:01:53,443 INFO L138 BoogieDeclarations]: Found implementation of procedure rtnl_lock [2019-10-15 01:01:53,444 INFO L138 BoogieDeclarations]: Found implementation of procedure rtnl_unlock [2019-10-15 01:01:53,444 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2019-10-15 01:01:53,448 INFO L138 BoogieDeclarations]: Found implementation of procedure slhc_compress [2019-10-15 01:01:53,448 INFO L138 BoogieDeclarations]: Found implementation of procedure slhc_free [2019-10-15 01:01:53,448 INFO L138 BoogieDeclarations]: Found implementation of procedure slhc_init [2019-10-15 01:01:53,449 INFO L138 BoogieDeclarations]: Found implementation of procedure slhc_remember [2019-10-15 01:01:53,449 INFO L138 BoogieDeclarations]: Found implementation of procedure slhc_uncompress [2019-10-15 01:01:53,449 INFO L138 BoogieDeclarations]: Found implementation of procedure tty_chars_in_buffer [2019-10-15 01:01:53,450 INFO L138 BoogieDeclarations]: Found implementation of procedure tty_devnum [2019-10-15 01:01:53,458 INFO L138 BoogieDeclarations]: Found implementation of procedure tty_hangup [2019-10-15 01:01:53,458 INFO L138 BoogieDeclarations]: Found implementation of procedure tty_mode_ioctl [2019-10-15 01:01:53,458 INFO L138 BoogieDeclarations]: Found implementation of procedure tty_register_ldisc [2019-10-15 01:01:53,458 INFO L138 BoogieDeclarations]: Found implementation of procedure tty_unregister_ldisc [2019-10-15 01:01:53,459 INFO L138 BoogieDeclarations]: Found implementation of procedure unregister_netdev [2019-10-15 01:01:53,459 INFO L138 BoogieDeclarations]: Found implementation of procedure unregister_netdevice_queue [2019-10-15 01:01:53,459 INFO L138 BoogieDeclarations]: Found implementation of procedure warn_slowpath_null [2019-10-15 01:01:53,459 INFO L138 BoogieDeclarations]: Found implementation of procedure external_alloc [2019-10-15 01:01:53,459 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2019-10-15 01:01:53,459 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2019-10-15 01:01:53,460 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2019-10-15 01:01:53,460 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2019-10-15 01:01:53,460 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2019-10-15 01:01:53,460 INFO L130 BoogieDeclarations]: Found specification of procedure set_bit [2019-10-15 01:01:53,460 INFO L130 BoogieDeclarations]: Found specification of procedure clear_bit [2019-10-15 01:01:53,460 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_set_bit [2019-10-15 01:01:53,460 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_clear_bit [2019-10-15 01:01:53,461 INFO L130 BoogieDeclarations]: Found specification of procedure constant_test_bit [2019-10-15 01:01:53,461 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2019-10-15 01:01:53,461 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2019-10-15 01:01:53,461 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2019-10-15 01:01:53,461 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2019-10-15 01:01:53,461 INFO L130 BoogieDeclarations]: Found specification of procedure sprintf [2019-10-15 01:01:53,461 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2019-10-15 01:01:53,461 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2019-10-15 01:01:53,462 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2019-10-15 01:01:53,462 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_uint [2019-10-15 01:01:53,462 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ulong [2019-10-15 01:01:53,462 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2019-10-15 01:01:53,462 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assume [2019-10-15 01:01:53,462 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2019-10-15 01:01:53,462 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2019-10-15 01:01:53,462 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2019-10-15 01:01:53,463 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2019-10-15 01:01:53,463 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2019-10-15 01:01:53,463 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ptr [2019-10-15 01:01:53,463 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ulong [2019-10-15 01:01:53,463 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2019-10-15 01:01:53,463 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2019-10-15 01:01:53,463 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int_nonpositive [2019-10-15 01:01:53,463 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_trap [2019-10-15 01:01:53,464 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_callback_ret_val [2019-10-15 01:01:53,464 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2019-10-15 01:01:53,464 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2019-10-15 01:01:53,464 INFO L130 BoogieDeclarations]: Found specification of procedure __xchg_wrong_size [2019-10-15 01:01:53,464 INFO L130 BoogieDeclarations]: Found specification of procedure strlen [2019-10-15 01:01:53,464 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2019-10-15 01:01:53,464 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock [2019-10-15 01:01:53,464 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_bh [2019-10-15 01:01:53,465 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_unlock [2019-10-15 01:01:53,465 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_unlock_bh [2019-10-15 01:01:53,465 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2019-10-15 01:01:53,465 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock [2019-10-15 01:01:53,465 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_bh [2019-10-15 01:01:53,465 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock [2019-10-15 01:01:53,465 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_bh [2019-10-15 01:01:53,465 INFO L130 BoogieDeclarations]: Found specification of procedure msleep_interruptible [2019-10-15 01:01:53,465 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2019-10-15 01:01:53,466 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_2 [2019-10-15 01:01:53,466 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_8 [2019-10-15 01:01:53,466 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_10 [2019-10-15 01:01:53,466 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_12 [2019-10-15 01:01:53,466 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_14 [2019-10-15 01:01:53,466 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_16 [2019-10-15 01:01:53,466 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2019-10-15 01:01:53,466 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_7 [2019-10-15 01:01:53,467 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_9 [2019-10-15 01:01:53,467 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_11 [2019-10-15 01:01:53,467 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_13 [2019-10-15 01:01:53,467 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_15 [2019-10-15 01:01:53,467 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mod_timer_17 [2019-10-15 01:01:53,467 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2019-10-15 01:01:53,467 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer_sync [2019-10-15 01:01:53,468 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_sync_1 [2019-10-15 01:01:53,468 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_sync_5 [2019-10-15 01:01:53,468 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_del_timer_sync_6 [2019-10-15 01:01:53,468 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2019-10-15 01:01:53,468 INFO L130 BoogieDeclarations]: Found specification of procedure __kmalloc [2019-10-15 01:01:53,468 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2019-10-15 01:01:53,468 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2019-10-15 01:01:53,468 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_target_type_3 [2019-10-15 01:01:53,469 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_net_device_ops_4 [2019-10-15 01:01:53,469 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_1 [2019-10-15 01:01:53,469 INFO L130 BoogieDeclarations]: Found specification of procedure choose_timer_1 [2019-10-15 01:01:53,469 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_1 [2019-10-15 01:01:53,469 INFO L130 BoogieDeclarations]: Found specification of procedure choose_timer_2 [2019-10-15 01:01:53,469 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_2 [2019-10-15 01:01:53,469 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_2 [2019-10-15 01:01:53,469 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_2 [2019-10-15 01:01:53,469 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_1 [2019-10-15 01:01:53,470 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_to_user [2019-10-15 01:01:53,470 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2019-10-15 01:01:53,470 INFO L130 BoogieDeclarations]: Found specification of procedure capable [2019-10-15 01:01:53,470 INFO L130 BoogieDeclarations]: Found specification of procedure tty_chars_in_buffer [2019-10-15 01:01:53,470 INFO L130 BoogieDeclarations]: Found specification of procedure tty_hangup [2019-10-15 01:01:53,470 INFO L130 BoogieDeclarations]: Found specification of procedure tty_mode_ioctl [2019-10-15 01:01:53,470 INFO L130 BoogieDeclarations]: Found specification of procedure tty_devnum [2019-10-15 01:01:53,470 INFO L130 BoogieDeclarations]: Found specification of procedure tty_register_ldisc [2019-10-15 01:01:53,471 INFO L130 BoogieDeclarations]: Found specification of procedure tty_unregister_ldisc [2019-10-15 01:01:53,471 INFO L130 BoogieDeclarations]: Found specification of procedure consume_skb [2019-10-15 01:01:53,471 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2019-10-15 01:01:53,471 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reset_mac_header [2019-10-15 01:01:53,471 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2019-10-15 01:01:53,471 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2019-10-15 01:01:53,471 INFO L130 BoogieDeclarations]: Found specification of procedure dev_alloc_skb [2019-10-15 01:01:53,471 INFO L130 BoogieDeclarations]: Found specification of procedure compat_ptr [2019-10-15 01:01:53,472 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_get_tx_queue [2019-10-15 01:01:53,472 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2019-10-15 01:01:53,472 INFO L130 BoogieDeclarations]: Found specification of procedure dev_close [2019-10-15 01:01:53,472 INFO L130 BoogieDeclarations]: Found specification of procedure register_netdevice [2019-10-15 01:01:53,472 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_register_netdevice_4 [2019-10-15 01:01:53,472 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_netdevice_queue [2019-10-15 01:01:53,472 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_netdevice [2019-10-15 01:01:53,472 INFO L130 BoogieDeclarations]: Found specification of procedure free_netdev [2019-10-15 01:01:53,473 INFO L130 BoogieDeclarations]: Found specification of procedure netpoll_trap [2019-10-15 01:01:53,473 INFO L130 BoogieDeclarations]: Found specification of procedure __netif_schedule [2019-10-15 01:01:53,473 INFO L130 BoogieDeclarations]: Found specification of procedure netif_tx_start_queue [2019-10-15 01:01:53,473 INFO L130 BoogieDeclarations]: Found specification of procedure netif_start_queue [2019-10-15 01:01:53,473 INFO L130 BoogieDeclarations]: Found specification of procedure netif_tx_wake_queue [2019-10-15 01:01:53,474 INFO L130 BoogieDeclarations]: Found specification of procedure netif_wake_queue [2019-10-15 01:01:53,478 INFO L130 BoogieDeclarations]: Found specification of procedure netif_tx_stop_queue [2019-10-15 01:01:53,478 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-10-15 01:01:53,478 INFO L130 BoogieDeclarations]: Found specification of procedure netif_stop_queue [2019-10-15 01:01:53,478 INFO L130 BoogieDeclarations]: Found specification of procedure netif_tx_queue_stopped [2019-10-15 01:01:53,479 INFO L130 BoogieDeclarations]: Found specification of procedure netif_queue_stopped [2019-10-15 01:01:53,479 INFO L130 BoogieDeclarations]: Found specification of procedure netif_running [2019-10-15 01:01:53,479 INFO L130 BoogieDeclarations]: Found specification of procedure netif_rx [2019-10-15 01:01:53,479 INFO L130 BoogieDeclarations]: Found specification of procedure dev_trans_start [2019-10-15 01:01:53,482 INFO L130 BoogieDeclarations]: Found specification of procedure alloc_netdev_mqs [2019-10-15 01:01:53,482 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_netdev [2019-10-15 01:01:53,482 INFO L130 BoogieDeclarations]: Found specification of procedure rtnl_lock [2019-10-15 01:01:53,483 INFO L130 BoogieDeclarations]: Found specification of procedure rtnl_unlock [2019-10-15 01:01:53,483 INFO L130 BoogieDeclarations]: Found specification of procedure slhc_init [2019-10-15 01:01:53,483 INFO L130 BoogieDeclarations]: Found specification of procedure slhc_free [2019-10-15 01:01:53,483 INFO L130 BoogieDeclarations]: Found specification of procedure slhc_compress [2019-10-15 01:01:53,483 INFO L130 BoogieDeclarations]: Found specification of procedure slhc_uncompress [2019-10-15 01:01:53,483 INFO L130 BoogieDeclarations]: Found specification of procedure slhc_remember [2019-10-15 01:01:53,483 INFO L130 BoogieDeclarations]: Found specification of procedure slip_esc [2019-10-15 01:01:53,483 INFO L130 BoogieDeclarations]: Found specification of procedure slip_unesc [2019-10-15 01:01:53,484 INFO L130 BoogieDeclarations]: Found specification of procedure slip_esc6 [2019-10-15 01:01:53,484 INFO L130 BoogieDeclarations]: Found specification of procedure slip_unesc6 [2019-10-15 01:01:53,484 INFO L130 BoogieDeclarations]: Found specification of procedure sl_keepalive [2019-10-15 01:01:53,484 INFO L130 BoogieDeclarations]: Found specification of procedure sl_outfill [2019-10-15 01:01:53,484 INFO L130 BoogieDeclarations]: Found specification of procedure sl_ioctl [2019-10-15 01:01:53,484 INFO L130 BoogieDeclarations]: Found specification of procedure sl_alloc_bufs [2019-10-15 01:01:53,484 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_sl_alloc_bufs_3 [2019-10-15 01:01:53,484 INFO L130 BoogieDeclarations]: Found specification of procedure sl_free_bufs [2019-10-15 01:01:53,484 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2019-10-15 01:01:53,485 INFO L130 BoogieDeclarations]: Found specification of procedure sl_realloc_bufs [2019-10-15 01:01:53,485 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2019-10-15 01:01:53,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2019-10-15 01:01:53,485 INFO L130 BoogieDeclarations]: Found specification of procedure sl_lock [2019-10-15 01:01:53,485 INFO L130 BoogieDeclarations]: Found specification of procedure sl_unlock [2019-10-15 01:01:53,485 INFO L130 BoogieDeclarations]: Found specification of procedure sl_bump [2019-10-15 01:01:53,485 INFO L130 BoogieDeclarations]: Found specification of procedure sl_encaps [2019-10-15 01:01:53,485 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~int~TO~int [2019-10-15 01:01:53,485 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2019-10-15 01:01:53,486 INFO L130 BoogieDeclarations]: Found specification of procedure slip_write_wakeup [2019-10-15 01:01:53,486 INFO L130 BoogieDeclarations]: Found specification of procedure sl_tx_timeout [2019-10-15 01:01:53,486 INFO L130 BoogieDeclarations]: Found specification of procedure sl_xmit [2019-10-15 01:01:53,486 INFO L130 BoogieDeclarations]: Found specification of procedure sl_close [2019-10-15 01:01:53,486 INFO L130 BoogieDeclarations]: Found specification of procedure sl_open [2019-10-15 01:01:53,486 INFO L130 BoogieDeclarations]: Found specification of procedure sl_change_mtu [2019-10-15 01:01:53,486 INFO L130 BoogieDeclarations]: Found specification of procedure sl_get_stats64 [2019-10-15 01:01:53,486 INFO L130 BoogieDeclarations]: Found specification of procedure sl_init [2019-10-15 01:01:53,486 INFO L130 BoogieDeclarations]: Found specification of procedure sl_uninit [2019-10-15 01:01:53,486 INFO L130 BoogieDeclarations]: Found specification of procedure sl_free_netdev [2019-10-15 01:01:53,487 INFO L130 BoogieDeclarations]: Found specification of procedure sl_setup [2019-10-15 01:01:53,487 INFO L130 BoogieDeclarations]: Found specification of procedure slip_receive_buf [2019-10-15 01:01:53,487 INFO L130 BoogieDeclarations]: Found specification of procedure sl_sync [2019-10-15 01:01:53,487 INFO L130 BoogieDeclarations]: Found specification of procedure sl_alloc [2019-10-15 01:01:53,487 INFO L130 BoogieDeclarations]: Found specification of procedure slip_open [2019-10-15 01:01:53,487 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_slip_open_18 [2019-10-15 01:01:53,487 INFO L130 BoogieDeclarations]: Found specification of procedure slip_close [2019-10-15 01:01:53,487 INFO L130 BoogieDeclarations]: Found specification of procedure slip_hangup [2019-10-15 01:01:53,487 INFO L130 BoogieDeclarations]: Found specification of procedure slip_ioctl [2019-10-15 01:01:53,488 INFO L130 BoogieDeclarations]: Found specification of procedure slip_compat_ioctl [2019-10-15 01:01:53,488 INFO L130 BoogieDeclarations]: Found specification of procedure slip_init [2019-10-15 01:01:53,488 INFO L130 BoogieDeclarations]: Found specification of procedure slip_exit [2019-10-15 01:01:53,488 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2019-10-15 01:01:53,488 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2019-10-15 01:01:53,488 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2019-10-15 01:01:53,488 INFO L130 BoogieDeclarations]: Found specification of procedure main [2019-10-15 01:01:53,488 INFO L130 BoogieDeclarations]: Found specification of procedure external_alloc [2019-10-15 01:01:53,488 INFO L130 BoogieDeclarations]: Found specification of procedure free [2019-10-15 01:01:53,488 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2019-10-15 01:01:53,489 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2019-10-15 01:01:53,489 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-10-15 01:01:53,489 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-10-15 01:01:53,489 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2019-10-15 01:01:53,489 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2019-10-15 01:01:53,489 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2019-10-15 01:01:53,489 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2019-10-15 01:01:54,411 INFO L685 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2019-10-15 01:01:57,342 INFO L279 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-10-15 01:01:57,343 INFO L284 CfgBuilder]: Removed 0 assume(true) statements. [2019-10-15 01:01:57,345 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 01:01:57 BoogieIcfgContainer [2019-10-15 01:01:57,345 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-10-15 01:01:57,346 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-10-15 01:01:57,346 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-10-15 01:01:57,349 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-10-15 01:01:57,350 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 15.10 01:01:50" (1/3) ... [2019-10-15 01:01:57,350 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58598440 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.10 01:01:57, skipping insertion in model container [2019-10-15 01:01:57,351 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 01:01:53" (2/3) ... [2019-10-15 01:01:57,351 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58598440 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.10 01:01:57, skipping insertion in model container [2019-10-15 01:01:57,351 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 01:01:57" (3/3) ... [2019-10-15 01:01:57,353 INFO L109 eAbstractionObserver]: Analyzing ICFG linux-stable-1b0b0ac-1-108_1a-drivers--net--slip.ko-entry_point.cil.out.i [2019-10-15 01:01:57,362 INFO L152 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-10-15 01:01:57,374 INFO L164 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2019-10-15 01:01:57,386 INFO L249 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2019-10-15 01:01:57,422 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-10-15 01:01:57,422 INFO L374 AbstractCegarLoop]: Hoare is true [2019-10-15 01:01:57,422 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-10-15 01:01:57,422 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-10-15 01:01:57,422 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-10-15 01:01:57,423 INFO L378 AbstractCegarLoop]: Difference is false [2019-10-15 01:01:57,423 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-10-15 01:01:57,423 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-10-15 01:01:57,480 INFO L276 IsEmpty]: Start isEmpty. Operand 1432 states. [2019-10-15 01:01:57,508 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2019-10-15 01:01:57,509 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:01:57,510 INFO L380 BasicCegarLoop]: trace histogram [7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:01:57,512 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:01:57,516 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:01:57,517 INFO L82 PathProgramCache]: Analyzing trace with hash -2145269375, now seen corresponding path program 1 times [2019-10-15 01:01:57,525 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:01:57,525 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [397614945] [2019-10-15 01:01:57,525 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:01:57,526 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:01:57,526 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:01:57,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:01:58,116 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2019-10-15 01:01:58,116 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [397614945] [2019-10-15 01:01:58,117 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:01:58,117 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-10-15 01:01:58,118 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [253623341] [2019-10-15 01:01:58,122 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-10-15 01:01:58,124 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:01:58,134 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-10-15 01:01:58,135 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-15 01:01:58,137 INFO L87 Difference]: Start difference. First operand 1432 states. Second operand 3 states. [2019-10-15 01:01:58,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:01:58,469 INFO L93 Difference]: Finished difference Result 3573 states and 4844 transitions. [2019-10-15 01:01:58,470 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-10-15 01:01:58,471 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 82 [2019-10-15 01:01:58,472 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:01:58,516 INFO L225 Difference]: With dead ends: 3573 [2019-10-15 01:01:58,517 INFO L226 Difference]: Without dead ends: 2064 [2019-10-15 01:01:58,530 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-15 01:01:58,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2064 states. [2019-10-15 01:01:58,739 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2064 to 2064. [2019-10-15 01:01:58,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2064 states. [2019-10-15 01:01:58,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2064 states to 2064 states and 2780 transitions. [2019-10-15 01:01:58,756 INFO L78 Accepts]: Start accepts. Automaton has 2064 states and 2780 transitions. Word has length 82 [2019-10-15 01:01:58,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:01:58,757 INFO L462 AbstractCegarLoop]: Abstraction has 2064 states and 2780 transitions. [2019-10-15 01:01:58,757 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-10-15 01:01:58,757 INFO L276 IsEmpty]: Start isEmpty. Operand 2064 states and 2780 transitions. [2019-10-15 01:01:58,768 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2019-10-15 01:01:58,769 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:01:58,769 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:01:58,769 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:01:58,770 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:01:58,770 INFO L82 PathProgramCache]: Analyzing trace with hash -361283824, now seen corresponding path program 1 times [2019-10-15 01:01:58,770 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:01:58,770 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1368483404] [2019-10-15 01:01:58,771 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:01:58,771 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:01:58,771 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:01:58,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:01:59,258 INFO L134 CoverageAnalysis]: Checked inductivity of 148 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2019-10-15 01:01:59,259 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1368483404] [2019-10-15 01:01:59,259 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:01:59,259 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-10-15 01:01:59,260 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [716508907] [2019-10-15 01:01:59,262 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-10-15 01:01:59,262 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:01:59,262 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-10-15 01:01:59,263 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-10-15 01:01:59,263 INFO L87 Difference]: Start difference. First operand 2064 states and 2780 transitions. Second operand 5 states. [2019-10-15 01:02:04,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:04,015 INFO L93 Difference]: Finished difference Result 4095 states and 5522 transitions. [2019-10-15 01:02:04,015 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-10-15 01:02:04,015 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 142 [2019-10-15 01:02:04,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:04,028 INFO L225 Difference]: With dead ends: 4095 [2019-10-15 01:02:04,028 INFO L226 Difference]: Without dead ends: 2064 [2019-10-15 01:02:04,037 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2019-10-15 01:02:04,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2064 states. [2019-10-15 01:02:04,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2064 to 2064. [2019-10-15 01:02:04,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2064 states. [2019-10-15 01:02:04,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2064 states to 2064 states and 2778 transitions. [2019-10-15 01:02:04,154 INFO L78 Accepts]: Start accepts. Automaton has 2064 states and 2778 transitions. Word has length 142 [2019-10-15 01:02:04,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:04,156 INFO L462 AbstractCegarLoop]: Abstraction has 2064 states and 2778 transitions. [2019-10-15 01:02:04,156 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-10-15 01:02:04,156 INFO L276 IsEmpty]: Start isEmpty. Operand 2064 states and 2778 transitions. [2019-10-15 01:02:04,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2019-10-15 01:02:04,167 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:04,168 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:04,168 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:04,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:04,168 INFO L82 PathProgramCache]: Analyzing trace with hash -1503786290, now seen corresponding path program 1 times [2019-10-15 01:02:04,169 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:04,169 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [239011456] [2019-10-15 01:02:04,169 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:04,169 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:04,170 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:04,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:02:04,421 INFO L134 CoverageAnalysis]: Checked inductivity of 148 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2019-10-15 01:02:04,422 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [239011456] [2019-10-15 01:02:04,422 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:02:04,422 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2019-10-15 01:02:04,422 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [824280070] [2019-10-15 01:02:04,423 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-10-15 01:02:04,423 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:02:04,424 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-10-15 01:02:04,424 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2019-10-15 01:02:04,424 INFO L87 Difference]: Start difference. First operand 2064 states and 2778 transitions. Second operand 10 states. [2019-10-15 01:02:04,646 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:04,646 INFO L93 Difference]: Finished difference Result 4105 states and 5526 transitions. [2019-10-15 01:02:04,646 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-10-15 01:02:04,647 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 142 [2019-10-15 01:02:04,648 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:04,671 INFO L225 Difference]: With dead ends: 4105 [2019-10-15 01:02:04,671 INFO L226 Difference]: Without dead ends: 2066 [2019-10-15 01:02:04,681 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2019-10-15 01:02:04,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2066 states. [2019-10-15 01:02:04,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2066 to 2064. [2019-10-15 01:02:04,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2064 states. [2019-10-15 01:02:04,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2064 states to 2064 states and 2776 transitions. [2019-10-15 01:02:04,789 INFO L78 Accepts]: Start accepts. Automaton has 2064 states and 2776 transitions. Word has length 142 [2019-10-15 01:02:04,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:04,792 INFO L462 AbstractCegarLoop]: Abstraction has 2064 states and 2776 transitions. [2019-10-15 01:02:04,792 INFO L463 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-10-15 01:02:04,793 INFO L276 IsEmpty]: Start isEmpty. Operand 2064 states and 2776 transitions. [2019-10-15 01:02:04,806 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 150 [2019-10-15 01:02:04,806 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:04,807 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:04,807 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:04,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:04,808 INFO L82 PathProgramCache]: Analyzing trace with hash -231756230, now seen corresponding path program 1 times [2019-10-15 01:02:04,808 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:04,808 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1987672041] [2019-10-15 01:02:04,809 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:04,809 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:04,809 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:04,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:02:05,066 INFO L134 CoverageAnalysis]: Checked inductivity of 148 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 148 trivial. 0 not checked. [2019-10-15 01:02:05,067 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1987672041] [2019-10-15 01:02:05,068 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:02:05,068 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-10-15 01:02:05,068 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1861508633] [2019-10-15 01:02:05,069 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-10-15 01:02:05,070 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:02:05,070 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-10-15 01:02:05,071 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-10-15 01:02:05,071 INFO L87 Difference]: Start difference. First operand 2064 states and 2776 transitions. Second operand 7 states. [2019-10-15 01:02:05,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:05,270 INFO L93 Difference]: Finished difference Result 2078 states and 2790 transitions. [2019-10-15 01:02:05,271 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-10-15 01:02:05,271 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 149 [2019-10-15 01:02:05,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:05,285 INFO L225 Difference]: With dead ends: 2078 [2019-10-15 01:02:05,285 INFO L226 Difference]: Without dead ends: 2075 [2019-10-15 01:02:05,286 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2019-10-15 01:02:05,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2075 states. [2019-10-15 01:02:05,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2075 to 2072. [2019-10-15 01:02:05,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2072 states. [2019-10-15 01:02:05,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2072 states to 2072 states and 2784 transitions. [2019-10-15 01:02:05,389 INFO L78 Accepts]: Start accepts. Automaton has 2072 states and 2784 transitions. Word has length 149 [2019-10-15 01:02:05,391 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:05,391 INFO L462 AbstractCegarLoop]: Abstraction has 2072 states and 2784 transitions. [2019-10-15 01:02:05,391 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-10-15 01:02:05,391 INFO L276 IsEmpty]: Start isEmpty. Operand 2072 states and 2784 transitions. [2019-10-15 01:02:05,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 166 [2019-10-15 01:02:05,400 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:05,400 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:05,401 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:05,401 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:05,401 INFO L82 PathProgramCache]: Analyzing trace with hash 275213783, now seen corresponding path program 1 times [2019-10-15 01:02:05,401 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:05,401 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [800159270] [2019-10-15 01:02:05,401 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:05,402 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:05,402 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:05,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:02:05,578 INFO L134 CoverageAnalysis]: Checked inductivity of 148 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 148 trivial. 0 not checked. [2019-10-15 01:02:05,579 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [800159270] [2019-10-15 01:02:05,579 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:02:05,579 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-10-15 01:02:05,579 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1091380565] [2019-10-15 01:02:05,580 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-10-15 01:02:05,580 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:02:05,580 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-10-15 01:02:05,581 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-10-15 01:02:05,581 INFO L87 Difference]: Start difference. First operand 2072 states and 2784 transitions. Second operand 8 states. [2019-10-15 01:02:05,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:05,750 INFO L93 Difference]: Finished difference Result 2106 states and 2824 transitions. [2019-10-15 01:02:05,751 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-10-15 01:02:05,751 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 165 [2019-10-15 01:02:05,751 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:05,764 INFO L225 Difference]: With dead ends: 2106 [2019-10-15 01:02:05,765 INFO L226 Difference]: Without dead ends: 2103 [2019-10-15 01:02:05,766 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2019-10-15 01:02:05,771 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2103 states. [2019-10-15 01:02:05,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2103 to 2074. [2019-10-15 01:02:05,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2074 states. [2019-10-15 01:02:05,865 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2074 states to 2074 states and 2787 transitions. [2019-10-15 01:02:05,865 INFO L78 Accepts]: Start accepts. Automaton has 2074 states and 2787 transitions. Word has length 165 [2019-10-15 01:02:05,866 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:05,866 INFO L462 AbstractCegarLoop]: Abstraction has 2074 states and 2787 transitions. [2019-10-15 01:02:05,866 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-10-15 01:02:05,866 INFO L276 IsEmpty]: Start isEmpty. Operand 2074 states and 2787 transitions. [2019-10-15 01:02:05,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 200 [2019-10-15 01:02:05,877 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:05,877 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:05,878 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:05,878 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:05,878 INFO L82 PathProgramCache]: Analyzing trace with hash -1881606121, now seen corresponding path program 1 times [2019-10-15 01:02:05,878 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:05,878 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [437366313] [2019-10-15 01:02:05,879 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:05,879 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:05,879 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:05,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:02:06,080 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2019-10-15 01:02:06,081 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [437366313] [2019-10-15 01:02:06,081 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:02:06,081 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-10-15 01:02:06,082 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1448838318] [2019-10-15 01:02:06,082 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-10-15 01:02:06,082 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:02:06,083 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-10-15 01:02:06,083 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-10-15 01:02:06,083 INFO L87 Difference]: Start difference. First operand 2074 states and 2787 transitions. Second operand 4 states. [2019-10-15 01:02:08,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:08,265 INFO L93 Difference]: Finished difference Result 4794 states and 6439 transitions. [2019-10-15 01:02:08,265 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-10-15 01:02:08,266 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 199 [2019-10-15 01:02:08,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:08,281 INFO L225 Difference]: With dead ends: 4794 [2019-10-15 01:02:08,282 INFO L226 Difference]: Without dead ends: 2753 [2019-10-15 01:02:08,290 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-10-15 01:02:08,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2753 states. [2019-10-15 01:02:08,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2753 to 2752. [2019-10-15 01:02:08,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2752 states. [2019-10-15 01:02:08,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2752 states to 2752 states and 3686 transitions. [2019-10-15 01:02:08,417 INFO L78 Accepts]: Start accepts. Automaton has 2752 states and 3686 transitions. Word has length 199 [2019-10-15 01:02:08,417 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:08,417 INFO L462 AbstractCegarLoop]: Abstraction has 2752 states and 3686 transitions. [2019-10-15 01:02:08,418 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-10-15 01:02:08,418 INFO L276 IsEmpty]: Start isEmpty. Operand 2752 states and 3686 transitions. [2019-10-15 01:02:08,432 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 202 [2019-10-15 01:02:08,433 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:08,433 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:08,433 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:08,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:08,434 INFO L82 PathProgramCache]: Analyzing trace with hash -940678436, now seen corresponding path program 1 times [2019-10-15 01:02:08,434 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:08,434 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [782407666] [2019-10-15 01:02:08,435 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:08,435 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:08,435 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:08,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:02:08,648 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 151 trivial. 0 not checked. [2019-10-15 01:02:08,648 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [782407666] [2019-10-15 01:02:08,649 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:02:08,649 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-10-15 01:02:08,649 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1414499880] [2019-10-15 01:02:08,649 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-10-15 01:02:08,650 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:02:08,650 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-10-15 01:02:08,650 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-15 01:02:08,650 INFO L87 Difference]: Start difference. First operand 2752 states and 3686 transitions. Second operand 3 states. [2019-10-15 01:02:08,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:08,781 INFO L93 Difference]: Finished difference Result 5474 states and 7385 transitions. [2019-10-15 01:02:08,782 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-10-15 01:02:08,782 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 201 [2019-10-15 01:02:08,782 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:08,802 INFO L225 Difference]: With dead ends: 5474 [2019-10-15 01:02:08,803 INFO L226 Difference]: Without dead ends: 2755 [2019-10-15 01:02:08,817 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-15 01:02:08,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2755 states. [2019-10-15 01:02:08,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2755 to 2752. [2019-10-15 01:02:08,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2752 states. [2019-10-15 01:02:08,982 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2752 states to 2752 states and 3677 transitions. [2019-10-15 01:02:08,985 INFO L78 Accepts]: Start accepts. Automaton has 2752 states and 3677 transitions. Word has length 201 [2019-10-15 01:02:08,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:08,985 INFO L462 AbstractCegarLoop]: Abstraction has 2752 states and 3677 transitions. [2019-10-15 01:02:08,985 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-10-15 01:02:08,986 INFO L276 IsEmpty]: Start isEmpty. Operand 2752 states and 3677 transitions. [2019-10-15 01:02:09,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 205 [2019-10-15 01:02:09,003 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:09,004 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:09,004 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:09,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:09,004 INFO L82 PathProgramCache]: Analyzing trace with hash 347850975, now seen corresponding path program 1 times [2019-10-15 01:02:09,005 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:09,005 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [461154285] [2019-10-15 01:02:09,005 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:09,005 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:09,006 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:09,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:02:09,333 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 147 trivial. 0 not checked. [2019-10-15 01:02:09,333 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [461154285] [2019-10-15 01:02:09,333 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:02:09,334 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2019-10-15 01:02:09,334 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1348697976] [2019-10-15 01:02:09,335 INFO L442 AbstractCegarLoop]: Interpolant automaton has 11 states [2019-10-15 01:02:09,335 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:02:09,335 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2019-10-15 01:02:09,335 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2019-10-15 01:02:09,335 INFO L87 Difference]: Start difference. First operand 2752 states and 3677 transitions. Second operand 11 states. [2019-10-15 01:02:09,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:09,666 INFO L93 Difference]: Finished difference Result 4832 states and 6471 transitions. [2019-10-15 01:02:09,667 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2019-10-15 01:02:09,668 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 204 [2019-10-15 01:02:09,668 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:09,683 INFO L225 Difference]: With dead ends: 4832 [2019-10-15 01:02:09,683 INFO L226 Difference]: Without dead ends: 2777 [2019-10-15 01:02:09,692 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=51, Invalid=291, Unknown=0, NotChecked=0, Total=342 [2019-10-15 01:02:09,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2777 states. [2019-10-15 01:02:09,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2777 to 2776. [2019-10-15 01:02:09,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2776 states. [2019-10-15 01:02:09,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2776 states to 2776 states and 3710 transitions. [2019-10-15 01:02:09,819 INFO L78 Accepts]: Start accepts. Automaton has 2776 states and 3710 transitions. Word has length 204 [2019-10-15 01:02:09,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:09,819 INFO L462 AbstractCegarLoop]: Abstraction has 2776 states and 3710 transitions. [2019-10-15 01:02:09,819 INFO L463 AbstractCegarLoop]: Interpolant automaton has 11 states. [2019-10-15 01:02:09,819 INFO L276 IsEmpty]: Start isEmpty. Operand 2776 states and 3710 transitions. [2019-10-15 01:02:09,832 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 205 [2019-10-15 01:02:09,833 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:09,833 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:09,833 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:09,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:09,834 INFO L82 PathProgramCache]: Analyzing trace with hash 492260670, now seen corresponding path program 1 times [2019-10-15 01:02:09,834 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:09,834 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [105678307] [2019-10-15 01:02:09,834 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:09,834 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:09,835 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:09,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:02:10,187 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 151 trivial. 0 not checked. [2019-10-15 01:02:10,188 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [105678307] [2019-10-15 01:02:10,188 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:02:10,188 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-10-15 01:02:10,189 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1678890197] [2019-10-15 01:02:10,189 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-10-15 01:02:10,190 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:02:10,190 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-10-15 01:02:10,190 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-10-15 01:02:10,190 INFO L87 Difference]: Start difference. First operand 2776 states and 3710 transitions. Second operand 5 states. [2019-10-15 01:02:10,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:10,348 INFO L93 Difference]: Finished difference Result 4841 states and 6485 transitions. [2019-10-15 01:02:10,348 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-10-15 01:02:10,349 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 204 [2019-10-15 01:02:10,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:10,369 INFO L225 Difference]: With dead ends: 4841 [2019-10-15 01:02:10,369 INFO L226 Difference]: Without dead ends: 2784 [2019-10-15 01:02:10,378 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-10-15 01:02:10,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2784 states. [2019-10-15 01:02:10,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2784 to 2780. [2019-10-15 01:02:10,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2780 states. [2019-10-15 01:02:10,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2780 states to 2780 states and 3714 transitions. [2019-10-15 01:02:10,515 INFO L78 Accepts]: Start accepts. Automaton has 2780 states and 3714 transitions. Word has length 204 [2019-10-15 01:02:10,516 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:10,516 INFO L462 AbstractCegarLoop]: Abstraction has 2780 states and 3714 transitions. [2019-10-15 01:02:10,516 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-10-15 01:02:10,516 INFO L276 IsEmpty]: Start isEmpty. Operand 2780 states and 3714 transitions. [2019-10-15 01:02:10,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 232 [2019-10-15 01:02:10,531 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:10,531 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:10,532 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:10,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:10,532 INFO L82 PathProgramCache]: Analyzing trace with hash -1372064424, now seen corresponding path program 1 times [2019-10-15 01:02:10,532 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:10,532 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2128308392] [2019-10-15 01:02:10,533 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:10,533 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:10,533 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:10,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:02:10,689 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 154 trivial. 0 not checked. [2019-10-15 01:02:10,689 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2128308392] [2019-10-15 01:02:10,690 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:02:10,690 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-10-15 01:02:10,690 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1907610963] [2019-10-15 01:02:10,691 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-10-15 01:02:10,691 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:02:10,691 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-10-15 01:02:10,691 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-15 01:02:10,691 INFO L87 Difference]: Start difference. First operand 2780 states and 3714 transitions. Second operand 3 states. [2019-10-15 01:02:10,861 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:10,861 INFO L93 Difference]: Finished difference Result 4844 states and 6490 transitions. [2019-10-15 01:02:10,862 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-10-15 01:02:10,863 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 231 [2019-10-15 01:02:10,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:10,881 INFO L225 Difference]: With dead ends: 4844 [2019-10-15 01:02:10,882 INFO L226 Difference]: Without dead ends: 2783 [2019-10-15 01:02:10,893 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-15 01:02:10,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2783 states. [2019-10-15 01:02:11,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2783 to 2781. [2019-10-15 01:02:11,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2781 states. [2019-10-15 01:02:11,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2781 states to 2781 states and 3715 transitions. [2019-10-15 01:02:11,077 INFO L78 Accepts]: Start accepts. Automaton has 2781 states and 3715 transitions. Word has length 231 [2019-10-15 01:02:11,078 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:11,078 INFO L462 AbstractCegarLoop]: Abstraction has 2781 states and 3715 transitions. [2019-10-15 01:02:11,078 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-10-15 01:02:11,079 INFO L276 IsEmpty]: Start isEmpty. Operand 2781 states and 3715 transitions. [2019-10-15 01:02:11,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 234 [2019-10-15 01:02:11,099 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:11,100 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:11,100 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:11,101 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:11,101 INFO L82 PathProgramCache]: Analyzing trace with hash 348675351, now seen corresponding path program 1 times [2019-10-15 01:02:11,101 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:11,102 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [315084998] [2019-10-15 01:02:11,102 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:11,102 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:11,103 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:11,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:02:11,337 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 154 trivial. 0 not checked. [2019-10-15 01:02:11,338 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [315084998] [2019-10-15 01:02:11,338 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:02:11,339 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-10-15 01:02:11,339 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1968368097] [2019-10-15 01:02:11,340 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-10-15 01:02:11,340 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:02:11,340 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-10-15 01:02:11,341 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-15 01:02:11,341 INFO L87 Difference]: Start difference. First operand 2781 states and 3715 transitions. Second operand 3 states. [2019-10-15 01:02:11,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:11,499 INFO L93 Difference]: Finished difference Result 4834 states and 6477 transitions. [2019-10-15 01:02:11,500 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-10-15 01:02:11,500 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 233 [2019-10-15 01:02:11,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:11,517 INFO L225 Difference]: With dead ends: 4834 [2019-10-15 01:02:11,518 INFO L226 Difference]: Without dead ends: 2772 [2019-10-15 01:02:11,529 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-15 01:02:11,534 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2772 states. [2019-10-15 01:02:11,727 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2772 to 2767. [2019-10-15 01:02:11,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2767 states. [2019-10-15 01:02:11,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2767 states to 2767 states and 3696 transitions. [2019-10-15 01:02:11,736 INFO L78 Accepts]: Start accepts. Automaton has 2767 states and 3696 transitions. Word has length 233 [2019-10-15 01:02:11,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:11,736 INFO L462 AbstractCegarLoop]: Abstraction has 2767 states and 3696 transitions. [2019-10-15 01:02:11,737 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-10-15 01:02:11,737 INFO L276 IsEmpty]: Start isEmpty. Operand 2767 states and 3696 transitions. [2019-10-15 01:02:11,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 245 [2019-10-15 01:02:11,750 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:11,751 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:11,751 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:11,751 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:11,752 INFO L82 PathProgramCache]: Analyzing trace with hash 799570743, now seen corresponding path program 1 times [2019-10-15 01:02:11,752 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:11,752 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1013232749] [2019-10-15 01:02:11,752 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:11,752 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:11,753 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:11,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-15 01:02:12,060 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 154 trivial. 0 not checked. [2019-10-15 01:02:12,061 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1013232749] [2019-10-15 01:02:12,061 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-15 01:02:12,061 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-10-15 01:02:12,061 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [784826080] [2019-10-15 01:02:12,062 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-10-15 01:02:12,063 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-15 01:02:12,063 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-10-15 01:02:12,063 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-10-15 01:02:12,063 INFO L87 Difference]: Start difference. First operand 2767 states and 3696 transitions. Second operand 6 states. [2019-10-15 01:02:17,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-15 01:02:17,745 INFO L93 Difference]: Finished difference Result 4828 states and 6469 transitions. [2019-10-15 01:02:17,745 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-10-15 01:02:17,745 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 244 [2019-10-15 01:02:17,746 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-15 01:02:17,758 INFO L225 Difference]: With dead ends: 4828 [2019-10-15 01:02:17,758 INFO L226 Difference]: Without dead ends: 2780 [2019-10-15 01:02:17,766 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2019-10-15 01:02:17,770 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2780 states. [2019-10-15 01:02:17,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2780 to 2768. [2019-10-15 01:02:17,859 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2768 states. [2019-10-15 01:02:17,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2768 states to 2768 states and 3697 transitions. [2019-10-15 01:02:17,868 INFO L78 Accepts]: Start accepts. Automaton has 2768 states and 3697 transitions. Word has length 244 [2019-10-15 01:02:17,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-15 01:02:17,868 INFO L462 AbstractCegarLoop]: Abstraction has 2768 states and 3697 transitions. [2019-10-15 01:02:17,868 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-10-15 01:02:17,869 INFO L276 IsEmpty]: Start isEmpty. Operand 2768 states and 3697 transitions. [2019-10-15 01:02:17,882 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 247 [2019-10-15 01:02:17,882 INFO L372 BasicCegarLoop]: Found error trace [2019-10-15 01:02:17,883 INFO L380 BasicCegarLoop]: trace histogram [9, 9, 9, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-15 01:02:17,883 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-15 01:02:17,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-15 01:02:17,883 INFO L82 PathProgramCache]: Analyzing trace with hash -62561544, now seen corresponding path program 1 times [2019-10-15 01:02:17,884 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-15 01:02:17,884 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1767471353] [2019-10-15 01:02:17,884 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:17,884 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-15 01:02:17,884 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-15 01:02:19,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-10-15 01:02:19,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-10-15 01:02:20,016 INFO L168 tionRefinementEngine]: Strategy TAIPAN found a feasible trace [2019-10-15 01:02:20,016 INFO L445 BasicCegarLoop]: Counterexample might be feasible [2019-10-15 01:02:20,228 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967334 could not be translated for associated CType STRUCT~~net_device_ops?ndo_init~*((*net_device ) : INT)?ndo_uninit~*((*net_device ) : VOID)?ndo_open~*((*net_device ) : INT)?ndo_stop~*((*net_device ) : INT)?ndo_start_xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?ndo_select_queue~*((*net_device *sk_buff ) : ~u16~0)?ndo_change_rx_flags~*((*net_device INT ) : VOID)?ndo_set_rx_mode~*((*net_device ) : VOID)?ndo_set_multicast_list~*((*net_device ) : VOID)?ndo_set_mac_address~*((*net_device *VOID ) : INT)?ndo_validate_addr~*((*net_device ) : INT)?ndo_do_ioctl~*((*net_device *ifreq INT ) : INT)?ndo_set_config~*((*net_device *ifmap ) : INT)?ndo_change_mtu~*((*net_device INT ) : INT)?ndo_neigh_setup~*((*net_device *neigh_parms ) : INT)?ndo_tx_timeout~*((*net_device ) : VOID)?ndo_get_stats64~*((*net_device *rtnl_link_stats64 ) : *rtnl_link_stats64)?ndo_get_stats~*((*net_device ) : *net_device_stats)?ndo_vlan_rx_register~*((*net_device *vlan_group ) : VOID)?ndo_vlan_rx_add_vid~*((*net_device USHORT ) : VOID)?ndo_vlan_rx_kill_vid~*((*net_device USHORT ) : VOID)?ndo_poll_controller~*((*net_device ) : VOID)?ndo_netpoll_setup~*((*net_device *netpoll_info ) : INT)?ndo_netpoll_cleanup~*((*net_device ) : VOID)?ndo_set_vf_mac~*((*net_device INT *~u8~0 ) : INT)?ndo_set_vf_vlan~*((*net_device INT ~u16~0 ~u8~0 ) : INT)?ndo_set_vf_tx_rate~*((*net_device INT INT ) : INT)?ndo_get_vf_config~*((*net_device INT *ifla_vf_info ) : INT)?ndo_set_vf_port~*((*net_device INT **nlattr ) : INT)?ndo_get_vf_port~*((*net_device INT *sk_buff ) : INT)?ndo_fcoe_enable~*((*net_device ) : INT)?ndo_fcoe_disable~*((*net_device ) : INT)?ndo_fcoe_ddp_setup~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_ddp_done~*((*net_device ~u16~0 ) : INT)?ndo_fcoe_get_wwn~*((*net_device *~u64~0 INT ) : INT)# [2019-10-15 01:02:20,230 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967394 could not be translated for associated CType STRUCT~~tty_ldisc_ops?magic~INT?name~*CHAR?num~INT?flags~INT?open~*((*tty_struct ) : INT)?close~*((*tty_struct ) : VOID)?flush_buffer~*((*tty_struct ) : VOID)?chars_in_buffer~*((*tty_struct ) : UINT)?read~*((*tty_struct *file *UCHAR UINT ) : UINT)?write~*((*tty_struct *file *UCHAR UINT ) : UINT)?ioctl~*((*tty_struct *file UINT ULONG ) : INT)?compat_ioctl~*((*tty_struct *file UINT ULONG ) : LONG)?set_termios~*((*tty_struct *ktermios ) : VOID)?poll~*((*tty_struct *file *poll_table_struct ) : UINT)?hangup~*((*tty_struct ) : INT)?receive_buf~*((*tty_struct *UCHAR *CHAR INT ) : VOID)?write_wakeup~*((*tty_struct ) : VOID)?dcd_change~*((*tty_struct UINT *pps_event_time ) : VOID)?owner~*module?refcount~INT# [2019-10-15 01:02:20,230 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967321 could not be translated for associated CType STRUCT~~net_device_ops?ndo_init~*((*net_device ) : INT)?ndo_uninit~*((*net_device ) : VOID)?ndo_open~*((*net_device ) : INT)?ndo_stop~*((*net_device ) : INT)?ndo_start_xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?ndo_select_queue~*((*net_device *sk_buff ) : ~u16~0)?ndo_change_rx_flags~*((*net_device INT ) : VOID)?ndo_set_rx_mode~*((*net_device ) : VOID)?ndo_set_multicast_list~*((*net_device ) : VOID)?ndo_set_mac_address~*((*net_device *VOID ) : INT)?ndo_validate_addr~*((*net_device ) : INT)?ndo_do_ioctl~*((*net_device *ifreq INT ) : INT)?ndo_set_config~*((*net_device *ifmap ) : INT)?ndo_change_mtu~*((*net_device INT ) : INT)?ndo_neigh_setup~*((*net_device *neigh_parms ) : INT)?ndo_tx_timeout~*((*net_device ) : VOID)?ndo_get_stats64~*((*net_device *rtnl_link_stats64 ) : *rtnl_link_stats64)?ndo_get_stats~*((*net_device ) : *net_device_stats)?ndo_vlan_rx_register~*((*net_device *vlan_group ) : VOID)?ndo_vlan_rx_add_vid~*((*net_device USHORT ) : VOID)?ndo_vlan_rx_kill_vid~*((*net_device USHORT ) : VOID)?ndo_poll_controller~*((*net_device ) : VOID)?ndo_netpoll_setup~*((*net_device *netpoll_info ) : INT)?ndo_netpoll_cleanup~*((*net_device ) : VOID)?ndo_set_vf_mac~*((*net_device INT *~u8~0 ) : INT)?ndo_set_vf_vlan~*((*net_device INT ~u16~0 ~u8~0 ) : INT)?ndo_set_vf_tx_rate~*((*net_device INT INT ) : INT)?ndo_get_vf_config~*((*net_device INT *ifla_vf_info ) : INT)?ndo_set_vf_port~*((*net_device INT **nlattr ) : INT)?ndo_get_vf_port~*((*net_device INT *sk_buff ) : INT)?ndo_fcoe_enable~*((*net_device ) : INT)?ndo_fcoe_disable~*((*net_device ) : INT)?ndo_fcoe_ddp_setup~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_ddp_done~*((*net_device ~u16~0 ) : INT)?ndo_fcoe_get_wwn~*((*net_device *~u64~0 INT ) : INT)# [2019-10-15 01:02:20,233 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 4294967330 could not be translated for associated CType STRUCT~~tty_ldisc_ops?magic~INT?name~*CHAR?num~INT?flags~INT?open~*((*tty_struct ) : INT)?close~*((*tty_struct ) : VOID)?flush_buffer~*((*tty_struct ) : VOID)?chars_in_buffer~*((*tty_struct ) : UINT)?read~*((*tty_struct *file *UCHAR UINT ) : UINT)?write~*((*tty_struct *file *UCHAR UINT ) : UINT)?ioctl~*((*tty_struct *file UINT ULONG ) : INT)?compat_ioctl~*((*tty_struct *file UINT ULONG ) : LONG)?set_termios~*((*tty_struct *ktermios ) : VOID)?poll~*((*tty_struct *file *poll_table_struct ) : UINT)?hangup~*((*tty_struct ) : INT)?receive_buf~*((*tty_struct *UCHAR *CHAR INT ) : VOID)?write_wakeup~*((*tty_struct ) : VOID)?dcd_change~*((*tty_struct UINT *pps_event_time ) : VOID)?owner~*module?refcount~INT# [2019-10-15 01:02:20,311 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,313 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,314 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,316 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,316 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,341 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,342 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,343 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,344 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,346 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,346 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,355 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,356 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,358 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,358 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,366 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,367 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,369 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,369 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,371 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,372 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,372 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch550 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,374 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,374 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,374 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch550 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,431 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch14 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,433 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch14 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2019-10-15 01:02:20,491 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 15.10 01:02:20 BoogieIcfgContainer [2019-10-15 01:02:20,491 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-10-15 01:02:20,494 INFO L168 Benchmark]: Toolchain (without parser) took 29997.06 ms. Allocated memory was 144.7 MB in the beginning and 759.7 MB in the end (delta: 615.0 MB). Free memory was 92.5 MB in the beginning and 120.2 MB in the end (delta: -27.7 MB). Peak memory consumption was 587.3 MB. Max. memory is 7.1 GB. [2019-10-15 01:02:20,495 INFO L168 Benchmark]: CDTParser took 0.19 ms. Allocated memory is still 144.7 MB. Free memory is still 120.7 MB. There was no memory consumed. Max. memory is 7.1 GB. [2019-10-15 01:02:20,496 INFO L168 Benchmark]: CACSL2BoogieTranslator took 2517.32 ms. Allocated memory was 144.7 MB in the beginning and 251.1 MB in the end (delta: 106.4 MB). Free memory was 92.1 MB in the beginning and 166.2 MB in the end (delta: -74.1 MB). Peak memory consumption was 115.9 MB. Max. memory is 7.1 GB. [2019-10-15 01:02:20,496 INFO L168 Benchmark]: Boogie Preprocessor took 296.05 ms. Allocated memory is still 251.1 MB. Free memory was 166.2 MB in the beginning and 146.3 MB in the end (delta: 19.8 MB). Peak memory consumption was 19.8 MB. Max. memory is 7.1 GB. [2019-10-15 01:02:20,497 INFO L168 Benchmark]: RCFGBuilder took 4033.90 ms. Allocated memory was 251.1 MB in the beginning and 333.4 MB in the end (delta: 82.3 MB). Free memory was 146.3 MB in the beginning and 233.3 MB in the end (delta: -87.0 MB). Peak memory consumption was 154.5 MB. Max. memory is 7.1 GB. [2019-10-15 01:02:20,498 INFO L168 Benchmark]: TraceAbstraction took 23145.44 ms. Allocated memory was 333.4 MB in the beginning and 759.7 MB in the end (delta: 426.2 MB). Free memory was 233.3 MB in the beginning and 120.2 MB in the end (delta: 113.1 MB). Peak memory consumption was 539.4 MB. Max. memory is 7.1 GB. [2019-10-15 01:02:20,501 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19 ms. Allocated memory is still 144.7 MB. Free memory is still 120.7 MB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 2517.32 ms. Allocated memory was 144.7 MB in the beginning and 251.1 MB in the end (delta: 106.4 MB). Free memory was 92.1 MB in the beginning and 166.2 MB in the end (delta: -74.1 MB). Peak memory consumption was 115.9 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 296.05 ms. Allocated memory is still 251.1 MB. Free memory was 166.2 MB in the beginning and 146.3 MB in the end (delta: 19.8 MB). Peak memory consumption was 19.8 MB. Max. memory is 7.1 GB. * RCFGBuilder took 4033.90 ms. Allocated memory was 251.1 MB in the beginning and 333.4 MB in the end (delta: 82.3 MB). Free memory was 146.3 MB in the beginning and 233.3 MB in the end (delta: -87.0 MB). Peak memory consumption was 154.5 MB. Max. memory is 7.1 GB. * TraceAbstraction took 23145.44 ms. Allocated memory was 333.4 MB in the beginning and 759.7 MB in the end (delta: 426.2 MB). Free memory was 233.3 MB in the beginning and 120.2 MB in the end (delta: 113.1 MB). Peak memory consumption was 539.4 MB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967334 could not be translated for associated CType STRUCT~~net_device_ops?ndo_init~*((*net_device ) : INT)?ndo_uninit~*((*net_device ) : VOID)?ndo_open~*((*net_device ) : INT)?ndo_stop~*((*net_device ) : INT)?ndo_start_xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?ndo_select_queue~*((*net_device *sk_buff ) : ~u16~0)?ndo_change_rx_flags~*((*net_device INT ) : VOID)?ndo_set_rx_mode~*((*net_device ) : VOID)?ndo_set_multicast_list~*((*net_device ) : VOID)?ndo_set_mac_address~*((*net_device *VOID ) : INT)?ndo_validate_addr~*((*net_device ) : INT)?ndo_do_ioctl~*((*net_device *ifreq INT ) : INT)?ndo_set_config~*((*net_device *ifmap ) : INT)?ndo_change_mtu~*((*net_device INT ) : INT)?ndo_neigh_setup~*((*net_device *neigh_parms ) : INT)?ndo_tx_timeout~*((*net_device ) : VOID)?ndo_get_stats64~*((*net_device *rtnl_link_stats64 ) : *rtnl_link_stats64)?ndo_get_stats~*((*net_device ) : *net_device_stats)?ndo_vlan_rx_register~*((*net_device *vlan_group ) : VOID)?ndo_vlan_rx_add_vid~*((*net_device USHORT ) : VOID)?ndo_vlan_rx_kill_vid~*((*net_device USHORT ) : VOID)?ndo_poll_controller~*((*net_device ) : VOID)?ndo_netpoll_setup~*((*net_device *netpoll_info ) : INT)?ndo_netpoll_cleanup~*((*net_device ) : VOID)?ndo_set_vf_mac~*((*net_device INT *~u8~0 ) : INT)?ndo_set_vf_vlan~*((*net_device INT ~u16~0 ~u8~0 ) : INT)?ndo_set_vf_tx_rate~*((*net_device INT INT ) : INT)?ndo_get_vf_config~*((*net_device INT *ifla_vf_info ) : INT)?ndo_set_vf_port~*((*net_device INT **nlattr ) : INT)?ndo_get_vf_port~*((*net_device INT *sk_buff ) : INT)?ndo_fcoe_enable~*((*net_device ) : INT)?ndo_fcoe_disable~*((*net_device ) : INT)?ndo_fcoe_ddp_setup~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_ddp_done~*((*net_device ~u16~0 ) : INT)?ndo_fcoe_get_wwn~*((*net_device *~u64~0 INT ) : INT)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967394 could not be translated for associated CType STRUCT~~tty_ldisc_ops?magic~INT?name~*CHAR?num~INT?flags~INT?open~*((*tty_struct ) : INT)?close~*((*tty_struct ) : VOID)?flush_buffer~*((*tty_struct ) : VOID)?chars_in_buffer~*((*tty_struct ) : UINT)?read~*((*tty_struct *file *UCHAR UINT ) : UINT)?write~*((*tty_struct *file *UCHAR UINT ) : UINT)?ioctl~*((*tty_struct *file UINT ULONG ) : INT)?compat_ioctl~*((*tty_struct *file UINT ULONG ) : LONG)?set_termios~*((*tty_struct *ktermios ) : VOID)?poll~*((*tty_struct *file *poll_table_struct ) : UINT)?hangup~*((*tty_struct ) : INT)?receive_buf~*((*tty_struct *UCHAR *CHAR INT ) : VOID)?write_wakeup~*((*tty_struct ) : VOID)?dcd_change~*((*tty_struct UINT *pps_event_time ) : VOID)?owner~*module?refcount~INT# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967321 could not be translated for associated CType STRUCT~~net_device_ops?ndo_init~*((*net_device ) : INT)?ndo_uninit~*((*net_device ) : VOID)?ndo_open~*((*net_device ) : INT)?ndo_stop~*((*net_device ) : INT)?ndo_start_xmit~*((*sk_buff *net_device ) : ~netdev_tx_t~0)?ndo_select_queue~*((*net_device *sk_buff ) : ~u16~0)?ndo_change_rx_flags~*((*net_device INT ) : VOID)?ndo_set_rx_mode~*((*net_device ) : VOID)?ndo_set_multicast_list~*((*net_device ) : VOID)?ndo_set_mac_address~*((*net_device *VOID ) : INT)?ndo_validate_addr~*((*net_device ) : INT)?ndo_do_ioctl~*((*net_device *ifreq INT ) : INT)?ndo_set_config~*((*net_device *ifmap ) : INT)?ndo_change_mtu~*((*net_device INT ) : INT)?ndo_neigh_setup~*((*net_device *neigh_parms ) : INT)?ndo_tx_timeout~*((*net_device ) : VOID)?ndo_get_stats64~*((*net_device *rtnl_link_stats64 ) : *rtnl_link_stats64)?ndo_get_stats~*((*net_device ) : *net_device_stats)?ndo_vlan_rx_register~*((*net_device *vlan_group ) : VOID)?ndo_vlan_rx_add_vid~*((*net_device USHORT ) : VOID)?ndo_vlan_rx_kill_vid~*((*net_device USHORT ) : VOID)?ndo_poll_controller~*((*net_device ) : VOID)?ndo_netpoll_setup~*((*net_device *netpoll_info ) : INT)?ndo_netpoll_cleanup~*((*net_device ) : VOID)?ndo_set_vf_mac~*((*net_device INT *~u8~0 ) : INT)?ndo_set_vf_vlan~*((*net_device INT ~u16~0 ~u8~0 ) : INT)?ndo_set_vf_tx_rate~*((*net_device INT INT ) : INT)?ndo_get_vf_config~*((*net_device INT *ifla_vf_info ) : INT)?ndo_set_vf_port~*((*net_device INT **nlattr ) : INT)?ndo_get_vf_port~*((*net_device INT *sk_buff ) : INT)?ndo_fcoe_enable~*((*net_device ) : INT)?ndo_fcoe_disable~*((*net_device ) : INT)?ndo_fcoe_ddp_setup~*((*net_device ~u16~0 *scatterlist UINT ) : INT)?ndo_fcoe_ddp_done~*((*net_device ~u16~0 ) : INT)?ndo_fcoe_get_wwn~*((*net_device *~u64~0 INT ) : INT)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 4294967330 could not be translated for associated CType STRUCT~~tty_ldisc_ops?magic~INT?name~*CHAR?num~INT?flags~INT?open~*((*tty_struct ) : INT)?close~*((*tty_struct ) : VOID)?flush_buffer~*((*tty_struct ) : VOID)?chars_in_buffer~*((*tty_struct ) : UINT)?read~*((*tty_struct *file *UCHAR UINT ) : UINT)?write~*((*tty_struct *file *UCHAR UINT ) : UINT)?ioctl~*((*tty_struct *file UINT ULONG ) : INT)?compat_ioctl~*((*tty_struct *file UINT ULONG ) : LONG)?set_termios~*((*tty_struct *ktermios ) : VOID)?poll~*((*tty_struct *file *poll_table_struct ) : UINT)?hangup~*((*tty_struct ) : INT)?receive_buf~*((*tty_struct *UCHAR *CHAR INT ) : VOID)?write_wakeup~*((*tty_struct ) : VOID)?dcd_change~*((*tty_struct UINT *pps_event_time ) : VOID)?owner~*module?refcount~INT# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch550 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch531 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch547 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch550 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch14 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch14 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 4787]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseOr at line 4931, overapproximation of bitwiseAnd at line 4711. Possible FailurePath: [L4935] int LDV_IN_INTERRUPT = 1; [L4936] int ldv_timer_state_2 = 0; [L4937] int ldv_state_variable_0 ; [L4938] struct tty_struct *sl_ldisc_group1 ; [L4939] int ldv_state_variable_3 ; [L4940] struct timer_list *ldv_timer_list_2 ; [L4941] int ldv_timer_state_1 = 0; [L4942] int ldv_state_variable_2 ; [L4943] int ref_cnt ; [L4944] int ldv_state_variable_1 ; [L4945] struct timer_list *ldv_timer_list_1 ; [L4946] struct net_device *sl_netdev_ops_group1 ; [L4947] int ldv_state_variable_4 ; [L5133] static struct net_device **slip_devs ; [L5134] static int slip_maxdev = 256; [L5949-L5952] static struct net_device_ops const sl_netdev_ops = {& sl_init, & sl_uninit, & sl_open, & sl_close, & sl_xmit, 0, 0, 0, 0, 0, 0, & sl_ioctl, 0, & sl_change_mtu, 0, & sl_tx_timeout, & sl_get_stats64, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L6820-L6823] static struct tty_ldisc_ops sl_ldisc = {21507, (char *)"slip", 0, 0, & slip_open, & slip_close, 0, 0, 0, 0, & slip_ioctl, & slip_compat_ioctl, 0, 0, & slip_hangup, & slip_receive_buf, & slip_write_wakeup, 0, & __this_module, 0}; [L7002] int ldv_retval_0 ; [L7003] int ldv_retval_1 ; [L7006] int ldv_retval_3 ; [L7007] int ldv_retval_2 ; VAL [\old(LDV_IN_INTERRUPT)=4294967306, \old(ldv_retval_0)=4294967361, \old(ldv_retval_1)=4294967303, \old(ldv_retval_2)=4294967371, \old(ldv_retval_3)=4294967309, \old(ldv_state_variable_0)=4294967313, \old(ldv_state_variable_1)=4294967329, \old(ldv_state_variable_2)=4294967388, \old(ldv_state_variable_3)=4294967348, \old(ldv_state_variable_4)=4294967387, \old(ldv_timer_list_1)=4294967398, \old(ldv_timer_list_1)=4294967333, \old(ldv_timer_list_2)=4294967354, \old(ldv_timer_list_2)=4294967339, \old(ldv_timer_state_1)=4294967344, \old(ldv_timer_state_2)=4294967385, \old(ref_cnt)=4294967386, \old(sl_ldisc)=null, \old(sl_ldisc)=null, \old(sl_ldisc_group1)=4294967406, \old(sl_ldisc_group1)=4294967383, \old(sl_netdev_ops)=null, \old(sl_netdev_ops)=null, \old(sl_netdev_ops_group1)=4294967374, \old(sl_netdev_ops_group1)=4294967310, \old(slip_devs)=4294967328, \old(slip_devs)=4294967390, \old(slip_maxdev)=4294967341, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L7122] struct sk_buff *ldvarg1 ; [L7123] void *tmp ; [L7124] struct ifreq *ldvarg4 ; [L7125] void *tmp___0 ; [L7126] int ldvarg3 ; [L7127] int tmp___1 ; [L7128] struct rtnl_link_stats64 *ldvarg0 ; [L7129] void *tmp___2 ; [L7130] int ldvarg2 ; [L7131] int tmp___3 ; [L7132] unsigned long ldvarg11 ; [L7133] unsigned long tmp___4 ; [L7134] struct file *ldvarg7 ; [L7135] void *tmp___5 ; [L7136] unsigned int ldvarg12 ; [L7137] unsigned int tmp___6 ; [L7138] unsigned long ldvarg5 ; [L7139] unsigned long tmp___7 ; [L7140] unsigned int ldvarg6 ; [L7141] unsigned int tmp___8 ; [L7142] int ldvarg8 ; [L7143] int tmp___9 ; [L7144] struct file *ldvarg13 ; [L7145] void *tmp___10 ; [L7146] unsigned char *ldvarg10 ; [L7147] void *tmp___11 ; [L7148] char *ldvarg9 ; [L7149] void *tmp___12 ; [L7150] int tmp___13 ; [L7151] int tmp___14 ; [L7152] int tmp___15 ; [L7153] int tmp___16 ; VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L7155] CALL, EXPR ldv_zalloc(240UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=240, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4744] void *p ; [L4745] void *tmp ; [L4746] int tmp___0 ; [L4748] tmp___0 = __VERIFIER_nondet_int() [L4749] COND TRUE tmp___0 != 0 [L4750] return ((void *)0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=240, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:0}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=240, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp___0=1] [L7155] RET, EXPR ldv_zalloc(240UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldv_zalloc(240UL)={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L7155] tmp = ldv_zalloc(240UL) [L7156] ldvarg1 = (struct sk_buff *)tmp VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg1={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}] [L7157] CALL, EXPR ldv_zalloc(40UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=40, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4744] void *p ; [L4745] void *tmp ; [L4746] int tmp___0 ; [L4748] tmp___0 = __VERIFIER_nondet_int() [L4749] COND TRUE tmp___0 != 0 [L4750] return ((void *)0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=40, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:0}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=40, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp___0=1] [L7157] RET, EXPR ldv_zalloc(40UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldv_zalloc(40UL)={0:0}, ldvarg1={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}] [L7157] tmp___0 = ldv_zalloc(40UL) [L7158] ldvarg4 = (struct ifreq *)tmp___0 [L7159] tmp___1 = __VERIFIER_nondet_int() [L7160] ldvarg3 = tmp___1 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg1={0:0}, ldvarg3=0, ldvarg4={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0] [L7161] CALL, EXPR ldv_zalloc(184UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=184, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4744] void *p ; [L4745] void *tmp ; [L4746] int tmp___0 ; [L4748] tmp___0 = __VERIFIER_nondet_int() [L4749] COND TRUE tmp___0 != 0 [L4750] return ((void *)0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=184, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:0}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=184, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp___0=1] [L7161] RET, EXPR ldv_zalloc(184UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldv_zalloc(184UL)={0:0}, ldvarg1={0:0}, ldvarg3=0, ldvarg4={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0] [L7161] tmp___2 = ldv_zalloc(184UL) [L7162] ldvarg0 = (struct rtnl_link_stats64 *)tmp___2 [L7163] tmp___3 = __VERIFIER_nondet_int() [L7164] ldvarg2 = tmp___3 [L7165] tmp___4 = __VERIFIER_nondet_ulong() [L7166] ldvarg11 = tmp___4 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg11=67, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___2={0:0}, tmp___3=0, tmp___4=67] [L7167] CALL, EXPR ldv_zalloc(336UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=336, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4744] void *p ; [L4745] void *tmp ; [L4746] int tmp___0 ; [L4748] tmp___0 = __VERIFIER_nondet_int() [L4749] COND TRUE tmp___0 != 0 [L4750] return ((void *)0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=336, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:0}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=336, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp___0=1] [L7167] RET, EXPR ldv_zalloc(336UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldv_zalloc(336UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg11=67, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___2={0:0}, tmp___3=0, tmp___4=67] [L7167] tmp___5 = ldv_zalloc(336UL) [L7168] ldvarg7 = (struct file *)tmp___5 [L7169] tmp___6 = __VERIFIER_nondet_uint() [L7170] ldvarg12 = tmp___6 [L7171] tmp___7 = __VERIFIER_nondet_ulong() [L7172] ldvarg5 = tmp___7 [L7173] tmp___8 = __VERIFIER_nondet_uint() [L7174] ldvarg6 = tmp___8 [L7175] tmp___9 = __VERIFIER_nondet_int() [L7176] ldvarg8 = tmp___9 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg11=67, ldvarg12=57, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7177] CALL, EXPR ldv_zalloc(336UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=336, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4744] void *p ; [L4745] void *tmp ; [L4746] int tmp___0 ; [L4748] tmp___0 = __VERIFIER_nondet_int() [L4749] COND TRUE tmp___0 != 0 [L4750] return ((void *)0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=336, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:0}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=336, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp___0=1] [L7177] RET, EXPR ldv_zalloc(336UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldv_zalloc(336UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg11=67, ldvarg12=57, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7177] tmp___10 = ldv_zalloc(336UL) [L7178] ldvarg13 = (struct file *)tmp___10 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7179] CALL, EXPR ldv_zalloc(1UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=1, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4744] void *p ; [L4745] void *tmp ; [L4746] int tmp___0 ; [L4748] tmp___0 = __VERIFIER_nondet_int() [L4749] COND TRUE tmp___0 != 0 [L4750] return ((void *)0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=1, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:0}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=1, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp___0=1] [L7179] RET, EXPR ldv_zalloc(1UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7179] tmp___11 = ldv_zalloc(1UL) [L7180] ldvarg10 = (unsigned char *)tmp___11 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7181] CALL, EXPR ldv_zalloc(1UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=1, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4744] void *p ; [L4745] void *tmp ; [L4746] int tmp___0 ; [L4748] tmp___0 = __VERIFIER_nondet_int() [L4749] COND TRUE tmp___0 != 0 [L4750] return ((void *)0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=1, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:0}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=1, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp___0=1] [L7181] RET, EXPR ldv_zalloc(1UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7181] tmp___12 = ldv_zalloc(1UL) [L7182] ldvarg9 = (char *)tmp___12 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7183] FCALL ldv_initialize() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7184] ldv_state_variable_4 = 0 [L7185] ldv_state_variable_1 = 1 [L7186] ref_cnt = 0 [L7187] ldv_state_variable_0 = 1 [L7188] ldv_state_variable_3 = 0 [L7189] ldv_state_variable_2 = 1 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7191] tmp___13 = __VERIFIER_nondet_int() [L7193] case 0: [L7310] case 1: [L7316] case 2: VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7317] COND TRUE ldv_state_variable_0 != 0 [L7318] tmp___15 = __VERIFIER_nondet_int() [L7320] case 0: [L7328] case 1: VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2, tmp___15=1, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7329] COND TRUE ldv_state_variable_0 == 1 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2, tmp___15=1, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7330] CALL, EXPR slip_init() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L6826] int status ; [L6827] void *tmp ; VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L6829] COND FALSE !(slip_maxdev <= 3) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L6837] CALL, EXPR kzalloc((unsigned long )slip_maxdev * 8UL, 208U) VAL [\old(flags)=208, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4929] void *tmp ; VAL [\old(flags)=208, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, flags=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=2048, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4931] CALL, EXPR kmalloc(size, flags | 32768U) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4921] void *tmp___2 ; VAL [\old(flags)=47, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, flags=47, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=2048, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4923] CALL, EXPR __kmalloc(size, flags) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \old(t)=47, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4917] CALL, EXPR ldv_malloc(size) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4727] void *p ; [L4728] void *tmp ; [L4729] int tmp___0 ; [L4731] tmp___0 = __VERIFIER_nondet_int() [L4732] COND FALSE !(tmp___0 != 0) [L4735] tmp = malloc(size) [L4736] p = tmp [L4738] return (p); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={4294967297:0}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, malloc(size)={4294967297:0}, p={4294967297:0}, ref_cnt=0, size=2048, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={4294967297:0}, tmp___0=0] [L4917] RET, EXPR ldv_malloc(size) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \old(t)=47, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_malloc(size)={4294967297:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=2048, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, t=47] [L4917] return ldv_malloc(size); [L4923] RET, EXPR __kmalloc(size, flags) VAL [\old(flags)=47, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __kmalloc(size, flags)={4294967297:0}, __this_module={4294967356:4294967352}, flags=47, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=2048, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4923] tmp___2 = __kmalloc(size, flags) [L4924] return (tmp___2); VAL [\old(flags)=47, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={4294967297:0}, __this_module={4294967356:4294967352}, flags=47, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=2048, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp___2={4294967297:0}] [L4931] RET, EXPR kmalloc(size, flags | 32768U) VAL [\old(flags)=208, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, flags=208, kmalloc(size, flags | 32768U)={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=2048, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L4931] tmp = kmalloc(size, flags | 32768U) [L4932] return (tmp); VAL [\old(flags)=208, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2048, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={4294967297:0}, __this_module={4294967356:4294967352}, flags=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=2048, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256, tmp={4294967297:0}] [L6837] RET, EXPR kzalloc((unsigned long )slip_maxdev * 8UL, 208U) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, kzalloc((unsigned long )slip_maxdev * 8UL, 208U)={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={0:0}, slip_maxdev=256] [L6837] tmp = kzalloc((unsigned long )slip_maxdev * 8UL, 208U) [L6838] slip_devs = (struct net_device **)tmp VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={4294967297:0}] [L6839] COND FALSE !((unsigned long )slip_devs == (unsigned long )((struct net_device **)0)) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={4294967297:0}] [L6844] CALL, EXPR tty_register_ldisc(1, & sl_ldisc) VAL [\old(arg0)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, arg1={152:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7801] return __VERIFIER_nondet_int(); [L6844] RET, EXPR tty_register_ldisc(1, & sl_ldisc) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={4294967297:0}, tty_register_ldisc(1, & sl_ldisc)=0] [L6844] status = tty_register_ldisc(1, & sl_ldisc) [L6845] COND FALSE !(status != 0) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, status=0, tmp={4294967297:0}] [L6850] return (status); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result=0, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, status=0, tmp={4294967297:0}] [L7330] RET, EXPR slip_init() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_init()=0, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2, tmp___15=1, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7330] ldv_retval_2 = slip_init() [L7331] COND FALSE !(ldv_retval_2 != 0) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2, tmp___15=1, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7336] COND TRUE ldv_retval_2 == 0 [L7337] ldv_state_variable_0 = 2 [L7338] ldv_state_variable_3 = 1 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2, tmp___15=1, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7339] CALL ldv_target_type_3() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7010] void *tmp ; VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7012] CALL, EXPR ldv_zalloc(2696UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2696, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L4744] void *p ; [L4745] void *tmp ; [L4746] int tmp___0 ; [L4748] tmp___0 = __VERIFIER_nondet_int() [L4749] COND TRUE tmp___0 != 0 [L4750] return ((void *)0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2696, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:0}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=2696, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp___0=1] [L7012] RET, EXPR ldv_zalloc(2696UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldv_zalloc(2696UL)={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7012] tmp = ldv_zalloc(2696UL) [L7013] sl_ldisc_group1 = (struct tty_struct *)tmp VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={0:0}] [L7339] RET ldv_target_type_3() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2, tmp___15=1, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7340] ldv_state_variable_4 = 1 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2, tmp___15=1, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7341] CALL ldv_net_device_ops_4() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7019] void *tmp ; VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7021] CALL, EXPR ldv_zalloc(2496UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2496, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L4744] void *p ; [L4745] void *tmp ; [L4746] int tmp___0 ; [L4748] tmp___0 = __VERIFIER_nondet_int() [L4749] COND TRUE tmp___0 != 0 [L4750] return ((void *)0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(size)=2496, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:0}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, size=2496, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp___0=1] [L7021] RET, EXPR ldv_zalloc(2496UL) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldv_zalloc(2496UL)={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7021] tmp = ldv_zalloc(2496UL) [L7022] sl_netdev_ops_group1 = (struct net_device *)tmp VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={0:0}] [L7341] RET ldv_net_device_ops_4() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=2, tmp___15=1, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7191] tmp___13 = __VERIFIER_nondet_int() [L7193] case 0: [L7310] case 1: [L7316] case 2: [L7354] case 3: VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=3, tmp___15=1, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7355] COND TRUE ldv_state_variable_3 != 0 [L7356] tmp___16 = __VERIFIER_nondet_int() [L7358] case 0: [L7370] case 1: [L7382] case 2: [L7390] case 3: [L7397] case 4: VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=3, tmp___15=1, tmp___16=4, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7398] COND TRUE ldv_state_variable_3 == 1 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg10={0:0}, ldvarg11=67, ldvarg12=57, ldvarg13={0:0}, ldvarg2=0, ldvarg3=0, ldvarg4={0:0}, ldvarg5=64, ldvarg6=12, ldvarg7={0:0}, ldvarg8=0, ldvarg9={0:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___10={0:0}, tmp___11={0:0}, tmp___12={0:0}, tmp___13=3, tmp___15=1, tmp___16=4, tmp___2={0:0}, tmp___3=0, tmp___4=67, tmp___5={0:0}, tmp___6=57, tmp___7=64, tmp___8=12, tmp___9=0] [L7399] CALL ldv_slip_open_18(sl_ldisc_group1) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tty={0:0}] [L7644] ldv_func_ret_type___16 ldv_func_res ; [L7645] int tmp ; VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tty={0:0}, tty={0:0}] [L7647] CALL, EXPR slip_open(tty) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tty={0:0}] [L6134] struct slip *sl ; [L6135] int err ; [L6136] int tmp ; [L6137] dev_t tmp___0 ; [L6138] struct task_struct *tmp___1 ; [L6139] int tmp___2 ; VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tty={0:0}, tty={0:0}] [L6141] CALL, EXPR capable(12) VAL [\old(arg0)=12, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7694] return __VERIFIER_nondet_int(); [L6141] RET, EXPR capable(12) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, capable(12)=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tty={0:0}, tty={0:0}] [L6141] tmp = capable(12) [L6142] COND FALSE !(tmp == 0) [L6146] EXPR tty->ops [L6146] EXPR (tty->ops)->write VAL [(tty->ops)->write={-8:9}, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tty={0:0}, tty={0:0}, tty->ops={4294967332:0}] [L6146-L6148] COND FALSE !((unsigned long )(tty->ops)->write == (unsigned long )((int (* )(struct tty_struct * , unsigned char const * , int ))0)) [L6152] FCALL rtnl_lock() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tty={0:0}, tty={0:0}] [L6153] CALL sl_sync() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6024] int i ; [L6025] struct net_device *dev ; [L6026] struct slip *sl ; [L6027] void *tmp ; [L6029] i = 0 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6050] COND TRUE i < slip_maxdev VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6032] EXPR slip_devs + (unsigned long )i [L6032] dev = *(slip_devs + (unsigned long )i) [L6033] COND TRUE (unsigned long )dev == (unsigned long )((struct net_device *)0) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, dev={4294967296:0}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6153] RET sl_sync() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tty={0:0}, tty={0:0}] [L6154] EXPR tty->disc_data [L6154] sl = (struct slip *)tty->disc_data [L6155] err = -17 [L6156] (unsigned long )sl != (unsigned long )((struct slip *)0) && sl->magic == 21250 [L6156] EXPR sl->magic [L6156] (unsigned long )sl != (unsigned long )((struct slip *)0) && sl->magic == 21250 VAL [(unsigned long )sl != (unsigned long )((struct slip *)0) && sl->magic == 21250=0, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-17, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl={10:-9}, sl->magic=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tty={0:0}, tty={0:0}] [L6156] COND FALSE !((unsigned long )sl != (unsigned long )((struct slip *)0) && sl->magic == 21250) [L6160] err = -23 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-23, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl={10:-9}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tty={0:0}, tty={0:0}] [L6161] CALL, EXPR tty_devnum(tty) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, arg0={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7790] return __VERIFIER_nondet_uint(); [L6161] RET, EXPR tty_devnum(tty) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-23, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl={10:-9}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tty={0:0}, tty={0:0}, tty_devnum(tty)=4294967392] [L6161] tmp___0 = tty_devnum(tty) [L6162] CALL, EXPR sl_alloc(tmp___0) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6060] int i ; [L6061] struct net_device *dev ; [L6062] struct slip *sl ; [L6063] void *tmp ; [L6064] int tmp___0 ; [L6065] char name[16U] ; [L6066] void *tmp___1 ; [L6067] struct lock_class_key __key ; [L6069] dev = (struct net_device *)0 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6070] COND FALSE !((unsigned long )slip_devs == (unsigned long )((struct net_device **)0)) [L6074] i = 0 VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:0}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6084] COND TRUE i < slip_maxdev VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:0}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6077] EXPR slip_devs + (unsigned long )i [L6077] dev = *(slip_devs + (unsigned long )i) [L6078] COND TRUE (unsigned long )dev == (unsigned long )((struct net_device *)0) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={4294967296:0}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6089] COND FALSE !(i >= slip_maxdev) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={4294967296:0}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6093] COND FALSE !((unsigned long )dev != (unsigned long )((struct net_device *)0)) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={4294967296:0}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6105] COND TRUE (unsigned long )dev == (unsigned long )((struct net_device *)0) [L6107] CALL, EXPR alloc_netdev_mqs(472, (char const *)(& name), & sl_setup, 1U, 1U) VAL [\old(arg0)=472, \old(arg3)=1, \old(arg4)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, arg1={167:0}, arg2={-1:10}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7690] CALL, EXPR external_alloc() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7818] return __VERIFIER_nondet_pointer(); [L7690] RET, EXPR external_alloc() VAL [\old(arg0)=472, \old(arg3)=1, \old(arg4)=1, \old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, arg0=472, arg1={167:0}, arg1={167:0}, arg2={-1:10}, arg2={-1:10}, arg3=1, arg4=1, external_alloc()={0:607}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7690] return (struct net_device *)external_alloc(); [L6107] RET, EXPR alloc_netdev_mqs(472, (char const *)(& name), & sl_setup, 1U, 1U) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, alloc_netdev_mqs(472, (char const *)(& name), & sl_setup, 1U, 1U)={0:607}, dev={4294967296:0}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6107] dev = alloc_netdev_mqs(472, (char const *)(& name), & sl_setup, 1U, 1U) [L6108] COND FALSE !((unsigned long )dev == (unsigned long )((struct net_device *)0)) [L6112] dev->base_addr = (unsigned long )i VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:607}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6115] CALL, EXPR netdev_priv((struct net_device const *)dev) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, dev={0:607}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L5002] return ((void *)dev + 2496U); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:3103}, __this_module={4294967356:4294967352}, dev={0:607}, dev={0:607}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6115] RET, EXPR netdev_priv((struct net_device const *)dev) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:607}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, netdev_priv((struct net_device const *)dev)={0:3103}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6115] tmp___1 = netdev_priv((struct net_device const *)dev) [L6116] sl = (struct slip *)tmp___1 [L6117] sl->magic = 21250 [L6118] sl->dev = dev VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:607}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp___1={0:3103}] [L6119] CALL spinlock_check(& sl->lock) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, lock={0:3115}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L4861] return (& lock->ldv_5964.rlock); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:3115}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, lock={0:3115}, lock={0:3115}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6119] RET spinlock_check(& sl->lock) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:607}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, spinlock_check(& sl->lock)={0:3115}, tmp___1={0:3103}] [L6120] FCALL __raw_spin_lock_init(& sl->lock.ldv_5964.rlock, "&(&sl->lock)->rlock", & __key) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:607}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp___1={0:3103}] [L6121] sl->mode = 8U VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:607}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp___1={0:3103}] [L6122] CALL reg_timer_1(& sl->keepalive_timer) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:0}, ldv_timer_list_2={0:0}, ldv_timer_state_1=0, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, timer={0:3303}] [L7057] ldv_timer_list_1 = timer [L7058] ldv_timer_state_1 = 1 [L7059] return (0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result=0, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3303}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, timer={0:3303}, timer={0:3303}] [L6122] RET reg_timer_1(& sl->keepalive_timer) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:607}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3303}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, reg_timer_1(& sl->keepalive_timer)=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp___1={0:3103}] [L6123] sl->keepalive_timer.data = (unsigned long )sl [L6124] sl->keepalive_timer.function = & sl_keepalive VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:607}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3303}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp___1={0:3103}] [L6125] CALL reg_timer_1(& sl->outfill_timer) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=3303, \old(ldv_timer_state_1)=1, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3303}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, timer={0:3227}] [L7057] ldv_timer_list_1 = timer [L7058] ldv_timer_state_1 = 1 [L7059] return (0); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=3303, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=1, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result=0, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, timer={0:3227}, timer={0:3227}] [L6125] RET reg_timer_1(& sl->outfill_timer) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __key={1:0}, __this_module={4294967356:4294967352}, dev={0:607}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, line=96, name={167:0}, ref_cnt=0, reg_timer_1(& sl->outfill_timer)=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp___1={0:3103}] [L6126] sl->outfill_timer.data = (unsigned long )sl [L6127] sl->outfill_timer.function = & sl_outfill [L6128] *(slip_devs + (unsigned long )i) = dev [L6129] return (sl); [L6129] return (sl); [L6129] return (sl); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(line)=96, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={0:3103}, __this_module={4294967356:4294967352}, dev={0:607}, i=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, line=96, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp___1={0:3103}] [L6162] RET, EXPR sl_alloc(tmp___0) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-23, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl={10:-9}, sl_alloc(tmp___0)={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tmp___0=96, tty={0:0}, tty={0:0}] [L6162] sl = sl_alloc(tmp___0) [L6163] COND FALSE !((unsigned long )sl == (unsigned long )((struct slip *)0)) [L6167] sl->tty = tty [L6168] tty->disc_data = (void *)sl VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-23, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tmp___0=96, tty={0:0}, tty={0:0}] [L6169] CALL, EXPR tty_devnum(tty) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, arg0={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7790] return __VERIFIER_nondet_uint(); [L6169] RET, EXPR tty_devnum(tty) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-23, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tmp___0=96, tty={0:0}, tty={0:0}, tty_devnum(tty)=4294967304] [L6169] sl->line = tty_devnum(tty) [L6170] CALL, EXPR get_current() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L4829] struct task_struct *pfo_ret__ ; [L4832] case 1UL: [L4835] case 2UL: [L4838] case 4UL: [L4841] case 8UL: VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L4848] return (pfo_ret__); VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, \result={4294967319:1}, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, pfo_ret__={4294967319:1}, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L6170] RET, EXPR get_current() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-23, get_current()={4294967319:1}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tmp___0=96, tty={0:0}, tty={0:0}] [L6170] tmp___1 = get_current() [L6171] EXPR tmp___1->pid [L6171] sl->pid = tmp___1->pid [L6172] CALL, EXPR constant_test_bit(0U, (unsigned long const volatile *)(& sl->flags)) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(nr)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, addr={0:3211}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L4711] EXPR addr + (unsigned long )(nr / 64U) [L4711] return ((int )((unsigned long )*(addr + (unsigned long )(nr / 64U)) >> ((int )nr & 63)) & 1); [L6172] RET, EXPR constant_test_bit(0U, (unsigned long const volatile *)(& sl->flags)) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, constant_test_bit(0U, (unsigned long const volatile *)(& sl->flags))=1, err=-23, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tmp___0=96, tmp___1={4294967319:1}, tty={0:0}, tty={0:0}] [L6172] tmp___2 = constant_test_bit(0U, (unsigned long const volatile *)(& sl->flags)) [L6173] COND FALSE !(tmp___2 == 0) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-23, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tmp___0=96, tmp___1={4294967319:1}, tmp___2=1, tty={0:0}, tty={0:0}] [L6187] EXPR sl->keepalive VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-23, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl={0:3103}, sl->keepalive=512, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tmp___0=96, tmp___1={4294967319:1}, tmp___2=1, tty={0:0}, tty={0:0}] [L6187] COND FALSE !((unsigned int )sl->keepalive != 0U) [L6192] EXPR sl->outfill VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-23, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl={0:3103}, sl->outfill=768, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tmp___0=96, tmp___1={4294967319:1}, tmp___2=1, tty={0:0}, tty={0:0}] [L6192] COND FALSE !((unsigned int )sl->outfill != 0U) [L6197] FCALL rtnl_unlock() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, err=-23, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl={0:3103}, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=1, tmp___0=96, tmp___1={4294967319:1}, tmp___2=1, tty={0:0}, tty={0:0}] [L6198] tty->receive_room = 65536U [L6199] EXPR sl->dev [L6199] EXPR (sl->dev)->base_addr [L6199] return ((int )(sl->dev)->base_addr); [L7647] RET, EXPR slip_open(tty) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, slip_open(tty)=30, tty={0:0}, tty={0:0}] [L7647] tmp = slip_open(tty) [L7648] ldv_func_res = tmp VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, ldv_func_res=30, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256, tmp=30, tty={0:0}, tty={0:0}] [L7649] CALL ldv_check_callback_ret_val(ldv_func_res) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(ret_val)=30, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7656] COND FALSE !(ret_val <= 0) VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(ret_val)=30, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, ret_val=30, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L7658] CALL ldv_error() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] [L4787] __VERIFIER_error() VAL [\old(LDV_IN_INTERRUPT)=1, \old(ldv_retval_0)=0, \old(ldv_retval_1)=0, \old(ldv_retval_2)=0, \old(ldv_retval_3)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ldv_state_variable_2)=0, \old(ldv_state_variable_3)=0, \old(ldv_state_variable_4)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_list_1)=0, \old(ldv_timer_state_1)=0, \old(ldv_timer_state_2)=0, \old(ref_cnt)=0, \old(sl_ldisc_group1)=0, \old(sl_ldisc_group1)=0, \old(sl_netdev_ops_group1)=0, \old(sl_netdev_ops_group1)=0, \old(slip_devs)=0, \old(slip_devs)=0, \old(slip_maxdev)=256, __this_module={4294967356:4294967352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_timer_list_1={0:3227}, ldv_timer_list_2={0:0}, ldv_timer_state_1=1, ldv_timer_state_2=0, ref_cnt=0, sl_ldisc={152:0}, sl_ldisc_group1={0:0}, sl_netdev_ops={159:0}, sl_netdev_ops_group1={0:0}, slip_devs={4294967297:0}, slip_maxdev=256] - StatisticsResult: Ultimate Automizer benchmark data CFG has 155 procedures, 1472 locations, 1 error locations. Result: UNSAFE, OverallTime: 23.0s, OverallIterations: 13, TraceHistogramMax: 9, AutomataDifference: 14.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, HoareTripleCheckerStatistics: 22939 SDtfs, 9674 SDslu, 68953 SDs, 0 SdLazy, 6459 SolverSat, 2398 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 10.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 88 GetRequests, 29 SyntacticMatches, 1 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2781occurred in iteration=10, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 62 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 2.1s SatisfiabilityAnalysisTime, 1.7s InterpolantComputationTime, 2442 NumberOfCodeBlocks, 2442 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 2184 ConstructedInterpolants, 0 QuantifiedInterpolants, 617196 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 1742/1742 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces