./Ultimate.py --spec ../../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--arcnet--rfc1201.ko-entry_point_false-unreach-call.cil.out.c --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--arcnet--rfc1201.ko-entry_point_false-unreach-call.cil.out.c -s /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash c8baf6dc591fb50b813986556c788bf1c702adbf ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--arcnet--rfc1201.ko-entry_point_false-unreach-call.cil.out.c -s /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash c8baf6dc591fb50b813986556c788bf1c702adbf ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: UnsupportedOperationException: ConstantTerm is neither BigInter nor BigDecimal, therefore comparison is not possible! --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 12:41:11,436 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 12:41:11,438 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 12:41:11,444 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 12:41:11,444 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 12:41:11,444 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 12:41:11,445 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 12:41:11,446 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 12:41:11,448 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 12:41:11,448 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 12:41:11,449 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 12:41:11,449 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 12:41:11,450 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 12:41:11,450 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 12:41:11,451 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 12:41:11,451 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 12:41:11,451 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 12:41:11,453 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 12:41:11,454 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 12:41:11,455 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 12:41:11,456 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 12:41:11,456 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 12:41:11,458 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 12:41:11,458 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 12:41:11,458 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 12:41:11,459 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 12:41:11,459 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 12:41:11,459 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 12:41:11,460 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 12:41:11,461 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 12:41:11,461 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 12:41:11,461 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 12:41:11,462 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 12:41:11,462 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 12:41:11,462 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 12:41:11,463 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 12:41:11,463 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Default.epf [2018-11-18 12:41:11,470 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 12:41:11,470 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 12:41:11,471 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-18 12:41:11,471 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-18 12:41:11,471 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 12:41:11,471 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 12:41:11,471 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 12:41:11,472 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 12:41:11,472 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 12:41:11,472 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 12:41:11,472 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-18 12:41:11,472 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-18 12:41:11,472 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-18 12:41:11,472 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 12:41:11,472 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 12:41:11,473 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-18 12:41:11,473 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 12:41:11,473 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 12:41:11,473 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-18 12:41:11,473 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-18 12:41:11,473 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 12:41:11,473 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 12:41:11,474 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-18 12:41:11,474 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-18 12:41:11,474 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 12:41:11,474 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-18 12:41:11,474 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-18 12:41:11,474 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-18 12:41:11,474 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c8baf6dc591fb50b813986556c788bf1c702adbf [2018-11-18 12:41:11,498 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 12:41:11,507 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 12:41:11,510 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 12:41:11,511 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 12:41:11,511 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 12:41:11,512 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--arcnet--rfc1201.ko-entry_point_false-unreach-call.cil.out.c [2018-11-18 12:41:11,557 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/data/8e1172252/d8ea8e818e2f42f18cda64da5bb76b35/FLAG7d422bc8a [2018-11-18 12:41:12,115 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 12:41:12,116 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--arcnet--rfc1201.ko-entry_point_false-unreach-call.cil.out.c [2018-11-18 12:41:12,137 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/data/8e1172252/d8ea8e818e2f42f18cda64da5bb76b35/FLAG7d422bc8a [2018-11-18 12:41:12,582 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/data/8e1172252/d8ea8e818e2f42f18cda64da5bb76b35 [2018-11-18 12:41:12,585 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 12:41:12,586 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2018-11-18 12:41:12,586 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 12:41:12,586 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 12:41:12,588 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 12:41:12,589 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 12:41:12" (1/1) ... [2018-11-18 12:41:12,590 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@337fdc4f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:12, skipping insertion in model container [2018-11-18 12:41:12,591 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 12:41:12" (1/1) ... [2018-11-18 12:41:12,597 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 12:41:12,658 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 12:41:13,556 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 12:41:13,583 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 12:41:13,863 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 12:41:13,893 INFO L195 MainTranslator]: Completed translation [2018-11-18 12:41:13,893 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:13 WrapperNode [2018-11-18 12:41:13,893 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 12:41:13,894 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 12:41:13,894 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 12:41:13,894 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 12:41:13,902 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:13" (1/1) ... [2018-11-18 12:41:13,902 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:13" (1/1) ... [2018-11-18 12:41:13,921 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:13" (1/1) ... [2018-11-18 12:41:13,921 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:13" (1/1) ... [2018-11-18 12:41:13,963 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:13" (1/1) ... [2018-11-18 12:41:13,972 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:13" (1/1) ... [2018-11-18 12:41:13,979 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:13" (1/1) ... [2018-11-18 12:41:13,988 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 12:41:13,989 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 12:41:13,989 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 12:41:13,989 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 12:41:13,990 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:13" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 12:41:14,034 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-18 12:41:14,035 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 12:41:14,035 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~X~int~X~$Pointer$~X~int~TO~VOID [2018-11-18 12:41:14,035 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab16 [2018-11-18 12:41:14,035 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reset_mac_header [2018-11-18 12:41:14,035 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2018-11-18 12:41:14,035 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2018-11-18 12:41:14,035 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2018-11-18 12:41:14,035 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ptr [2018-11-18 12:41:14,036 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ulong [2018-11-18 12:41:14,036 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-18 12:41:14,036 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2018-11-18 12:41:14,036 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-18 12:41:14,036 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_trap [2018-11-18 12:41:14,036 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2018-11-18 12:41:14,037 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_irq [2018-11-18 12:41:14,038 INFO L138 BoogieDeclarations]: Found implementation of procedure arcnet_rfc1201_init [2018-11-18 12:41:14,038 INFO L138 BoogieDeclarations]: Found implementation of procedure arcnet_rfc1201_exit [2018-11-18 12:41:14,038 INFO L138 BoogieDeclarations]: Found implementation of procedure type_trans [2018-11-18 12:41:14,038 INFO L138 BoogieDeclarations]: Found implementation of procedure rx [2018-11-18 12:41:14,038 INFO L138 BoogieDeclarations]: Found implementation of procedure build_header [2018-11-18 12:41:14,038 INFO L138 BoogieDeclarations]: Found implementation of procedure load_pkt [2018-11-18 12:41:14,038 INFO L138 BoogieDeclarations]: Found implementation of procedure prepare_tx [2018-11-18 12:41:14,038 INFO L138 BoogieDeclarations]: Found implementation of procedure continue_tx [2018-11-18 12:41:14,038 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize_ArcProto_1 [2018-11-18 12:41:14,038 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-18 12:41:14,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_consume_skb_5 [2018-11-18 12:41:14,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_6 [2018-11-18 12:41:14,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_7 [2018-11-18 12:41:14,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_8 [2018-11-18 12:41:14,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_11 [2018-11-18 12:41:14,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_skb_12 [2018-11-18 12:41:14,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_netif_rx_13 [2018-11-18 12:41:14,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_netif_rx_15 [2018-11-18 12:41:14,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_init [2018-11-18 12:41:14,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_add [2018-11-18 12:41:14,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2018-11-18 12:41:14,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_contains [2018-11-18 12:41:14,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_is_empty [2018-11-18 12:41:14,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-18 12:41:14,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_err_ptr [2018-11-18 12:41:14,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_ptr_err [2018-11-18 12:41:14,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err_or_null [2018-11-18 12:41:14,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2018-11-18 12:41:14,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2018-11-18 12:41:14,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2018-11-18 12:41:14,041 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free_int [2018-11-18 12:41:14,041 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb [2018-11-18 12:41:14,041 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_netdev_alloc_skb [2018-11-18 12:41:14,041 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_current [2018-11-18 12:41:14,041 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-18 12:41:14,041 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2018-11-18 12:41:14,041 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-18 12:41:14,041 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2018-11-18 12:41:14,042 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-18 12:41:14,042 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-18 12:41:14,042 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab16 [2018-11-18 12:41:14,042 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2018-11-18 12:41:14,042 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2018-11-18 12:41:14,042 INFO L130 BoogieDeclarations]: Found specification of procedure memset [2018-11-18 12:41:14,042 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_6 [2018-11-18 12:41:14,042 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_7 [2018-11-18 12:41:14,042 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_8 [2018-11-18 12:41:14,042 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_11 [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_consume_skb_5 [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_skb_12 [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reset_mac_header [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2018-11-18 12:41:14,043 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free_int [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ushort [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ulong [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assume [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2018-11-18 12:41:14,044 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ptr [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ulong [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_trap [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize_ArcProto_1 [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure __dev_kfree_skb_irq [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_irq [2018-11-18 12:41:14,045 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_netif_rx_13 [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_netif_rx_15 [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure arcnet_unregister_proto [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure type_trans [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure rx [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure build_header [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure prepare_tx [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure continue_tx [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure arcnet_rfc1201_init [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure arcnet_rfc1201_exit [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-18 12:41:14,046 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~X~int~X~$Pointer$~X~int~TO~VOID [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure load_pkt [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_init [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_add [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2018-11-18 12:41:14,047 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_contains [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_is_empty [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_err_ptr [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_ptr_err [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err_or_null [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_netdev_alloc_skb [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_current [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-11-18 12:41:14,048 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 12:41:16,150 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 12:41:16,151 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 12:41:16 BoogieIcfgContainer [2018-11-18 12:41:16,151 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 12:41:16,152 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-18 12:41:16,152 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-18 12:41:16,154 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-18 12:41:16,155 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 12:41:12" (1/3) ... [2018-11-18 12:41:16,155 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@db7c950 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 12:41:16, skipping insertion in model container [2018-11-18 12:41:16,155 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:41:13" (2/3) ... [2018-11-18 12:41:16,156 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@db7c950 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 12:41:16, skipping insertion in model container [2018-11-18 12:41:16,156 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 12:41:16" (3/3) ... [2018-11-18 12:41:16,157 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--arcnet--rfc1201.ko-entry_point_false-unreach-call.cil.out.c [2018-11-18 12:41:16,165 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-18 12:41:16,172 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-18 12:41:16,181 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-18 12:41:16,200 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 12:41:16,200 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-18 12:41:16,201 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-18 12:41:16,201 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-18 12:41:16,201 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 12:41:16,201 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 12:41:16,201 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-18 12:41:16,201 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 12:41:16,201 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-18 12:41:16,222 INFO L276 IsEmpty]: Start isEmpty. Operand 367 states. [2018-11-18 12:41:16,229 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-18 12:41:16,230 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:16,230 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:16,232 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:16,237 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:16,237 INFO L82 PathProgramCache]: Analyzing trace with hash 92531241, now seen corresponding path program 1 times [2018-11-18 12:41:16,239 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:16,239 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:16,284 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:16,284 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:16,284 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:16,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:16,524 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:41:16,526 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:41:16,526 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 12:41:16,529 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 12:41:16,536 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 12:41:16,537 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:41:16,538 INFO L87 Difference]: Start difference. First operand 367 states. Second operand 3 states. [2018-11-18 12:41:17,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:17,441 INFO L93 Difference]: Finished difference Result 956 states and 1339 transitions. [2018-11-18 12:41:17,441 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 12:41:17,442 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 46 [2018-11-18 12:41:17,443 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:17,456 INFO L225 Difference]: With dead ends: 956 [2018-11-18 12:41:17,456 INFO L226 Difference]: Without dead ends: 615 [2018-11-18 12:41:17,461 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:41:17,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 615 states. [2018-11-18 12:41:17,533 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 615 to 615. [2018-11-18 12:41:17,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 615 states. [2018-11-18 12:41:17,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 615 states to 615 states and 835 transitions. [2018-11-18 12:41:17,540 INFO L78 Accepts]: Start accepts. Automaton has 615 states and 835 transitions. Word has length 46 [2018-11-18 12:41:17,540 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:17,540 INFO L480 AbstractCegarLoop]: Abstraction has 615 states and 835 transitions. [2018-11-18 12:41:17,540 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 12:41:17,540 INFO L276 IsEmpty]: Start isEmpty. Operand 615 states and 835 transitions. [2018-11-18 12:41:17,543 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-18 12:41:17,543 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:17,543 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:17,543 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:17,543 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:17,543 INFO L82 PathProgramCache]: Analyzing trace with hash -196223212, now seen corresponding path program 1 times [2018-11-18 12:41:17,544 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:17,544 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:17,547 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:17,547 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:17,547 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:17,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:17,730 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:41:17,730 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:41:17,730 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 12:41:17,731 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 12:41:17,731 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 12:41:17,731 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:41:17,731 INFO L87 Difference]: Start difference. First operand 615 states and 835 transitions. Second operand 5 states. [2018-11-18 12:41:17,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:17,791 INFO L93 Difference]: Finished difference Result 1208 states and 1645 transitions. [2018-11-18 12:41:17,791 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 12:41:17,791 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 51 [2018-11-18 12:41:17,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:17,795 INFO L225 Difference]: With dead ends: 1208 [2018-11-18 12:41:17,795 INFO L226 Difference]: Without dead ends: 614 [2018-11-18 12:41:17,797 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-18 12:41:17,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 614 states. [2018-11-18 12:41:17,816 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 614 to 614. [2018-11-18 12:41:17,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 614 states. [2018-11-18 12:41:17,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 831 transitions. [2018-11-18 12:41:17,819 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 831 transitions. Word has length 51 [2018-11-18 12:41:17,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:17,819 INFO L480 AbstractCegarLoop]: Abstraction has 614 states and 831 transitions. [2018-11-18 12:41:17,819 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 12:41:17,819 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 831 transitions. [2018-11-18 12:41:17,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-18 12:41:17,823 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:17,823 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:17,823 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:17,823 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:17,823 INFO L82 PathProgramCache]: Analyzing trace with hash 1683832603, now seen corresponding path program 1 times [2018-11-18 12:41:17,823 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:17,824 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:17,826 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:17,827 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:17,827 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:17,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:17,962 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2018-11-18 12:41:17,962 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 12:41:17,962 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 12:41:17,983 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:18,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:18,092 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:41:18,122 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-18 12:41:18,139 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-18 12:41:18,139 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 9 [2018-11-18 12:41:18,140 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-18 12:41:18,140 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-18 12:41:18,140 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2018-11-18 12:41:18,140 INFO L87 Difference]: Start difference. First operand 614 states and 831 transitions. Second operand 9 states. [2018-11-18 12:41:20,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:20,795 INFO L93 Difference]: Finished difference Result 1809 states and 2486 transitions. [2018-11-18 12:41:20,796 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-18 12:41:20,796 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 78 [2018-11-18 12:41:20,796 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:20,802 INFO L225 Difference]: With dead ends: 1809 [2018-11-18 12:41:20,803 INFO L226 Difference]: Without dead ends: 1200 [2018-11-18 12:41:20,805 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 78 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=38, Invalid=144, Unknown=0, NotChecked=0, Total=182 [2018-11-18 12:41:20,806 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1200 states. [2018-11-18 12:41:20,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1200 to 1200. [2018-11-18 12:41:20,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1200 states. [2018-11-18 12:41:20,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1200 states to 1200 states and 1648 transitions. [2018-11-18 12:41:20,850 INFO L78 Accepts]: Start accepts. Automaton has 1200 states and 1648 transitions. Word has length 78 [2018-11-18 12:41:20,850 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:20,850 INFO L480 AbstractCegarLoop]: Abstraction has 1200 states and 1648 transitions. [2018-11-18 12:41:20,850 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-18 12:41:20,851 INFO L276 IsEmpty]: Start isEmpty. Operand 1200 states and 1648 transitions. [2018-11-18 12:41:20,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2018-11-18 12:41:20,856 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:20,856 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:20,856 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:20,856 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:20,857 INFO L82 PathProgramCache]: Analyzing trace with hash 2055677521, now seen corresponding path program 1 times [2018-11-18 12:41:20,857 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:20,857 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:20,859 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:20,859 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:20,859 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:20,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:21,005 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2018-11-18 12:41:21,006 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:41:21,006 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 12:41:21,006 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 12:41:21,006 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 12:41:21,006 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:41:21,007 INFO L87 Difference]: Start difference. First operand 1200 states and 1648 transitions. Second operand 5 states. [2018-11-18 12:41:21,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:21,055 INFO L93 Difference]: Finished difference Result 2402 states and 3329 transitions. [2018-11-18 12:41:21,056 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 12:41:21,056 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 138 [2018-11-18 12:41:21,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:21,062 INFO L225 Difference]: With dead ends: 2402 [2018-11-18 12:41:21,062 INFO L226 Difference]: Without dead ends: 1224 [2018-11-18 12:41:21,065 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:41:21,066 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1224 states. [2018-11-18 12:41:21,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1224 to 1220. [2018-11-18 12:41:21,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1220 states. [2018-11-18 12:41:21,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1220 states to 1220 states and 1673 transitions. [2018-11-18 12:41:21,148 INFO L78 Accepts]: Start accepts. Automaton has 1220 states and 1673 transitions. Word has length 138 [2018-11-18 12:41:21,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:21,148 INFO L480 AbstractCegarLoop]: Abstraction has 1220 states and 1673 transitions. [2018-11-18 12:41:21,148 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 12:41:21,148 INFO L276 IsEmpty]: Start isEmpty. Operand 1220 states and 1673 transitions. [2018-11-18 12:41:21,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2018-11-18 12:41:21,152 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:21,153 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:21,153 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:21,154 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:21,154 INFO L82 PathProgramCache]: Analyzing trace with hash 1648272286, now seen corresponding path program 1 times [2018-11-18 12:41:21,154 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:21,154 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:21,155 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:21,156 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:21,156 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:21,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:21,512 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2018-11-18 12:41:21,512 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:41:21,512 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-18 12:41:21,512 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-18 12:41:21,512 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-18 12:41:21,512 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-18 12:41:21,513 INFO L87 Difference]: Start difference. First operand 1220 states and 1673 transitions. Second operand 11 states. [2018-11-18 12:41:21,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:21,797 INFO L93 Difference]: Finished difference Result 2534 states and 3519 transitions. [2018-11-18 12:41:21,797 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-18 12:41:21,797 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 138 [2018-11-18 12:41:21,798 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:21,801 INFO L225 Difference]: With dead ends: 2534 [2018-11-18 12:41:21,801 INFO L226 Difference]: Without dead ends: 1336 [2018-11-18 12:41:21,803 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-18 12:41:21,804 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1336 states. [2018-11-18 12:41:21,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1336 to 1244. [2018-11-18 12:41:21,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1244 states. [2018-11-18 12:41:21,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1244 states to 1244 states and 1697 transitions. [2018-11-18 12:41:21,833 INFO L78 Accepts]: Start accepts. Automaton has 1244 states and 1697 transitions. Word has length 138 [2018-11-18 12:41:21,833 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:21,834 INFO L480 AbstractCegarLoop]: Abstraction has 1244 states and 1697 transitions. [2018-11-18 12:41:21,834 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-18 12:41:21,834 INFO L276 IsEmpty]: Start isEmpty. Operand 1244 states and 1697 transitions. [2018-11-18 12:41:21,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2018-11-18 12:41:21,836 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:21,836 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:21,837 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:21,837 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:21,837 INFO L82 PathProgramCache]: Analyzing trace with hash -30874276, now seen corresponding path program 1 times [2018-11-18 12:41:21,837 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:21,837 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:21,839 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:21,839 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:21,839 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:21,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:22,007 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:22,007 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:41:22,007 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 12:41:22,008 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 12:41:22,008 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 12:41:22,008 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:41:22,008 INFO L87 Difference]: Start difference. First operand 1244 states and 1697 transitions. Second operand 5 states. [2018-11-18 12:41:23,861 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:23,861 INFO L93 Difference]: Finished difference Result 2590 states and 3577 transitions. [2018-11-18 12:41:23,861 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 12:41:23,862 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 143 [2018-11-18 12:41:23,862 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:23,867 INFO L225 Difference]: With dead ends: 2590 [2018-11-18 12:41:23,867 INFO L226 Difference]: Without dead ends: 1368 [2018-11-18 12:41:23,870 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2018-11-18 12:41:23,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1368 states. [2018-11-18 12:41:23,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1368 to 1304. [2018-11-18 12:41:23,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1304 states. [2018-11-18 12:41:23,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1304 states to 1304 states and 1789 transitions. [2018-11-18 12:41:23,915 INFO L78 Accepts]: Start accepts. Automaton has 1304 states and 1789 transitions. Word has length 143 [2018-11-18 12:41:23,915 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:23,915 INFO L480 AbstractCegarLoop]: Abstraction has 1304 states and 1789 transitions. [2018-11-18 12:41:23,915 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 12:41:23,915 INFO L276 IsEmpty]: Start isEmpty. Operand 1304 states and 1789 transitions. [2018-11-18 12:41:23,919 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2018-11-18 12:41:23,919 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:23,919 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:23,919 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:23,919 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:23,919 INFO L82 PathProgramCache]: Analyzing trace with hash -1717054114, now seen corresponding path program 1 times [2018-11-18 12:41:23,920 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:23,920 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:23,923 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:23,923 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:23,923 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:23,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:24,352 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2018-11-18 12:41:24,352 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:41:24,352 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2018-11-18 12:41:24,353 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-18 12:41:24,353 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-18 12:41:24,353 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=91, Unknown=0, NotChecked=0, Total=110 [2018-11-18 12:41:24,353 INFO L87 Difference]: Start difference. First operand 1304 states and 1789 transitions. Second operand 11 states. [2018-11-18 12:41:24,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:24,694 INFO L93 Difference]: Finished difference Result 2622 states and 3611 transitions. [2018-11-18 12:41:24,694 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-18 12:41:24,694 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 143 [2018-11-18 12:41:24,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:24,701 INFO L225 Difference]: With dead ends: 2622 [2018-11-18 12:41:24,701 INFO L226 Difference]: Without dead ends: 1340 [2018-11-18 12:41:24,704 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2018-11-18 12:41:24,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1340 states. [2018-11-18 12:41:24,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1340 to 1312. [2018-11-18 12:41:24,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1312 states. [2018-11-18 12:41:24,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1312 states to 1312 states and 1797 transitions. [2018-11-18 12:41:24,754 INFO L78 Accepts]: Start accepts. Automaton has 1312 states and 1797 transitions. Word has length 143 [2018-11-18 12:41:24,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:24,755 INFO L480 AbstractCegarLoop]: Abstraction has 1312 states and 1797 transitions. [2018-11-18 12:41:24,755 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-18 12:41:24,755 INFO L276 IsEmpty]: Start isEmpty. Operand 1312 states and 1797 transitions. [2018-11-18 12:41:24,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2018-11-18 12:41:24,759 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:24,760 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:24,760 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:24,760 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:24,760 INFO L82 PathProgramCache]: Analyzing trace with hash 1509755122, now seen corresponding path program 1 times [2018-11-18 12:41:24,760 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:24,760 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:24,762 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:24,763 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:24,763 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:24,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:24,923 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:24,923 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:41:24,923 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 12:41:24,923 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 12:41:24,923 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 12:41:24,924 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:41:24,924 INFO L87 Difference]: Start difference. First operand 1312 states and 1797 transitions. Second operand 3 states. [2018-11-18 12:41:24,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:24,944 INFO L93 Difference]: Finished difference Result 2634 states and 3623 transitions. [2018-11-18 12:41:24,945 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 12:41:24,945 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 156 [2018-11-18 12:41:24,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:24,948 INFO L225 Difference]: With dead ends: 2634 [2018-11-18 12:41:24,948 INFO L226 Difference]: Without dead ends: 1344 [2018-11-18 12:41:24,950 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:41:24,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1344 states. [2018-11-18 12:41:24,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1344 to 1304. [2018-11-18 12:41:24,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1304 states. [2018-11-18 12:41:24,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1304 states to 1304 states and 1781 transitions. [2018-11-18 12:41:24,978 INFO L78 Accepts]: Start accepts. Automaton has 1304 states and 1781 transitions. Word has length 156 [2018-11-18 12:41:24,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:24,979 INFO L480 AbstractCegarLoop]: Abstraction has 1304 states and 1781 transitions. [2018-11-18 12:41:24,979 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 12:41:24,979 INFO L276 IsEmpty]: Start isEmpty. Operand 1304 states and 1781 transitions. [2018-11-18 12:41:24,982 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2018-11-18 12:41:24,982 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:24,982 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:24,982 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:24,982 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:24,982 INFO L82 PathProgramCache]: Analyzing trace with hash -1304127626, now seen corresponding path program 1 times [2018-11-18 12:41:24,982 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:24,982 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:24,984 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:24,984 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:24,984 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:25,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:25,153 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:25,153 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:41:25,153 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 12:41:25,153 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-18 12:41:25,154 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 12:41:25,154 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2018-11-18 12:41:25,154 INFO L87 Difference]: Start difference. First operand 1304 states and 1781 transitions. Second operand 6 states. [2018-11-18 12:41:25,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:25,205 INFO L93 Difference]: Finished difference Result 2638 states and 3627 transitions. [2018-11-18 12:41:25,205 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 12:41:25,205 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 156 [2018-11-18 12:41:25,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:25,209 INFO L225 Difference]: With dead ends: 2638 [2018-11-18 12:41:25,209 INFO L226 Difference]: Without dead ends: 1356 [2018-11-18 12:41:25,211 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2018-11-18 12:41:25,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1356 states. [2018-11-18 12:41:25,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1356 to 1316. [2018-11-18 12:41:25,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1316 states. [2018-11-18 12:41:25,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1316 states to 1316 states and 1801 transitions. [2018-11-18 12:41:25,238 INFO L78 Accepts]: Start accepts. Automaton has 1316 states and 1801 transitions. Word has length 156 [2018-11-18 12:41:25,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:25,239 INFO L480 AbstractCegarLoop]: Abstraction has 1316 states and 1801 transitions. [2018-11-18 12:41:25,239 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-18 12:41:25,239 INFO L276 IsEmpty]: Start isEmpty. Operand 1316 states and 1801 transitions. [2018-11-18 12:41:25,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2018-11-18 12:41:25,242 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:25,242 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:25,242 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:25,242 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:25,242 INFO L82 PathProgramCache]: Analyzing trace with hash 1222445150, now seen corresponding path program 1 times [2018-11-18 12:41:25,242 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:25,242 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:25,244 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:25,244 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:25,244 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:25,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:25,498 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:25,499 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 12:41:25,499 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 12:41:25,515 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:25,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:26,006 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:41:26,067 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:26,095 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:41:26,095 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6] total 8 [2018-11-18 12:41:26,095 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-11-18 12:41:26,096 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 12:41:26,096 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2018-11-18 12:41:26,096 INFO L87 Difference]: Start difference. First operand 1316 states and 1801 transitions. Second operand 8 states. [2018-11-18 12:41:26,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:26,225 INFO L93 Difference]: Finished difference Result 2662 states and 3667 transitions. [2018-11-18 12:41:26,225 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-18 12:41:26,225 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 157 [2018-11-18 12:41:26,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:26,228 INFO L225 Difference]: With dead ends: 2662 [2018-11-18 12:41:26,229 INFO L226 Difference]: Without dead ends: 1368 [2018-11-18 12:41:26,230 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 154 SyntacticMatches, 3 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2018-11-18 12:41:26,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1368 states. [2018-11-18 12:41:26,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1368 to 1320. [2018-11-18 12:41:26,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1320 states. [2018-11-18 12:41:26,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1320 states to 1320 states and 1809 transitions. [2018-11-18 12:41:26,256 INFO L78 Accepts]: Start accepts. Automaton has 1320 states and 1809 transitions. Word has length 157 [2018-11-18 12:41:26,257 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:26,257 INFO L480 AbstractCegarLoop]: Abstraction has 1320 states and 1809 transitions. [2018-11-18 12:41:26,257 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-11-18 12:41:26,257 INFO L276 IsEmpty]: Start isEmpty. Operand 1320 states and 1809 transitions. [2018-11-18 12:41:26,259 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2018-11-18 12:41:26,259 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:26,259 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:26,260 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:26,260 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:26,260 INFO L82 PathProgramCache]: Analyzing trace with hash -2058177418, now seen corresponding path program 2 times [2018-11-18 12:41:26,260 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:26,260 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:26,262 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:26,262 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:26,262 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:26,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:26,509 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 7 proven. 3 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:26,509 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 12:41:26,509 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 12:41:26,518 INFO L103 rtionOrderModulation]: Keeping assertion order OUTSIDE_LOOP_FIRST1 [2018-11-18 12:41:34,026 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2018-11-18 12:41:34,026 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 12:41:34,037 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:41:34,096 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 7 proven. 3 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:34,124 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:41:34,124 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7] total 13 [2018-11-18 12:41:34,124 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-18 12:41:34,125 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-18 12:41:34,125 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2018-11-18 12:41:34,125 INFO L87 Difference]: Start difference. First operand 1320 states and 1809 transitions. Second operand 13 states. [2018-11-18 12:41:34,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:34,253 INFO L93 Difference]: Finished difference Result 2678 states and 3695 transitions. [2018-11-18 12:41:34,253 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 12:41:34,253 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 158 [2018-11-18 12:41:34,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:34,258 INFO L225 Difference]: With dead ends: 2678 [2018-11-18 12:41:34,259 INFO L226 Difference]: Without dead ends: 1380 [2018-11-18 12:41:34,262 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 168 GetRequests, 153 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=185, Unknown=0, NotChecked=0, Total=240 [2018-11-18 12:41:34,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1380 states. [2018-11-18 12:41:34,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1380 to 1324. [2018-11-18 12:41:34,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1324 states. [2018-11-18 12:41:34,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1324 states to 1324 states and 1817 transitions. [2018-11-18 12:41:34,307 INFO L78 Accepts]: Start accepts. Automaton has 1324 states and 1817 transitions. Word has length 158 [2018-11-18 12:41:34,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:34,307 INFO L480 AbstractCegarLoop]: Abstraction has 1324 states and 1817 transitions. [2018-11-18 12:41:34,307 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-18 12:41:34,307 INFO L276 IsEmpty]: Start isEmpty. Operand 1324 states and 1817 transitions. [2018-11-18 12:41:34,313 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 160 [2018-11-18 12:41:34,313 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:34,313 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:34,313 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:34,313 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:34,314 INFO L82 PathProgramCache]: Analyzing trace with hash -678261922, now seen corresponding path program 3 times [2018-11-18 12:41:34,314 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:34,314 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:34,316 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:34,316 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:41:34,316 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:34,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:34,718 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:34,718 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 12:41:34,719 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 12:41:34,735 INFO L103 rtionOrderModulation]: Keeping assertion order OUTSIDE_LOOP_FIRST2 [2018-11-18 12:41:54,173 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2018-11-18 12:41:54,173 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 12:41:54,184 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:41:54,269 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:54,289 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:41:54,289 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8] total 15 [2018-11-18 12:41:54,290 INFO L459 AbstractCegarLoop]: Interpolant automaton has 15 states [2018-11-18 12:41:54,290 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-11-18 12:41:54,290 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2018-11-18 12:41:54,290 INFO L87 Difference]: Start difference. First operand 1324 states and 1817 transitions. Second operand 15 states. [2018-11-18 12:41:54,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:54,426 INFO L93 Difference]: Finished difference Result 2694 states and 3723 transitions. [2018-11-18 12:41:54,427 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-18 12:41:54,427 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 159 [2018-11-18 12:41:54,427 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:54,430 INFO L225 Difference]: With dead ends: 2694 [2018-11-18 12:41:54,431 INFO L226 Difference]: Without dead ends: 1392 [2018-11-18 12:41:54,433 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 153 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=74, Invalid=268, Unknown=0, NotChecked=0, Total=342 [2018-11-18 12:41:54,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1392 states. [2018-11-18 12:41:54,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1392 to 1328. [2018-11-18 12:41:54,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1328 states. [2018-11-18 12:41:54,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1328 states to 1328 states and 1825 transitions. [2018-11-18 12:41:54,460 INFO L78 Accepts]: Start accepts. Automaton has 1328 states and 1825 transitions. Word has length 159 [2018-11-18 12:41:54,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:54,460 INFO L480 AbstractCegarLoop]: Abstraction has 1328 states and 1825 transitions. [2018-11-18 12:41:54,460 INFO L481 AbstractCegarLoop]: Interpolant automaton has 15 states. [2018-11-18 12:41:54,461 INFO L276 IsEmpty]: Start isEmpty. Operand 1328 states and 1825 transitions. [2018-11-18 12:41:54,464 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2018-11-18 12:41:54,464 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:54,464 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:54,464 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:54,464 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:54,464 INFO L82 PathProgramCache]: Analyzing trace with hash 141252003, now seen corresponding path program 1 times [2018-11-18 12:41:54,464 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:54,465 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:54,466 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:54,466 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:41:54,466 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:54,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:54,542 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-18 12:41:54,542 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:41:54,542 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 12:41:54,543 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 12:41:54,543 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 12:41:54,543 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:41:54,543 INFO L87 Difference]: Start difference. First operand 1328 states and 1825 transitions. Second operand 3 states. [2018-11-18 12:41:54,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:54,567 INFO L93 Difference]: Finished difference Result 2033 states and 2809 transitions. [2018-11-18 12:41:54,567 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 12:41:54,567 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 151 [2018-11-18 12:41:54,568 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:54,571 INFO L225 Difference]: With dead ends: 2033 [2018-11-18 12:41:54,571 INFO L226 Difference]: Without dead ends: 1336 [2018-11-18 12:41:54,573 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:41:54,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1336 states. [2018-11-18 12:41:54,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1336 to 1332. [2018-11-18 12:41:54,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1332 states. [2018-11-18 12:41:54,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1332 states to 1332 states and 1829 transitions. [2018-11-18 12:41:54,597 INFO L78 Accepts]: Start accepts. Automaton has 1332 states and 1829 transitions. Word has length 151 [2018-11-18 12:41:54,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:54,597 INFO L480 AbstractCegarLoop]: Abstraction has 1332 states and 1829 transitions. [2018-11-18 12:41:54,597 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 12:41:54,598 INFO L276 IsEmpty]: Start isEmpty. Operand 1332 states and 1829 transitions. [2018-11-18 12:41:54,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 161 [2018-11-18 12:41:54,600 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:54,600 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:54,601 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:54,601 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:54,601 INFO L82 PathProgramCache]: Analyzing trace with hash -850554506, now seen corresponding path program 4 times [2018-11-18 12:41:54,601 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:54,601 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:54,603 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:54,603 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:41:54,603 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:54,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:54,825 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 7 proven. 10 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:54,825 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 12:41:54,826 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 12:41:54,836 INFO L103 rtionOrderModulation]: Keeping assertion order TERMS_WITH_SMALL_CONSTANTS_FIRST [2018-11-18 12:41:55,043 INFO L249 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2018-11-18 12:41:55,043 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 12:41:55,051 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:41:55,138 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 7 proven. 10 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:55,155 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:41:55,155 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9] total 16 [2018-11-18 12:41:55,156 INFO L459 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-11-18 12:41:55,156 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-11-18 12:41:55,156 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=200, Unknown=0, NotChecked=0, Total=240 [2018-11-18 12:41:55,156 INFO L87 Difference]: Start difference. First operand 1332 states and 1829 transitions. Second operand 16 states. [2018-11-18 12:41:55,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:55,354 INFO L93 Difference]: Finished difference Result 2718 states and 3759 transitions. [2018-11-18 12:41:55,355 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-18 12:41:55,355 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 160 [2018-11-18 12:41:55,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:55,359 INFO L225 Difference]: With dead ends: 2718 [2018-11-18 12:41:55,360 INFO L226 Difference]: Without dead ends: 1408 [2018-11-18 12:41:55,362 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 153 SyntacticMatches, 2 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 53 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=88, Invalid=418, Unknown=0, NotChecked=0, Total=506 [2018-11-18 12:41:55,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1408 states. [2018-11-18 12:41:55,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1408 to 1336. [2018-11-18 12:41:55,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1336 states. [2018-11-18 12:41:55,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1336 states to 1336 states and 1837 transitions. [2018-11-18 12:41:55,432 INFO L78 Accepts]: Start accepts. Automaton has 1336 states and 1837 transitions. Word has length 160 [2018-11-18 12:41:55,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:55,433 INFO L480 AbstractCegarLoop]: Abstraction has 1336 states and 1837 transitions. [2018-11-18 12:41:55,433 INFO L481 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-11-18 12:41:55,433 INFO L276 IsEmpty]: Start isEmpty. Operand 1336 states and 1837 transitions. [2018-11-18 12:41:55,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2018-11-18 12:41:55,437 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:55,437 INFO L375 BasicCegarLoop]: trace histogram [5, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:55,437 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:55,437 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:55,437 INFO L82 PathProgramCache]: Analyzing trace with hash -1896657314, now seen corresponding path program 5 times [2018-11-18 12:41:55,437 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:55,437 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:55,439 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:55,439 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:41:55,439 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:55,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:55,787 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 7 proven. 15 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:55,787 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 12:41:55,787 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 12:41:55,803 INFO L103 rtionOrderModulation]: Keeping assertion order INSIDE_LOOP_FIRST1 [2018-11-18 12:41:57,445 INFO L249 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 5 check-sat command(s) [2018-11-18 12:41:57,446 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 12:41:57,454 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:41:57,530 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 7 proven. 15 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:41:57,549 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:41:57,549 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10] total 16 [2018-11-18 12:41:57,550 INFO L459 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-11-18 12:41:57,550 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-11-18 12:41:57,550 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=203, Unknown=0, NotChecked=0, Total=240 [2018-11-18 12:41:57,550 INFO L87 Difference]: Start difference. First operand 1336 states and 1837 transitions. Second operand 16 states. [2018-11-18 12:41:57,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:41:57,742 INFO L93 Difference]: Finished difference Result 2734 states and 3787 transitions. [2018-11-18 12:41:57,743 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-18 12:41:57,743 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 161 [2018-11-18 12:41:57,744 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:41:57,749 INFO L225 Difference]: With dead ends: 2734 [2018-11-18 12:41:57,749 INFO L226 Difference]: Without dead ends: 1420 [2018-11-18 12:41:57,752 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 154 SyntacticMatches, 3 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=69, Invalid=351, Unknown=0, NotChecked=0, Total=420 [2018-11-18 12:41:57,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1420 states. [2018-11-18 12:41:57,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1420 to 1340. [2018-11-18 12:41:57,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1340 states. [2018-11-18 12:41:57,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1340 states to 1340 states and 1845 transitions. [2018-11-18 12:41:57,793 INFO L78 Accepts]: Start accepts. Automaton has 1340 states and 1845 transitions. Word has length 161 [2018-11-18 12:41:57,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:41:57,794 INFO L480 AbstractCegarLoop]: Abstraction has 1340 states and 1845 transitions. [2018-11-18 12:41:57,794 INFO L481 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-11-18 12:41:57,794 INFO L276 IsEmpty]: Start isEmpty. Operand 1340 states and 1845 transitions. [2018-11-18 12:41:57,798 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 154 [2018-11-18 12:41:57,798 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:41:57,798 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:41:57,798 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:41:57,798 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:41:57,798 INFO L82 PathProgramCache]: Analyzing trace with hash 1048600324, now seen corresponding path program 1 times [2018-11-18 12:41:57,799 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:41:57,799 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:41:57,800 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:57,800 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:41:57,800 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:41:57,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:41:58,019 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-18 12:41:58,019 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:41:58,019 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2018-11-18 12:41:58,019 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-18 12:41:58,019 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-18 12:41:58,019 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=46, Unknown=0, NotChecked=0, Total=72 [2018-11-18 12:41:58,020 INFO L87 Difference]: Start difference. First operand 1340 states and 1845 transitions. Second operand 9 states. [2018-11-18 12:42:00,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:42:00,984 INFO L93 Difference]: Finished difference Result 2990 states and 4153 transitions. [2018-11-18 12:42:00,984 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-18 12:42:00,984 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 153 [2018-11-18 12:42:00,985 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:42:00,988 INFO L225 Difference]: With dead ends: 2990 [2018-11-18 12:42:00,988 INFO L226 Difference]: Without dead ends: 1672 [2018-11-18 12:42:00,990 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2018-11-18 12:42:00,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1672 states. [2018-11-18 12:42:01,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1672 to 1520. [2018-11-18 12:42:01,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1520 states. [2018-11-18 12:42:01,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1520 states to 1520 states and 2089 transitions. [2018-11-18 12:42:01,023 INFO L78 Accepts]: Start accepts. Automaton has 1520 states and 2089 transitions. Word has length 153 [2018-11-18 12:42:01,023 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:42:01,023 INFO L480 AbstractCegarLoop]: Abstraction has 1520 states and 2089 transitions. [2018-11-18 12:42:01,023 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-18 12:42:01,023 INFO L276 IsEmpty]: Start isEmpty. Operand 1520 states and 2089 transitions. [2018-11-18 12:42:01,026 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 163 [2018-11-18 12:42:01,026 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:42:01,026 INFO L375 BasicCegarLoop]: trace histogram [6, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:42:01,026 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:42:01,026 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:42:01,026 INFO L82 PathProgramCache]: Analyzing trace with hash 33894006, now seen corresponding path program 6 times [2018-11-18 12:42:01,027 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:42:01,027 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:42:01,028 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:42:01,028 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:42:01,028 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:42:01,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:42:01,390 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 7 proven. 21 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:42:01,390 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 12:42:01,390 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 12:42:01,404 INFO L103 rtionOrderModulation]: Keeping assertion order MIX_INSIDE_OUTSIDE [2018-11-18 12:42:40,106 INFO L249 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 5 check-sat command(s) [2018-11-18 12:42:40,106 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 12:42:40,123 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:42:40,233 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 7 proven. 21 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:42:40,256 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:42:40,256 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 11] total 21 [2018-11-18 12:42:40,257 INFO L459 AbstractCegarLoop]: Interpolant automaton has 21 states [2018-11-18 12:42:40,257 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2018-11-18 12:42:40,257 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=328, Unknown=0, NotChecked=0, Total=420 [2018-11-18 12:42:40,257 INFO L87 Difference]: Start difference. First operand 1520 states and 2089 transitions. Second operand 21 states. [2018-11-18 12:42:40,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:42:40,629 INFO L93 Difference]: Finished difference Result 3140 states and 4375 transitions. [2018-11-18 12:42:40,629 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-18 12:42:40,629 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 162 [2018-11-18 12:42:40,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:42:40,633 INFO L225 Difference]: With dead ends: 3140 [2018-11-18 12:42:40,633 INFO L226 Difference]: Without dead ends: 1642 [2018-11-18 12:42:40,636 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 180 GetRequests, 153 SyntacticMatches, 1 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 66 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=149, Invalid=607, Unknown=0, NotChecked=0, Total=756 [2018-11-18 12:42:40,637 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1642 states. [2018-11-18 12:42:40,666 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1642 to 1526. [2018-11-18 12:42:40,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1526 states. [2018-11-18 12:42:40,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1526 states to 1526 states and 2101 transitions. [2018-11-18 12:42:40,669 INFO L78 Accepts]: Start accepts. Automaton has 1526 states and 2101 transitions. Word has length 162 [2018-11-18 12:42:40,669 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:42:40,669 INFO L480 AbstractCegarLoop]: Abstraction has 1526 states and 2101 transitions. [2018-11-18 12:42:40,669 INFO L481 AbstractCegarLoop]: Interpolant automaton has 21 states. [2018-11-18 12:42:40,669 INFO L276 IsEmpty]: Start isEmpty. Operand 1526 states and 2101 transitions. [2018-11-18 12:42:40,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2018-11-18 12:42:40,672 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:42:40,672 INFO L375 BasicCegarLoop]: trace histogram [7, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:42:40,672 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:42:40,673 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:42:40,673 INFO L82 PathProgramCache]: Analyzing trace with hash -248557218, now seen corresponding path program 7 times [2018-11-18 12:42:40,673 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:42:40,673 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:42:40,674 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:42:40,675 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:42:40,675 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:42:40,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:42:40,958 INFO L134 CoverageAnalysis]: Checked inductivity of 62 backedges. 7 proven. 28 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:42:40,959 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-18 12:42:40,959 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-18 12:42:40,972 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:42:41,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:42:41,163 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:42:41,337 INFO L134 CoverageAnalysis]: Checked inductivity of 62 backedges. 7 proven. 28 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:42:41,354 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:42:41,354 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12] total 14 [2018-11-18 12:42:41,355 INFO L459 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-11-18 12:42:41,355 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-11-18 12:42:41,355 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=154, Unknown=0, NotChecked=0, Total=182 [2018-11-18 12:42:41,355 INFO L87 Difference]: Start difference. First operand 1526 states and 2101 transitions. Second operand 14 states. [2018-11-18 12:42:41,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:42:41,536 INFO L93 Difference]: Finished difference Result 3164 states and 4421 transitions. [2018-11-18 12:42:41,540 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-18 12:42:41,540 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 163 [2018-11-18 12:42:41,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:42:41,544 INFO L225 Difference]: With dead ends: 3164 [2018-11-18 12:42:41,544 INFO L226 Difference]: Without dead ends: 1660 [2018-11-18 12:42:41,546 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 159 SyntacticMatches, 4 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=32, Invalid=178, Unknown=0, NotChecked=0, Total=210 [2018-11-18 12:42:41,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1660 states. [2018-11-18 12:42:41,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1660 to 1532. [2018-11-18 12:42:41,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1532 states. [2018-11-18 12:42:41,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1532 states to 1532 states and 2113 transitions. [2018-11-18 12:42:41,581 INFO L78 Accepts]: Start accepts. Automaton has 1532 states and 2113 transitions. Word has length 163 [2018-11-18 12:42:41,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:42:41,581 INFO L480 AbstractCegarLoop]: Abstraction has 1532 states and 2113 transitions. [2018-11-18 12:42:41,581 INFO L481 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-11-18 12:42:41,581 INFO L276 IsEmpty]: Start isEmpty. Operand 1532 states and 2113 transitions. [2018-11-18 12:42:41,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 165 [2018-11-18 12:42:41,584 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:42:41,584 INFO L375 BasicCegarLoop]: trace histogram [8, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:42:41,584 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:42:41,584 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:42:41,584 INFO L82 PathProgramCache]: Analyzing trace with hash -414610570, now seen corresponding path program 8 times [2018-11-18 12:42:41,584 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 12:42:41,584 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 12:42:41,586 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:42:41,586 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:42:41,586 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 12:42:42,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 12:42:42,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 12:42:42,934 INFO L442 BasicCegarLoop]: Counterexample might be feasible [2018-11-18 12:42:42,966 WARN L387 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2018-11-18 12:42:42,985 WARN L387 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == dest.base && #res.offset == dest.offset; is not ensure(true) [2018-11-18 12:42:42,999 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 7006 could not be translated for associated CType ARRAY#_15_~~Element~0# [2018-11-18 12:42:42,999 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 6920 could not be translated for associated CType STRUCT~~ArcProto?suffix~CHAR?mtu~INT?is_ip~INT?rx~*((*net_device INT *archdr INT ) : VOID)?build_header~*((*sk_buff *net_device USHORT ~uint8_t~0 ) : INT)?prepare_tx~*((*net_device *archdr INT INT ) : INT)?continue_tx~*((*net_device INT ) : INT)?ack_tx~*((*net_device INT ) : INT)# [2018-11-18 12:42:43,000 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 6901 could not be translated for associated CType STRUCT~~ArcProto?suffix~CHAR?mtu~INT?is_ip~INT?rx~*((*net_device INT *archdr INT ) : VOID)?build_header~*((*sk_buff *net_device USHORT ~uint8_t~0 ) : INT)?prepare_tx~*((*net_device *archdr INT INT ) : INT)?continue_tx~*((*net_device INT ) : INT)?ack_tx~*((*net_device INT ) : INT)# [2018-11-18 12:42:43,001 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 6890 could not be translated for associated CType ARRAY#_15_~~Element~0# [2018-11-18 12:42:43,015 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,017 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,017 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,018 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,018 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,023 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,023 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,076 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,076 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,082 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,082 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,083 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,083 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,084 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,084 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,085 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,085 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,085 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,086 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,086 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,086 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,108 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,108 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,109 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,110 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,110 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,110 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,111 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,111 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,111 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,112 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,112 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,112 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,113 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,113 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,113 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,115 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,115 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,115 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,116 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,117 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,117 WARN L1239 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2018-11-18 12:42:43,150 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 12:42:43 BoogieIcfgContainer [2018-11-18 12:42:43,150 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-18 12:42:43,150 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 12:42:43,151 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 12:42:43,151 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 12:42:43,151 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 12:41:16" (3/4) ... [2018-11-18 12:42:43,154 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-18 12:42:43,154 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 12:42:43,155 INFO L168 Benchmark]: Toolchain (without parser) took 90569.48 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 619.2 MB). Free memory was 950.0 MB in the beginning and 1.5 GB in the end (delta: -552.8 MB). Peak memory consumption was 66.4 MB. Max. memory is 11.5 GB. [2018-11-18 12:42:43,156 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 12:42:43,156 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1307.71 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 202.4 MB). Free memory was 950.0 MB in the beginning and 1.1 GB in the end (delta: -173.0 MB). Peak memory consumption was 242.6 MB. Max. memory is 11.5 GB. [2018-11-18 12:42:43,156 INFO L168 Benchmark]: Boogie Preprocessor took 94.48 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 11.5 MB). Peak memory consumption was 11.5 MB. Max. memory is 11.5 GB. [2018-11-18 12:42:43,157 INFO L168 Benchmark]: RCFGBuilder took 2162.55 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 920.4 MB in the end (delta: 191.2 MB). Peak memory consumption was 191.2 MB. Max. memory is 11.5 GB. [2018-11-18 12:42:43,157 INFO L168 Benchmark]: TraceAbstraction took 86998.39 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 416.8 MB). Free memory was 920.4 MB in the beginning and 1.5 GB in the end (delta: -582.4 MB). Peak memory consumption was 404.3 MB. Max. memory is 11.5 GB. [2018-11-18 12:42:43,157 INFO L168 Benchmark]: Witness Printer took 3.59 ms. Allocated memory is still 1.6 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 12:42:43,160 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 985.5 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1307.71 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 202.4 MB). Free memory was 950.0 MB in the beginning and 1.1 GB in the end (delta: -173.0 MB). Peak memory consumption was 242.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 94.48 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 11.5 MB). Peak memory consumption was 11.5 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2162.55 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 920.4 MB in the end (delta: 191.2 MB). Peak memory consumption was 191.2 MB. Max. memory is 11.5 GB. * TraceAbstraction took 86998.39 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 416.8 MB). Free memory was 920.4 MB in the beginning and 1.5 GB in the end (delta: -582.4 MB). Peak memory consumption was 404.3 MB. Max. memory is 11.5 GB. * Witness Printer took 3.59 ms. Allocated memory is still 1.6 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == dest.base && #res.offset == dest.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 7006 could not be translated for associated CType ARRAY#_15_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 6920 could not be translated for associated CType STRUCT~~ArcProto?suffix~CHAR?mtu~INT?is_ip~INT?rx~*((*net_device INT *archdr INT ) : VOID)?build_header~*((*sk_buff *net_device USHORT ~uint8_t~0 ) : INT)?prepare_tx~*((*net_device *archdr INT INT ) : INT)?continue_tx~*((*net_device INT ) : INT)?ack_tx~*((*net_device INT ) : INT)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 6901 could not be translated for associated CType STRUCT~~ArcProto?suffix~CHAR?mtu~INT?is_ip~INT?rx~*((*net_device INT *archdr INT ) : VOID)?build_header~*((*sk_buff *net_device USHORT ~uint8_t~0 ) : INT)?prepare_tx~*((*net_device *archdr INT INT ) : INT)?continue_tx~*((*net_device INT ) : INT)?ack_tx~*((*net_device INT ) : INT)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 6890 could not be translated for associated CType ARRAY#_15_~~Element~0# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch307 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch299 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch301 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 5223]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 5513. Possible FailurePath: [L5298] FCALL "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n" [L5404] FCALL "%s%6s: short RFC1201 exception packet from %02Xh" [L5404] FCALL "\016" [L5420] FCALL "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n" [L5421] FCALL "\016" [L5438] FCALL "%s%6s: Memory squeeze, dropping packet.\n" [L5438] FCALL "\f" [L5469] FCALL "%s%6s: ARP source address was 00h, set to %02Xh.\n" [L5469] FCALL "\016" [L5481] FCALL "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n" [L5481] FCALL "\f" [L5497] FCALL "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n" [L5498] FCALL "\016" [L5516] FCALL "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n" [L5517] FCALL "\016" [L5533] FCALL "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n" [L5534] FCALL "\016" [L5549] FCALL "%s%6s: (split) memory squeeze, dropping packet.\n" [L5549] FCALL "\f" [L5576] FCALL "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n" [L5577] FCALL "\016" [L5595] FCALL "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n" [L5595] FCALL "\016" [L5607] FCALL "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n" [L5608] FCALL "\016" [L5688] FCALL "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n" [L5688] FCALL "\f" [L5252] int ldv_state_variable_1 ; [L5253] int LDV_IN_INTERRUPT = 1; [L5255] int ref_cnt ; [L5256] int ldv_state_variable_0 ; [L5817] int ldv_retval_0 ; [L6046] int last_index = 0; [L5254] struct archdr *rfc1201_proto_group0 ; [L5257] struct net_device *rfc1201_proto_group1 ; [L5290-L5292] FCALL static struct ArcProto rfc1201_proto = {97, 1500, 1, & rx, & build_header, & prepare_tx, & continue_tx, (int (*)(struct net_device * , int ))0}; [L6045] FCALL Element set_impl[15] ; [L6203] Set LDV_SKBS ; VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old("%s%6s: (split) memory squeeze, dropping packet.\n")=6936, \old("%s%6s: (split) memory squeeze, dropping packet.\n")=7013, \old("%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n")=6945, \old("%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n")=6985, \old("%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n")=6980, \old("%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n")=6978, \old("%s%6s: ARP source address was 00h, set to %02Xh.\n")=6921, \old("%s%6s: ARP source address was 00h, set to %02Xh.\n")=6949, \old("%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n")=6913, \old("%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n")=6946, \old("%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n")=6916, \old("%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n")=6957, \old("%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n")=6903, \old("%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n")=6951, \old("%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n")=6937, \old("%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n")=6983, \old("%s%6s: Memory squeeze, dropping packet.\n")=6958, \old("%s%6s: Memory squeeze, dropping packet.\n")=6922, \old("%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n")=7014, \old("%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n")=6965, \old("%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n")=6989, \old("%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n")=6884, \old("%s%6s: short RFC1201 exception packet from %02Xh")=7008, \old("%s%6s: short RFC1201 exception packet from %02Xh")=6879, \old("%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n")=6880, \old("%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n")=6878, \old("\016")=6928, \old("\016")=6943, \old("\016")=7004, \old("\016")=6992, \old("\016")=7015, \old("\016")=6959, \old("\016")=6889, \old("\016")=7009, \old("\016")=6968, \old("\016")=6991, \old("\016")=6974, \old("\016")=6997, \old("\016")=6941, \old("\016")=6956, \old("\016")=7007, \old("\016")=6898, \old("\016")=6873, \old("\016")=6881, \old("\f")=6893, \old("\f")=6984, \old("\f")=6892, \old("\f")=6899, \old("\f")=6929, \old("\f")=6999, \old("\f")=6998, \old("\f")=6979, \old("arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n")=6995, \old("arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n")=7016, \old(last_index)=7000, \old(LDV_IN_INTERRUPT)=6887, \old(ldv_retval_0)=6960, \old(LDV_SKBS)=6874, \old(LDV_SKBS)=6969, \old(ldv_state_variable_0)=6896, \old(ldv_state_variable_1)=6925, \old(ref_cnt)=6987, \old(rfc1201_proto)=null, \old(rfc1201_proto)=null, \old(rfc1201_proto_group0)=6906, \old(rfc1201_proto_group0)=6918, \old(rfc1201_proto_group1)=6948, \old(rfc1201_proto_group1)=6975, \old(set_impl)=null, \old(set_impl)=null, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5835] int ldvarg7 ; [L5836] int tmp ; [L5837] struct sk_buff *ldvarg3 ; [L5838] void *tmp___0 ; [L5839] int ldvarg0 ; [L5840] int tmp___1 ; [L5841] int ldvarg5 ; [L5842] int tmp___2 ; [L5843] int ldvarg6 ; [L5844] int tmp___3 ; [L5845] int ldvarg1 ; [L5846] int tmp___4 ; [L5847] unsigned short ldvarg4 ; [L5848] unsigned short tmp___5 ; [L5849] FCALL uint8_t ldvarg2 ; [L5850] int tmp___6 ; [L5851] int tmp___7 ; [L5852] int tmp___8 ; [L5855] tmp = __VERIFIER_nondet_int() [L5856] ldvarg7 = tmp VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldvarg2={6930:0}, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0] [L5857] CALL, EXPR ldv_zalloc(232UL) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=232, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5174] void *p ; [L5175] void *tmp ; [L5176] int tmp___0 ; [L5179] tmp___0 = __VERIFIER_nondet_int() [L5180] COND TRUE tmp___0 != 0 [L5181] RET return ((void *)0); VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=232, \result={0:0}, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, size=232, tmp___0=1] [L5857] EXPR ldv_zalloc(232UL) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_zalloc(232UL)={0:0}, ldvarg2={6930:0}, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0] [L5857] tmp___0 = ldv_zalloc(232UL) [L5858] ldvarg3 = (struct sk_buff *)tmp___0 [L5859] tmp___1 = __VERIFIER_nondet_int() [L5860] ldvarg0 = tmp___1 [L5861] tmp___2 = __VERIFIER_nondet_int() [L5862] ldvarg5 = tmp___2 [L5863] tmp___3 = __VERIFIER_nondet_int() [L5864] ldvarg6 = tmp___3 [L5865] tmp___4 = __VERIFIER_nondet_int() [L5866] ldvarg1 = tmp___4 [L5867] tmp___5 = __VERIFIER_nondet_ushort() [L5868] ldvarg4 = tmp___5 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911] [L5869] CALL ldv_initialize() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L6225] CALL ldv_set_init(LDV_SKBS) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set={0:0}, set_impl={6961:0}] [L6053] set = set_impl [L6054] RET last_index = 0 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set={0:0}, set={6961:0}, set_impl={6961:0}] [L6225] RET ldv_set_init(LDV_SKBS) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5869] ldv_initialize() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911] [L5870] FCALL memset((void *)(& ldvarg2), 0, 1UL) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, memset((void *)(& ldvarg2), 0, 1UL)={6930:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911] [L5871] ldv_state_variable_1 = 0 [L5872] ref_cnt = 0 [L5873] ldv_state_variable_0 = 1 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911] [L5875] tmp___6 = __VERIFIER_nondet_int() [L5877] case 0: [L5921] case 1: VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1] [L5922] COND TRUE ldv_state_variable_0 != 0 [L5923] tmp___8 = __VERIFIER_nondet_int() [L5925] case 0: [L5934] case 1: VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___8=1] [L5935] COND TRUE ldv_state_variable_0 == 1 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___8=1] [L5936] CALL, EXPR arcnet_rfc1201_init() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5299] FCALL arc_proto_map[236] = & rfc1201_proto [L5300] EXPR, FCALL arc_proto_map[236] [L5300] FCALL arc_proto_map[250] = arc_proto_map[236] [L5301] EXPR, FCALL arc_proto_map[250] [L5301] FCALL arc_proto_map[214] = arc_proto_map[250] [L5302] EXPR, FCALL arc_proto_map[214] [L5302] FCALL arc_proto_map[213] = arc_proto_map[214] [L5303] EXPR, FCALL arc_proto_map[213] [L5303] FCALL arc_proto_map[196] = arc_proto_map[213] [L5304] EXPR, FCALL arc_proto_map[196] [L5304] FCALL arc_proto_map[212] = arc_proto_map[196] [L5305] COND TRUE (unsigned long )arc_bcast_proto == (unsigned long )arc_proto_default [L5306] arc_bcast_proto = & rfc1201_proto VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5310] RET return (0); VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \result=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5936] EXPR arcnet_rfc1201_init() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, arcnet_rfc1201_init()=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___8=1] [L5936] ldv_retval_0 = arcnet_rfc1201_init() [L5937] COND TRUE ldv_retval_0 == 0 [L5938] ldv_state_variable_0 = 3 [L5939] ldv_state_variable_1 = 1 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___8=1] [L5940] CALL ldv_initialize_ArcProto_1() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5822] void *tmp ; [L5823] void *tmp___0 ; VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5826] CALL, EXPR ldv_zalloc(20UL) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=20, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5174] void *p ; [L5175] void *tmp ; [L5176] int tmp___0 ; [L5179] tmp___0 = __VERIFIER_nondet_int() [L5180] COND TRUE tmp___0 != 0 [L5181] RET return ((void *)0); VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=20, \result={0:0}, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, size=20, tmp___0=1] [L5826] EXPR ldv_zalloc(20UL) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(20UL)={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5826] tmp = ldv_zalloc(20UL) [L5827] rfc1201_proto_group0 = (struct archdr *)tmp VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp={0:0}] [L5828] CALL, EXPR ldv_zalloc(3264UL) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=3264, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5174] void *p ; [L5175] void *tmp ; [L5176] int tmp___0 ; [L5179] tmp___0 = __VERIFIER_nondet_int() [L5180] COND TRUE tmp___0 != 0 [L5181] RET return ((void *)0); VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=3264, \result={0:0}, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, size=3264, tmp___0=1] [L5828] EXPR ldv_zalloc(3264UL) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(3264UL)={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp={0:0}] [L5828] tmp___0 = ldv_zalloc(3264UL) [L5829] RET rfc1201_proto_group1 = (struct net_device *)tmp___0 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp={0:0}, tmp___0={0:0}] [L5940] ldv_initialize_ArcProto_1() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___8=1] [L5944] COND FALSE !(ldv_retval_0 != 0) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___8=1] [L5875] tmp___6 = __VERIFIER_nondet_int() [L5877] case 0: VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=0, tmp___8=1] [L5878] COND TRUE ldv_state_variable_1 != 0 [L5879] tmp___7 = __VERIFIER_nondet_int() [L5881] case 0: [L5889] case 1: [L5897] case 2: [L5905] case 3: VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=0, tmp___7=3, tmp___8=1] [L5906] COND TRUE ldv_state_variable_1 == 1 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=0, tmp___7=3, tmp___8=1] [L5907] CALL rx(rfc1201_proto_group1, ldvarg1, rfc1201_proto_group0, ldvarg0) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, dev={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5368] struct arcnet_local *lp ; [L5369] void *tmp ; [L5370] struct sk_buff *skb ; [L5371] struct archdr *pkt ; [L5372] struct arc_rfc1201 *soft ; [L5373] int saddr ; [L5374] int ofs ; [L5375] struct Incoming *in ; [L5376] size_t __len ; [L5377] void *__ret ; [L5378] struct arphdr *arp ; [L5379] uint8_t *cptr ; [L5380] uint8_t tmp___0 ; [L5381] size_t __len___0 ; [L5382] void *__ret___0 ; [L5383] int packetnum ; [L5384] uint8_t tmp___1 ; [L5385] uint8_t tmp___2 ; VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5388] CALL, EXPR netdev_priv((struct net_device const *)dev) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, dev={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5264] RET return ((void *)dev + 3264U); VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \result={0:3264}, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, dev={0:0}, dev={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5388] EXPR netdev_priv((struct net_device const *)dev) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, netdev_priv((struct net_device const *)dev)={0:3264}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5388] tmp = netdev_priv((struct net_device const *)dev) [L5389] lp = (struct arcnet_local *)tmp [L5390] pkt = pkthdr [L5391] soft = & pkthdr->soft.rfc1201 [L5392] EXPR, FCALL pkt->hard.source [L5392] saddr = (int )pkt->hard.source [L5393] in = (struct Incoming *)(& lp->rfc1201.incoming) + (unsigned long )saddr VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, soft={0:4}, tmp={0:3264}] [L5394] COND TRUE length > 256 [L5395] ofs = 512 - length VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, soft={0:4}, tmp={0:3264}] [L5399] EXPR, FCALL soft->split_flag VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, soft={0:4}, soft->split_flag=1, tmp={0:3264}] [L5399] COND FALSE !((unsigned int )soft->split_flag == 255U) [L5417] EXPR, FCALL soft->split_flag VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, soft={0:4}, soft->split_flag=1, tmp={0:3264}] [L5417] COND FALSE !((unsigned int )soft->split_flag == 0U) [L5495] EXPR, FCALL in->skb [L5495] (unsigned long )in->skb != (unsigned long )((struct sk_buff *)0) && (int )in->sequence != (int )soft->sequence VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, (unsigned long )in->skb != (unsigned long )((struct sk_buff *)0) && (int )in->sequence != (int )soft->sequence=0, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, in->skb={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, soft={0:4}, tmp={0:3264}] [L5495] COND FALSE !((unsigned long )in->skb != (unsigned long )((struct sk_buff *)0) && (int )in->sequence != (int )soft->sequence) [L5513] EXPR, FCALL soft->split_flag VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, soft={0:4}, soft->split_flag=1, tmp={0:3264}] [L5513] COND TRUE (int )soft->split_flag & 1 [L5514] EXPR, FCALL in->skb VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, in->skb={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, soft={0:4}, tmp={0:3264}] [L5514] COND FALSE !((unsigned long )in->skb != (unsigned long )((struct sk_buff *)0)) [L5528] EXPR, FCALL soft->sequence [L5528] FCALL in->sequence = soft->sequence [L5529] EXPR, FCALL soft->split_flag [L5529] FCALL in->numpackets = (unsigned int )((uint8_t )((int )soft->split_flag >> 1)) + 2U [L5530] FCALL in->lastpacket = 1U [L5531] EXPR, FCALL in->numpackets VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, in->numpackets=2, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, soft={0:4}, tmp={0:3264}] [L5531] COND FALSE !((unsigned int )in->numpackets > 16U) [L5545] EXPR, FCALL in->numpackets VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, in->numpackets=2, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, soft={0:4}, tmp={0:3264}] [L5545] CALL, EXPR ldv_alloc_skb_12((unsigned int )((int )in->numpackets * 508 + 4), 32U) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(priority)=32, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=1020, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L6019] struct sk_buff *tmp ; VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(priority)=32, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=1020, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, priority=32, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, size=1020] [L6022] CALL, EXPR ldv_skb_alloc() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L6206] void *skb ; [L6207] void *tmp___7 ; VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L6210] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=248, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5174] void *p ; [L5175] void *tmp ; [L5176] int tmp___0 ; [L5179] tmp___0 = __VERIFIER_nondet_int() [L5180] COND FALSE !(tmp___0 != 0) [L5183] EXPR, FCALL calloc(1UL, size) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=248, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, calloc(1UL, size)={1:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, size=248, tmp___0=0] [L5183] EXPR, FCALL calloc(1UL, size) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=248, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, calloc(1UL, size)={1:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, size=248, tmp___0=0] [L5183] tmp = calloc(1UL, size) [L5184] p = tmp [L5186] RET return (p); VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=248, \result={1:0}, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, calloc(1UL, size)={1:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, p={1:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, size=248, tmp={1:0}, tmp___0=0] [L6210] EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={1:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L6210] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6211] skb = (struct sk_buff___0 *)tmp___7 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, skb={1:0}, tmp___7={1:0}] [L6212] COND FALSE !(! skb) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, skb={1:0}, tmp___7={1:0}] [L6215] CALL ldv_set_add(LDV_SKBS, skb) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, e={1:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set={0:0}, set_impl={6961:0}] [L6061] int i ; [L6064] i = 0 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, e={1:0}, e={1:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set={0:0}, set={0:0}, set_impl={6961:0}] [L6065] COND TRUE 1 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, e={1:0}, e={1:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set={0:0}, set={0:0}, set_impl={6961:0}] [L6066] COND FALSE !(i < last_index) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, e={1:0}, e={1:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set={0:0}, set={0:0}, set_impl={6961:0}] [L6078] COND TRUE last_index < 15 [L6079] FCALL set_impl[last_index] = e [L6080] RET last_index = last_index + 1 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, e={1:0}, e={1:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set={0:0}, set={0:0}, set_impl={6961:0}] [L6215] ldv_set_add(LDV_SKBS, skb) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, skb={1:0}, tmp___7={1:0}] [L6216] RET return (skb); VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \result={1:0}, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, skb={1:0}, tmp___7={1:0}] [L6022] EXPR ldv_skb_alloc() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(priority)=32, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=1020, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_skb_alloc()={1:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, priority=32, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, size=1020] [L6022] tmp = ldv_skb_alloc() [L6023] RET return (tmp); VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(priority)=32, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \old(size)=1020, \result={1:0}, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, priority=32, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, size=1020, tmp={1:0}] [L5545] EXPR ldv_alloc_skb_12((unsigned int )((int )in->numpackets * 508 + 4), 32U) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, in->numpackets=2, last_index=1, ldv_alloc_skb_12((unsigned int )((int )in->numpackets * 508 + 4), 32U)={1:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, soft={0:4}, tmp={0:3264}] [L5545] skb = ldv_alloc_skb_12((unsigned int )((int )in->numpackets * 508 + 4), 32U) [L5546] FCALL in->skb = skb VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, skb={1:0}, soft={0:4}, tmp={0:3264}] [L5547] COND FALSE !((unsigned long )skb == (unsigned long )((struct sk_buff *)0)) [L5560] FCALL skb->dev = dev [L5561] EXPR, FCALL skb->data [L5561] pkt = (struct archdr *)skb->data [L5562] soft = & pkt->soft.rfc1201 [L5563] __len___0 = 8UL VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, __len___0=8, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, skb={1:0}, soft={0:4}, tmp={0:3264}] [L5564] COND FALSE !(__len___0 > 63UL) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, __len___0=8, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, skb={1:0}, soft={0:4}, tmp={0:3264}] [L5567] EXPR, FCALL __builtin_memcpy((void *)pkt, (void const *)pkthdr, __len___0) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, __builtin_memcpy((void *)pkt, (void const *)pkthdr, __len___0)={0:0}, __len___0=8, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, skb={1:0}, soft={0:4}, tmp={0:3264}] [L5567] __ret___0 = __builtin_memcpy((void *)pkt, (void const *)pkthdr, __len___0) [L5569] FCALL skb_put(skb, 8U) [L5570] FCALL soft->split_flag = 0U VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, __len___0=8, __ret___0={0:0}, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, skb={1:0}, soft={0:4}, tmp={0:3264}] [L5628] EXPR, FCALL in->skb [L5628] skb = in->skb [L5629] EXPR, FCALL skb->data [L5629] EXPR, FCALL skb->len [L5629] EXPR, FCALL lp->hw.copy_from_card VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, __len___0=8, __ret___0={0:0}, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, lp->hw.copy_from_card={6996:6940}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, skb={1:0}, skb->data={0:0}, skb->len=0, soft={0:4}, tmp={0:3264}] [L5629-L5630] FCALL (*(lp->hw.copy_from_card))(dev, bufnum, ofs + 4, (void *)skb->data + (unsigned long )skb->len, length + -4) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, __len___0=8, __ret___0={0:0}, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, lp->hw.copy_from_card={6996:6940}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, skb={1:0}, skb->data={0:0}, skb->len=0, soft={0:4}, tmp={0:3264}] [L5631] FCALL skb_put(skb, (unsigned int )(length + -4)) [L5632] EXPR, FCALL in->lastpacket [L5632] EXPR, FCALL in->numpackets VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(bufnum)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(length)=262, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, __len___0=8, __ret___0={0:0}, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, bufnum=0, dev={0:0}, dev={0:0}, in={0:6764}, in->lastpacket=1, in->numpackets=2, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, length=262, lp={0:3264}, ofs=250, pkt={0:0}, pkthdr={0:0}, pkthdr={0:0}, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, saddr=255, set_impl={6961:0}, skb={1:0}, soft={0:4}, tmp={0:3264}] [L5632] COND FALSE, RET !((int )in->lastpacket == (int )in->numpackets) [L5907] rx(rfc1201_proto_group1, ldvarg1, rfc1201_proto_group0, ldvarg0) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=0, tmp___7=3, tmp___8=1] [L5908] ldv_state_variable_1 = 1 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=0, tmp___7=3, tmp___8=1] [L5875] tmp___6 = __VERIFIER_nondet_int() [L5877] case 0: [L5921] case 1: VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___7=3, tmp___8=1] [L5922] COND TRUE ldv_state_variable_0 != 0 [L5923] tmp___8 = __VERIFIER_nondet_int() [L5925] case 0: VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___7=3, tmp___8=0] [L5926] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___7=3, tmp___8=0] [L5927] CALL arcnet_rfc1201_exit() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5318] RET, FCALL arcnet_unregister_proto(& rfc1201_proto) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5927] arcnet_rfc1201_exit() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___7=3, tmp___8=0] [L5928] ldv_state_variable_0 = 2 VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldvarg0=262, ldvarg1=0, ldvarg2={6930:0}, ldvarg3={0:0}, ldvarg4=6911, ldvarg5=0, ldvarg6=0, ldvarg7=0, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp=0, tmp___0={0:0}, tmp___1=262, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=6911, tmp___6=1, tmp___7=3, tmp___8=0] [L5968] CALL ldv_check_final_state() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L6283] int tmp___7 ; VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L6286] CALL, EXPR ldv_set_is_empty(LDV_SKBS) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set={0:0}, set_impl={6961:0}] [L6157] RET return (last_index == 0); VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, \result=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set={0:0}, set={0:0}, set_impl={6961:0}] [L6286] EXPR ldv_set_is_empty(LDV_SKBS) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_set_is_empty(LDV_SKBS)=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L6286] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6287] COND FALSE !(\read(tmp___7)) VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}, tmp___7=0] [L6290] CALL ldv_error() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={7001:0}, "\f"={6902:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] [L5223] __VERIFIER_error() VAL ["%s%6s: (split) memory squeeze, dropping packet.\n"={7012:0}, "%s%6s: aborting assembly (seq=%d) for unsplit packet (splitflag=%d, seq=%d)\n"={6994:0}, "%s%6s: aborting previous (seq=%d) assembly (splitflag=%d, seq=%d)\n"={6981:0}, "%s%6s: ARP source address was 00h, set to %02Xh.\n"={6952:0}, "%s%6s: can\'t continue split without starting first! (splitflag=%d, seq=%d, aborted=%d)\n"={6914:0}, "%s%6s: duplicate splitpacket ignored! (splitflag=%d)\n"={6954:0}, "%s%6s: funny-shaped ARP packet. (%Xh, %Xh)\n"={6950:0}, "%s%6s: incoming packet more than 16 segments; dropping. (splitflag=%d)\n"={6938:0}, "%s%6s: Memory squeeze, dropping packet.\n"={6926:0}, "%s%6s: out-of-order splitpacket, reassembly (seq=%d) aborted (splitflag=%d, seq=%d)\n"={6966:0}, "%s%6s: RFC1201: I don\'t understand protocol %d (%Xh)\n"={6988:0}, "%s%6s: short RFC1201 exception packet from %02Xh"={7010:0}, "%s%6s: wrong seq number (saddr=%d, expected=%d, seq=%d, splitflag=%d)\n"={6876:0}, "\016"={6967:0}, "\016"={6875:0}, "\016"={6953:0}, "\016"={6955:0}, "\016"={6942:0}, "\016"={6897:0}, "\016"={6990:0}, "\016"={6976:0}, "\016"={6932:0}, "\f"={6986:0}, "\f"={6902:0}, "\f"={7001:0}, "\f"={6993:0}, "arcnet: RFC1201 \"standard\" (`a\') encapsulation support loaded.\n"={7017:0}, \old(arc_bcast_proto)=0, \old(arc_bcast_proto)=0, \old(last_index)=0, \old(ldv_retval_0)=0, \old(ldv_state_variable_0)=0, \old(ldv_state_variable_1)=0, \old(ref_cnt)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group0)=0, \old(rfc1201_proto_group1)=0, \old(rfc1201_proto_group1)=0, arc_bcast_proto={3:0}, arc_proto_default={0:0}, arc_proto_map={6961:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ref_cnt=0, rfc1201_proto={3:0}, rfc1201_proto_group0={0:0}, rfc1201_proto_group1={0:0}, set_impl={6961:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 54 procedures, 434 locations, 1 error locations. UNSAFE Result, 86.9s OverallTime, 19 OverallIterations, 8 TraceHistogramMax, 10.7s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 8434 SDtfs, 3367 SDslu, 44128 SDs, 0 SdLazy, 3370 SolverSat, 464 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 8.9s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 1383 GetRequests, 1185 SyntacticMatches, 17 SemanticMatches, 181 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 275 ImplicationChecksByTransitivity, 2.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1532occurred in iteration=18, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 18 MinimizatonAttempts, 988 StatesRemovedByMinimization, 15 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.4s SsaConstructionTime, 70.0s SatisfiabilityAnalysisTime, 3.4s InterpolantComputationTime, 3835 NumberOfCodeBlocks, 3798 NumberOfCodeBlocksAsserted, 39 NumberOfCheckSat, 3645 ConstructedInterpolants, 0 QuantifiedInterpolants, 775597 SizeOfPredicates, 17 NumberOfNonLiveVariables, 10026 ConjunctsInSsa, 103 ConjunctsInUnsatCore, 26 InterpolantComputations, 11 PerfectInterpolantSequences, 753/926 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-5842f4b [2018-11-18 12:42:44,701 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 12:42:44,702 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 12:42:44,710 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 12:42:44,710 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 12:42:44,711 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 12:42:44,712 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 12:42:44,714 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 12:42:44,715 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 12:42:44,715 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 12:42:44,716 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 12:42:44,716 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 12:42:44,717 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 12:42:44,718 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 12:42:44,719 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 12:42:44,719 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 12:42:44,720 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 12:42:44,722 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 12:42:44,723 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 12:42:44,724 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 12:42:44,725 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 12:42:44,726 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 12:42:44,728 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 12:42:44,728 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 12:42:44,728 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 12:42:44,729 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 12:42:44,730 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 12:42:44,730 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 12:42:44,731 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 12:42:44,732 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 12:42:44,732 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 12:42:44,733 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 12:42:44,733 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 12:42:44,734 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 12:42:44,734 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 12:42:44,735 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 12:42:44,735 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2018-11-18 12:42:44,745 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 12:42:44,745 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 12:42:44,746 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-18 12:42:44,746 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-11-18 12:42:44,746 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 12:42:44,747 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 12:42:44,747 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 12:42:44,747 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 12:42:44,747 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 12:42:44,747 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-18 12:42:44,747 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-18 12:42:44,747 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-18 12:42:44,747 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-18 12:42:44,748 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-18 12:42:44,748 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 12:42:44,748 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 12:42:44,748 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-18 12:42:44,750 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 12:42:44,750 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 12:42:44,750 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-18 12:42:44,750 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-18 12:42:44,750 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 12:42:44,750 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 12:42:44,751 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-18 12:42:44,751 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-18 12:42:44,751 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-18 12:42:44,751 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-18 12:42:44,751 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-18 12:42:44,751 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-18 12:42:44,751 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-18 12:42:44,751 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c8baf6dc591fb50b813986556c788bf1c702adbf [2018-11-18 12:42:44,784 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 12:42:44,793 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 12:42:44,796 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 12:42:44,797 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 12:42:44,797 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 12:42:44,798 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/../../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--arcnet--rfc1201.ko-entry_point_false-unreach-call.cil.out.c [2018-11-18 12:42:44,842 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/data/cb0dab12c/b6bfcc63ad1c45f8b5a4787356bbc2db/FLAG6e5b0697c [2018-11-18 12:42:45,322 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 12:42:45,322 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--arcnet--rfc1201.ko-entry_point_false-unreach-call.cil.out.c [2018-11-18 12:42:45,340 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/data/cb0dab12c/b6bfcc63ad1c45f8b5a4787356bbc2db/FLAG6e5b0697c [2018-11-18 12:42:45,599 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/data/cb0dab12c/b6bfcc63ad1c45f8b5a4787356bbc2db [2018-11-18 12:42:45,601 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 12:42:45,602 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2018-11-18 12:42:45,602 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 12:42:45,603 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 12:42:45,605 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 12:42:45,606 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 12:42:45" (1/1) ... [2018-11-18 12:42:45,608 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7821e729 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:45, skipping insertion in model container [2018-11-18 12:42:45,609 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 12:42:45" (1/1) ... [2018-11-18 12:42:45,616 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 12:42:45,684 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 12:42:46,759 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 12:42:46,881 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 12:42:47,192 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 12:42:47,248 INFO L195 MainTranslator]: Completed translation [2018-11-18 12:42:47,249 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:47 WrapperNode [2018-11-18 12:42:47,249 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 12:42:47,249 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 12:42:47,249 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 12:42:47,249 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 12:42:47,260 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:47" (1/1) ... [2018-11-18 12:42:47,261 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:47" (1/1) ... [2018-11-18 12:42:47,285 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:47" (1/1) ... [2018-11-18 12:42:47,285 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:47" (1/1) ... [2018-11-18 12:42:47,329 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:47" (1/1) ... [2018-11-18 12:42:47,336 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:47" (1/1) ... [2018-11-18 12:42:47,344 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:47" (1/1) ... [2018-11-18 12:42:47,352 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 12:42:47,353 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 12:42:47,353 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 12:42:47,353 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 12:42:47,354 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:47" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-18 12:42:47,403 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-18 12:42:47,404 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 12:42:47,404 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_INT~X~C_INT~X~$Pointer$~X~C_INT~TO~VOID [2018-11-18 12:42:47,404 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab16 [2018-11-18 12:42:47,404 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_reset_mac_header [2018-11-18 12:42:47,404 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2018-11-18 12:42:47,404 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2018-11-18 12:42:47,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2018-11-18 12:42:47,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ptr [2018-11-18 12:42:47,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ulong [2018-11-18 12:42:47,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2018-11-18 12:42:47,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2018-11-18 12:42:47,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2018-11-18 12:42:47,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_trap [2018-11-18 12:42:47,405 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2018-11-18 12:42:47,406 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_irq [2018-11-18 12:42:47,406 INFO L138 BoogieDeclarations]: Found implementation of procedure arcnet_rfc1201_init [2018-11-18 12:42:47,406 INFO L138 BoogieDeclarations]: Found implementation of procedure arcnet_rfc1201_exit [2018-11-18 12:42:47,406 INFO L138 BoogieDeclarations]: Found implementation of procedure type_trans [2018-11-18 12:42:47,406 INFO L138 BoogieDeclarations]: Found implementation of procedure rx [2018-11-18 12:42:47,406 INFO L138 BoogieDeclarations]: Found implementation of procedure build_header [2018-11-18 12:42:47,406 INFO L138 BoogieDeclarations]: Found implementation of procedure load_pkt [2018-11-18 12:42:47,406 INFO L138 BoogieDeclarations]: Found implementation of procedure prepare_tx [2018-11-18 12:42:47,407 INFO L138 BoogieDeclarations]: Found implementation of procedure continue_tx [2018-11-18 12:42:47,407 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize_ArcProto_1 [2018-11-18 12:42:47,407 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-18 12:42:47,407 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_consume_skb_5 [2018-11-18 12:42:47,407 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_6 [2018-11-18 12:42:47,407 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_7 [2018-11-18 12:42:47,407 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_8 [2018-11-18 12:42:47,407 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kfree_skb_11 [2018-11-18 12:42:47,408 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_skb_12 [2018-11-18 12:42:47,408 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_netif_rx_13 [2018-11-18 12:42:47,408 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_netif_rx_15 [2018-11-18 12:42:47,408 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_init [2018-11-18 12:42:47,408 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_add [2018-11-18 12:42:47,408 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_remove [2018-11-18 12:42:47,408 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_contains [2018-11-18 12:42:47,408 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_set_is_empty [2018-11-18 12:42:47,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-18 12:42:47,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_err_ptr [2018-11-18 12:42:47,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_ptr_err [2018-11-18 12:42:47,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err_or_null [2018-11-18 12:42:47,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2018-11-18 12:42:47,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2018-11-18 12:42:47,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free [2018-11-18 12:42:47,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_free_int [2018-11-18 12:42:47,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb [2018-11-18 12:42:47,410 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_netdev_alloc_skb [2018-11-18 12:42:47,410 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_current [2018-11-18 12:42:47,410 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2018-11-18 12:42:47,410 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2018-11-18 12:42:47,410 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2018-11-18 12:42:47,410 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2018-11-18 12:42:47,410 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-11-18 12:42:47,410 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2018-11-18 12:42:47,411 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab16 [2018-11-18 12:42:47,411 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2018-11-18 12:42:47,411 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2018-11-18 12:42:47,411 INFO L130 BoogieDeclarations]: Found specification of procedure memset [2018-11-18 12:42:47,411 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_6 [2018-11-18 12:42:47,411 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_7 [2018-11-18 12:42:47,411 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_8 [2018-11-18 12:42:47,411 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kfree_skb_11 [2018-11-18 12:42:47,412 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_consume_skb_5 [2018-11-18 12:42:47,412 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_skb_12 [2018-11-18 12:42:47,412 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2018-11-18 12:42:47,412 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2018-11-18 12:42:47,412 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2018-11-18 12:42:47,412 INFO L130 BoogieDeclarations]: Found specification of procedure skb_reset_mac_header [2018-11-18 12:42:47,412 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-18 12:42:47,412 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2018-11-18 12:42:47,412 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2018-11-18 12:42:47,413 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free [2018-11-18 12:42:47,413 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_free_int [2018-11-18 12:42:47,413 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2018-11-18 12:42:47,413 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2018-11-18 12:42:47,413 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-11-18 12:42:47,413 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ushort [2018-11-18 12:42:47,413 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ulong [2018-11-18 12:42:47,413 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_pointer [2018-11-18 12:42:47,414 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assume [2018-11-18 12:42:47,414 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2018-11-18 12:42:47,414 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 12:42:47,414 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2018-11-18 12:42:47,414 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2018-11-18 12:42:47,414 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2018-11-18 12:42:47,414 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ptr [2018-11-18 12:42:47,414 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ulong [2018-11-18 12:42:47,414 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2018-11-18 12:42:47,414 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2018-11-18 12:42:47,415 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_trap [2018-11-18 12:42:47,415 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize_ArcProto_1 [2018-11-18 12:42:47,415 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2018-11-18 12:42:47,415 INFO L130 BoogieDeclarations]: Found specification of procedure __dev_kfree_skb_irq [2018-11-18 12:42:47,415 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_irq [2018-11-18 12:42:47,415 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_netif_rx_13 [2018-11-18 12:42:47,415 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_netif_rx_15 [2018-11-18 12:42:47,415 INFO L130 BoogieDeclarations]: Found specification of procedure arcnet_unregister_proto [2018-11-18 12:42:47,415 INFO L130 BoogieDeclarations]: Found specification of procedure type_trans [2018-11-18 12:42:47,416 INFO L130 BoogieDeclarations]: Found specification of procedure rx [2018-11-18 12:42:47,416 INFO L130 BoogieDeclarations]: Found specification of procedure build_header [2018-11-18 12:42:47,416 INFO L130 BoogieDeclarations]: Found specification of procedure prepare_tx [2018-11-18 12:42:47,416 INFO L130 BoogieDeclarations]: Found specification of procedure continue_tx [2018-11-18 12:42:47,416 INFO L130 BoogieDeclarations]: Found specification of procedure arcnet_rfc1201_init [2018-11-18 12:42:47,416 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-18 12:42:47,416 INFO L130 BoogieDeclarations]: Found specification of procedure arcnet_rfc1201_exit [2018-11-18 12:42:47,416 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2018-11-18 12:42:47,417 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2018-11-18 12:42:47,417 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-18 12:42:47,417 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2018-11-18 12:42:47,417 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2018-11-18 12:42:47,417 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_INT~X~C_INT~X~$Pointer$~X~C_INT~TO~VOID [2018-11-18 12:42:47,417 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2018-11-18 12:42:47,417 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2018-11-18 12:42:47,417 INFO L130 BoogieDeclarations]: Found specification of procedure load_pkt [2018-11-18 12:42:47,417 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-18 12:42:47,418 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-18 12:42:47,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2018-11-18 12:42:47,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-18 12:42:47,418 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-18 12:42:47,418 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2018-11-18 12:42:47,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_init [2018-11-18 12:42:47,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_add [2018-11-18 12:42:47,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_remove [2018-11-18 12:42:47,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_contains [2018-11-18 12:42:47,419 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_set_is_empty [2018-11-18 12:42:47,419 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-18 12:42:47,419 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_err_ptr [2018-11-18 12:42:47,419 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_ptr_err [2018-11-18 12:42:47,419 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err_or_null [2018-11-18 12:42:47,419 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_netdev_alloc_skb [2018-11-18 12:42:47,419 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb [2018-11-18 12:42:47,419 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_current [2018-11-18 12:42:47,419 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-18 12:42:47,420 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2018-11-18 12:42:47,420 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2018-11-18 12:42:47,420 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 12:42:47,420 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2018-11-18 12:42:47,420 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2018-11-18 12:42:54,429 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 12:42:54,429 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 12:42:54 BoogieIcfgContainer [2018-11-18 12:42:54,430 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 12:42:54,430 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-18 12:42:54,430 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-18 12:42:54,434 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-18 12:42:54,434 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 12:42:45" (1/3) ... [2018-11-18 12:42:54,434 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@63767e7f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 12:42:54, skipping insertion in model container [2018-11-18 12:42:54,435 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 12:42:47" (2/3) ... [2018-11-18 12:42:54,435 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@63767e7f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 12:42:54, skipping insertion in model container [2018-11-18 12:42:54,435 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 12:42:54" (3/3) ... [2018-11-18 12:42:54,437 INFO L112 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--arcnet--rfc1201.ko-entry_point_false-unreach-call.cil.out.c [2018-11-18 12:42:54,445 INFO L136 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-18 12:42:54,452 INFO L148 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-18 12:42:54,464 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-18 12:42:54,490 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 12:42:54,491 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-18 12:42:54,491 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-18 12:42:54,491 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-18 12:42:54,491 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 12:42:54,492 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 12:42:54,492 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-18 12:42:54,492 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 12:42:54,492 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-18 12:42:54,510 INFO L276 IsEmpty]: Start isEmpty. Operand 367 states. [2018-11-18 12:42:54,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-11-18 12:42:54,516 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:42:54,517 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:42:54,519 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:42:54,524 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:42:54,524 INFO L82 PathProgramCache]: Analyzing trace with hash -994795543, now seen corresponding path program 1 times [2018-11-18 12:42:54,528 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:42:54,529 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:42:54,557 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:42:54,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:42:54,733 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:42:54,765 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:42:54,765 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-18 12:42:54,770 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:42:54,770 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 12:42:54,775 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 12:42:54,783 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 12:42:54,783 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:42:54,785 INFO L87 Difference]: Start difference. First operand 367 states. Second operand 3 states. [2018-11-18 12:42:56,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:42:56,944 INFO L93 Difference]: Finished difference Result 952 states and 1339 transitions. [2018-11-18 12:42:56,946 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 12:42:56,947 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 46 [2018-11-18 12:42:56,947 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:42:56,959 INFO L225 Difference]: With dead ends: 952 [2018-11-18 12:42:56,959 INFO L226 Difference]: Without dead ends: 543 [2018-11-18 12:42:56,964 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:42:56,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 543 states. [2018-11-18 12:42:57,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 543 to 543. [2018-11-18 12:42:57,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 543 states. [2018-11-18 12:42:57,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 543 states to 543 states and 707 transitions. [2018-11-18 12:42:57,032 INFO L78 Accepts]: Start accepts. Automaton has 543 states and 707 transitions. Word has length 46 [2018-11-18 12:42:57,032 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:42:57,033 INFO L480 AbstractCegarLoop]: Abstraction has 543 states and 707 transitions. [2018-11-18 12:42:57,033 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 12:42:57,033 INFO L276 IsEmpty]: Start isEmpty. Operand 543 states and 707 transitions. [2018-11-18 12:42:57,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-18 12:42:57,035 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:42:57,035 INFO L375 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:42:57,036 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:42:57,036 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:42:57,036 INFO L82 PathProgramCache]: Analyzing trace with hash -170844008, now seen corresponding path program 1 times [2018-11-18 12:42:57,037 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:42:57,037 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:42:57,065 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:42:57,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:42:57,176 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:42:57,201 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 12:42:57,201 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-18 12:42:57,205 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:42:57,205 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 12:42:57,206 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 12:42:57,206 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 12:42:57,206 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:42:57,206 INFO L87 Difference]: Start difference. First operand 543 states and 707 transitions. Second operand 5 states. [2018-11-18 12:42:57,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:42:57,286 INFO L93 Difference]: Finished difference Result 1064 states and 1389 transitions. [2018-11-18 12:42:57,287 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 12:42:57,287 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 51 [2018-11-18 12:42:57,287 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:42:57,290 INFO L225 Difference]: With dead ends: 1064 [2018-11-18 12:42:57,290 INFO L226 Difference]: Without dead ends: 542 [2018-11-18 12:42:57,291 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 47 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-18 12:42:57,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 542 states. [2018-11-18 12:42:57,316 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 542 to 542. [2018-11-18 12:42:57,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 542 states. [2018-11-18 12:42:57,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 542 states to 542 states and 703 transitions. [2018-11-18 12:42:57,319 INFO L78 Accepts]: Start accepts. Automaton has 542 states and 703 transitions. Word has length 51 [2018-11-18 12:42:57,319 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:42:57,319 INFO L480 AbstractCegarLoop]: Abstraction has 542 states and 703 transitions. [2018-11-18 12:42:57,319 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 12:42:57,319 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 703 transitions. [2018-11-18 12:42:57,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-18 12:42:57,322 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:42:57,323 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:42:57,323 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:42:57,323 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:42:57,323 INFO L82 PathProgramCache]: Analyzing trace with hash -436265893, now seen corresponding path program 1 times [2018-11-18 12:42:57,324 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:42:57,324 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:42:57,354 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:42:57,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:42:57,506 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:42:57,565 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2018-11-18 12:42:57,565 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [MP cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (4)] Exception during sending of exit command (exit): Broken pipe [2018-11-18 12:42:57,567 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:42:57,567 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 12:42:57,568 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-18 12:42:57,568 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 12:42:57,568 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2018-11-18 12:42:57,569 INFO L87 Difference]: Start difference. First operand 542 states and 703 transitions. Second operand 6 states. [2018-11-18 12:42:59,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:42:59,986 INFO L93 Difference]: Finished difference Result 1581 states and 2091 transitions. [2018-11-18 12:42:59,987 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-18 12:42:59,987 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 78 [2018-11-18 12:42:59,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:42:59,992 INFO L225 Difference]: With dead ends: 1581 [2018-11-18 12:42:59,992 INFO L226 Difference]: Without dead ends: 1047 [2018-11-18 12:42:59,994 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2018-11-18 12:42:59,994 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1047 states. [2018-11-18 12:43:00,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1047 to 1037. [2018-11-18 12:43:00,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1037 states. [2018-11-18 12:43:00,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1037 states to 1037 states and 1373 transitions. [2018-11-18 12:43:00,031 INFO L78 Accepts]: Start accepts. Automaton has 1037 states and 1373 transitions. Word has length 78 [2018-11-18 12:43:00,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:00,031 INFO L480 AbstractCegarLoop]: Abstraction has 1037 states and 1373 transitions. [2018-11-18 12:43:00,031 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-18 12:43:00,031 INFO L276 IsEmpty]: Start isEmpty. Operand 1037 states and 1373 transitions. [2018-11-18 12:43:00,037 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2018-11-18 12:43:00,037 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:00,037 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:00,038 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:00,038 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:00,038 INFO L82 PathProgramCache]: Analyzing trace with hash -1501899954, now seen corresponding path program 1 times [2018-11-18 12:43:00,039 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:00,039 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:00,061 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:43:00,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:43:00,538 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:00,563 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2018-11-18 12:43:00,563 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-18 12:43:00,573 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:43:00,573 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 12:43:00,573 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-18 12:43:00,574 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 12:43:00,574 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 12:43:00,574 INFO L87 Difference]: Start difference. First operand 1037 states and 1373 transitions. Second operand 4 states. [2018-11-18 12:43:00,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:00,628 INFO L93 Difference]: Finished difference Result 2057 states and 2728 transitions. [2018-11-18 12:43:00,629 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-18 12:43:00,629 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 150 [2018-11-18 12:43:00,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:00,633 INFO L225 Difference]: With dead ends: 2057 [2018-11-18 12:43:00,633 INFO L226 Difference]: Without dead ends: 1038 [2018-11-18 12:43:00,634 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 147 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:43:00,635 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1038 states. [2018-11-18 12:43:00,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1038 to 1038. [2018-11-18 12:43:00,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1038 states. [2018-11-18 12:43:00,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1038 states to 1038 states and 1374 transitions. [2018-11-18 12:43:00,663 INFO L78 Accepts]: Start accepts. Automaton has 1038 states and 1374 transitions. Word has length 150 [2018-11-18 12:43:00,663 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:00,663 INFO L480 AbstractCegarLoop]: Abstraction has 1038 states and 1374 transitions. [2018-11-18 12:43:00,663 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-18 12:43:00,663 INFO L276 IsEmpty]: Start isEmpty. Operand 1038 states and 1374 transitions. [2018-11-18 12:43:00,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2018-11-18 12:43:00,667 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:00,667 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:00,667 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:00,667 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:00,667 INFO L82 PathProgramCache]: Analyzing trace with hash 1858430437, now seen corresponding path program 1 times [2018-11-18 12:43:00,668 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:00,668 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:00,686 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:43:01,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:43:01,279 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:01,395 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2018-11-18 12:43:01,395 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-18 12:43:01,398 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:43:01,398 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2018-11-18 12:43:01,399 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-11-18 12:43:01,399 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-11-18 12:43:01,399 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2018-11-18 12:43:01,399 INFO L87 Difference]: Start difference. First operand 1038 states and 1374 transitions. Second operand 10 states. [2018-11-18 12:43:03,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:03,309 INFO L93 Difference]: Finished difference Result 2098 states and 2805 transitions. [2018-11-18 12:43:03,310 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-18 12:43:03,310 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 151 [2018-11-18 12:43:03,311 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:03,315 INFO L225 Difference]: With dead ends: 2098 [2018-11-18 12:43:03,315 INFO L226 Difference]: Without dead ends: 1074 [2018-11-18 12:43:03,318 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 142 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2018-11-18 12:43:03,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1074 states. [2018-11-18 12:43:03,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1074 to 1074. [2018-11-18 12:43:03,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1074 states. [2018-11-18 12:43:03,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1074 states to 1074 states and 1415 transitions. [2018-11-18 12:43:03,360 INFO L78 Accepts]: Start accepts. Automaton has 1074 states and 1415 transitions. Word has length 151 [2018-11-18 12:43:03,361 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:03,361 INFO L480 AbstractCegarLoop]: Abstraction has 1074 states and 1415 transitions. [2018-11-18 12:43:03,361 INFO L481 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-11-18 12:43:03,361 INFO L276 IsEmpty]: Start isEmpty. Operand 1074 states and 1415 transitions. [2018-11-18 12:43:03,365 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2018-11-18 12:43:03,366 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:03,366 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:03,366 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:03,366 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:03,366 INFO L82 PathProgramCache]: Analyzing trace with hash -10509194, now seen corresponding path program 1 times [2018-11-18 12:43:03,367 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:03,367 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:03,392 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:43:03,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:43:03,995 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:04,015 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:43:04,016 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-18 12:43:04,019 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:43:04,019 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 12:43:04,019 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 12:43:04,019 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 12:43:04,020 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:43:04,020 INFO L87 Difference]: Start difference. First operand 1074 states and 1415 transitions. Second operand 3 states. [2018-11-18 12:43:04,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:04,044 INFO L93 Difference]: Finished difference Result 2158 states and 2859 transitions. [2018-11-18 12:43:04,044 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 12:43:04,044 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 156 [2018-11-18 12:43:04,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:04,048 INFO L225 Difference]: With dead ends: 2158 [2018-11-18 12:43:04,048 INFO L226 Difference]: Without dead ends: 1106 [2018-11-18 12:43:04,050 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 154 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:43:04,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1106 states. [2018-11-18 12:43:04,075 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1106 to 1066. [2018-11-18 12:43:04,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1066 states. [2018-11-18 12:43:04,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1066 states to 1066 states and 1399 transitions. [2018-11-18 12:43:04,078 INFO L78 Accepts]: Start accepts. Automaton has 1066 states and 1399 transitions. Word has length 156 [2018-11-18 12:43:04,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:04,079 INFO L480 AbstractCegarLoop]: Abstraction has 1066 states and 1399 transitions. [2018-11-18 12:43:04,079 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 12:43:04,079 INFO L276 IsEmpty]: Start isEmpty. Operand 1066 states and 1399 transitions. [2018-11-18 12:43:04,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2018-11-18 12:43:04,081 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:04,082 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:04,082 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:04,082 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:04,082 INFO L82 PathProgramCache]: Analyzing trace with hash 1470575354, now seen corresponding path program 1 times [2018-11-18 12:43:04,083 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:04,083 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:04,102 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:43:04,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:43:04,604 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:04,635 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:43:04,635 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-18 12:43:04,638 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:43:04,638 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 12:43:04,638 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-18 12:43:04,638 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 12:43:04,638 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 12:43:04,639 INFO L87 Difference]: Start difference. First operand 1066 states and 1399 transitions. Second operand 5 states. [2018-11-18 12:43:04,762 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:04,762 INFO L93 Difference]: Finished difference Result 2162 states and 2863 transitions. [2018-11-18 12:43:04,762 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-18 12:43:04,762 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 156 [2018-11-18 12:43:04,763 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:04,766 INFO L225 Difference]: With dead ends: 2162 [2018-11-18 12:43:04,766 INFO L226 Difference]: Without dead ends: 1118 [2018-11-18 12:43:04,768 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 152 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-18 12:43:04,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1118 states. [2018-11-18 12:43:04,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1118 to 1078. [2018-11-18 12:43:04,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1078 states. [2018-11-18 12:43:04,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1078 states to 1078 states and 1419 transitions. [2018-11-18 12:43:04,791 INFO L78 Accepts]: Start accepts. Automaton has 1078 states and 1419 transitions. Word has length 156 [2018-11-18 12:43:04,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:04,792 INFO L480 AbstractCegarLoop]: Abstraction has 1078 states and 1419 transitions. [2018-11-18 12:43:04,792 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-18 12:43:04,792 INFO L276 IsEmpty]: Start isEmpty. Operand 1078 states and 1419 transitions. [2018-11-18 12:43:04,794 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2018-11-18 12:43:04,794 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:04,794 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:04,794 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:04,795 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:04,795 INFO L82 PathProgramCache]: Analyzing trace with hash 1615602206, now seen corresponding path program 1 times [2018-11-18 12:43:04,796 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:04,796 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:04,819 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 12:43:05,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:43:05,347 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:05,375 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:43:05,375 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-18 12:43:05,570 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:43:05,573 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:43:05,574 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 9 [2018-11-18 12:43:05,574 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-18 12:43:05,574 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-18 12:43:05,574 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2018-11-18 12:43:05,575 INFO L87 Difference]: Start difference. First operand 1078 states and 1419 transitions. Second operand 9 states. [2018-11-18 12:43:05,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:05,807 INFO L93 Difference]: Finished difference Result 2186 states and 2903 transitions. [2018-11-18 12:43:05,808 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-18 12:43:05,808 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 157 [2018-11-18 12:43:05,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:05,810 INFO L225 Difference]: With dead ends: 2186 [2018-11-18 12:43:05,811 INFO L226 Difference]: Without dead ends: 1130 [2018-11-18 12:43:05,812 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 315 GetRequests, 306 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=77, Unknown=0, NotChecked=0, Total=110 [2018-11-18 12:43:05,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1130 states. [2018-11-18 12:43:05,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1130 to 1082. [2018-11-18 12:43:05,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1082 states. [2018-11-18 12:43:05,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1082 states to 1082 states and 1427 transitions. [2018-11-18 12:43:05,836 INFO L78 Accepts]: Start accepts. Automaton has 1082 states and 1427 transitions. Word has length 157 [2018-11-18 12:43:05,836 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:05,836 INFO L480 AbstractCegarLoop]: Abstraction has 1082 states and 1427 transitions. [2018-11-18 12:43:05,836 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-18 12:43:05,836 INFO L276 IsEmpty]: Start isEmpty. Operand 1082 states and 1427 transitions. [2018-11-18 12:43:05,838 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2018-11-18 12:43:05,838 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:05,839 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:05,839 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:05,839 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:05,839 INFO L82 PathProgramCache]: Analyzing trace with hash 1816467322, now seen corresponding path program 2 times [2018-11-18 12:43:05,840 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:05,840 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:05,863 INFO L101 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2018-11-18 12:43:08,584 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2018-11-18 12:43:08,584 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 12:43:08,753 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:08,796 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 7 proven. 3 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:43:08,796 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-18 12:43:09,027 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 7 proven. 3 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:43:09,034 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:43:09,034 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7] total 11 [2018-11-18 12:43:09,034 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-11-18 12:43:09,034 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-11-18 12:43:09,034 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2018-11-18 12:43:09,034 INFO L87 Difference]: Start difference. First operand 1082 states and 1427 transitions. Second operand 11 states. [2018-11-18 12:43:09,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:09,488 INFO L93 Difference]: Finished difference Result 2202 states and 2931 transitions. [2018-11-18 12:43:09,490 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-18 12:43:09,490 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 158 [2018-11-18 12:43:09,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:09,494 INFO L225 Difference]: With dead ends: 2202 [2018-11-18 12:43:09,494 INFO L226 Difference]: Without dead ends: 1142 [2018-11-18 12:43:09,497 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 318 GetRequests, 306 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=132, Unknown=0, NotChecked=0, Total=182 [2018-11-18 12:43:09,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1142 states. [2018-11-18 12:43:09,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1142 to 1086. [2018-11-18 12:43:09,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1086 states. [2018-11-18 12:43:09,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1086 states to 1086 states and 1435 transitions. [2018-11-18 12:43:09,534 INFO L78 Accepts]: Start accepts. Automaton has 1086 states and 1435 transitions. Word has length 158 [2018-11-18 12:43:09,535 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:09,535 INFO L480 AbstractCegarLoop]: Abstraction has 1086 states and 1435 transitions. [2018-11-18 12:43:09,535 INFO L481 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-11-18 12:43:09,535 INFO L276 IsEmpty]: Start isEmpty. Operand 1086 states and 1435 transitions. [2018-11-18 12:43:09,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2018-11-18 12:43:09,539 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:09,539 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:09,539 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:09,539 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:09,540 INFO L82 PathProgramCache]: Analyzing trace with hash -216476189, now seen corresponding path program 1 times [2018-11-18 12:43:09,540 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:09,541 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:09,565 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:43:09,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:43:09,760 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:09,785 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-18 12:43:09,785 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-18 12:43:09,787 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:43:09,788 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 12:43:09,788 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-18 12:43:09,788 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 12:43:09,788 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:43:09,788 INFO L87 Difference]: Start difference. First operand 1086 states and 1435 transitions. Second operand 3 states. [2018-11-18 12:43:09,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:09,807 INFO L93 Difference]: Finished difference Result 1639 states and 2181 transitions. [2018-11-18 12:43:09,808 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 12:43:09,808 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 151 [2018-11-18 12:43:09,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:09,811 INFO L225 Difference]: With dead ends: 1639 [2018-11-18 12:43:09,812 INFO L226 Difference]: Without dead ends: 1094 [2018-11-18 12:43:09,813 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 149 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 12:43:09,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1094 states. [2018-11-18 12:43:09,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1094 to 1094. [2018-11-18 12:43:09,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1094 states. [2018-11-18 12:43:09,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1094 states to 1094 states and 1443 transitions. [2018-11-18 12:43:09,833 INFO L78 Accepts]: Start accepts. Automaton has 1094 states and 1443 transitions. Word has length 151 [2018-11-18 12:43:09,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:09,834 INFO L480 AbstractCegarLoop]: Abstraction has 1094 states and 1443 transitions. [2018-11-18 12:43:09,834 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-18 12:43:09,834 INFO L276 IsEmpty]: Start isEmpty. Operand 1094 states and 1443 transitions. [2018-11-18 12:43:09,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 160 [2018-11-18 12:43:09,836 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:09,836 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:09,836 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:09,836 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:09,837 INFO L82 PathProgramCache]: Analyzing trace with hash -546648674, now seen corresponding path program 3 times [2018-11-18 12:43:09,838 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:09,838 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:09,862 INFO L101 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2018-11-18 12:43:13,418 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2018-11-18 12:43:13,418 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 12:43:13,668 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:13,800 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 15 [2018-11-18 12:43:13,809 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2018-11-18 12:43:13,810 INFO L267 ElimStorePlain]: Start of recursive call 3: 1 dim-0 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-18 12:43:13,821 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-18 12:43:13,847 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: 1 dim-0 vars, and 1 xjuncts. [2018-11-18 12:43:13,847 INFO L202 ElimStorePlain]: Needed 3 recursive calls to eliminate 1 variables, input treesize:27, output treesize:23 [2018-11-18 12:43:14,155 WARN L180 SmtUtils]: Spent 141.00 ms on a formula simplification that was a NOOP. DAG size: 37 [2018-11-18 12:43:14,274 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 51 treesize of output 47 [2018-11-18 12:43:14,280 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 47 treesize of output 21 [2018-11-18 12:43:14,280 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2018-11-18 12:43:14,286 INFO L267 ElimStorePlain]: Start of recursive call 2: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 12:43:14,316 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 38 treesize of output 34 [2018-11-18 12:43:14,322 INFO L477 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 8 [2018-11-18 12:43:14,322 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2018-11-18 12:43:14,325 INFO L267 ElimStorePlain]: Start of recursive call 4: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2018-11-18 12:43:14,334 INFO L267 ElimStorePlain]: Start of recursive call 1: 1 dim-0 vars, 2 dim-2 vars, End of recursive call: and 1 xjuncts. [2018-11-18 12:43:14,334 INFO L202 ElimStorePlain]: Needed 5 recursive calls to eliminate 3 variables, input treesize:73, output treesize:15 [2018-11-18 12:43:14,409 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2018-11-18 12:43:14,409 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-18 12:43:14,414 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:43:14,414 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2018-11-18 12:43:14,414 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-11-18 12:43:14,415 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-11-18 12:43:14,415 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=30, Invalid=102, Unknown=0, NotChecked=0, Total=132 [2018-11-18 12:43:14,415 INFO L87 Difference]: Start difference. First operand 1094 states and 1443 transitions. Second operand 12 states. [2018-11-18 12:43:29,110 WARN L180 SmtUtils]: Spent 353.00 ms on a formula simplification. DAG size of input: 48 DAG size of output: 48 [2018-11-18 12:43:39,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:39,630 INFO L93 Difference]: Finished difference Result 2246 states and 2970 transitions. [2018-11-18 12:43:39,631 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-18 12:43:39,632 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 159 [2018-11-18 12:43:39,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:39,635 INFO L225 Difference]: With dead ends: 2246 [2018-11-18 12:43:39,635 INFO L226 Difference]: Without dead ends: 1683 [2018-11-18 12:43:39,636 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=71, Invalid=271, Unknown=0, NotChecked=0, Total=342 [2018-11-18 12:43:39,637 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1683 states. [2018-11-18 12:43:39,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1683 to 1654. [2018-11-18 12:43:39,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1654 states. [2018-11-18 12:43:39,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1654 states to 1654 states and 2191 transitions. [2018-11-18 12:43:39,670 INFO L78 Accepts]: Start accepts. Automaton has 1654 states and 2191 transitions. Word has length 159 [2018-11-18 12:43:39,670 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:39,670 INFO L480 AbstractCegarLoop]: Abstraction has 1654 states and 2191 transitions. [2018-11-18 12:43:39,670 INFO L481 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-11-18 12:43:39,670 INFO L276 IsEmpty]: Start isEmpty. Operand 1654 states and 2191 transitions. [2018-11-18 12:43:39,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 160 [2018-11-18 12:43:39,673 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:39,673 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:39,673 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:39,673 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:39,673 INFO L82 PathProgramCache]: Analyzing trace with hash -1604486752, now seen corresponding path program 1 times [2018-11-18 12:43:39,674 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:39,674 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 13 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:39,698 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:43:40,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:43:40,224 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:40,262 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:43:40,262 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-18 12:43:40,499 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:43:40,502 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:43:40,502 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 13 [2018-11-18 12:43:40,503 INFO L459 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-11-18 12:43:40,503 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-11-18 12:43:40,503 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=118, Unknown=0, NotChecked=0, Total=156 [2018-11-18 12:43:40,503 INFO L87 Difference]: Start difference. First operand 1654 states and 2191 transitions. Second operand 13 states. [2018-11-18 12:43:41,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:41,243 INFO L93 Difference]: Finished difference Result 3388 states and 4528 transitions. [2018-11-18 12:43:41,244 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-11-18 12:43:41,244 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 159 [2018-11-18 12:43:41,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:41,250 INFO L225 Difference]: With dead ends: 3388 [2018-11-18 12:43:41,250 INFO L226 Difference]: Without dead ends: 1756 [2018-11-18 12:43:41,254 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 321 GetRequests, 306 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=70, Invalid=202, Unknown=0, NotChecked=0, Total=272 [2018-11-18 12:43:41,255 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1756 states. [2018-11-18 12:43:41,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1756 to 1660. [2018-11-18 12:43:41,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1660 states. [2018-11-18 12:43:41,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1660 states to 1660 states and 2203 transitions. [2018-11-18 12:43:41,312 INFO L78 Accepts]: Start accepts. Automaton has 1660 states and 2203 transitions. Word has length 159 [2018-11-18 12:43:41,313 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:41,313 INFO L480 AbstractCegarLoop]: Abstraction has 1660 states and 2203 transitions. [2018-11-18 12:43:41,313 INFO L481 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-11-18 12:43:41,313 INFO L276 IsEmpty]: Start isEmpty. Operand 1660 states and 2203 transitions. [2018-11-18 12:43:41,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 161 [2018-11-18 12:43:41,317 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:41,318 INFO L375 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:41,318 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:41,318 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:41,318 INFO L82 PathProgramCache]: Analyzing trace with hash 777957432, now seen corresponding path program 2 times [2018-11-18 12:43:41,319 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:41,319 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 14 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:41,342 INFO L101 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2018-11-18 12:43:44,105 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2018-11-18 12:43:44,105 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 12:43:44,289 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:44,326 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 7 proven. 10 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:43:44,326 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-18 12:43:44,585 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 7 proven. 10 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:43:44,590 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:43:44,590 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 15 [2018-11-18 12:43:44,591 INFO L459 AbstractCegarLoop]: Interpolant automaton has 15 states [2018-11-18 12:43:44,591 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-11-18 12:43:44,591 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=162, Unknown=0, NotChecked=0, Total=210 [2018-11-18 12:43:44,591 INFO L87 Difference]: Start difference. First operand 1660 states and 2203 transitions. Second operand 15 states. [2018-11-18 12:43:45,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:45,490 INFO L93 Difference]: Finished difference Result 3412 states and 4570 transitions. [2018-11-18 12:43:45,491 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-11-18 12:43:45,491 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 160 [2018-11-18 12:43:45,491 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:45,497 INFO L225 Difference]: With dead ends: 3412 [2018-11-18 12:43:45,497 INFO L226 Difference]: Without dead ends: 1774 [2018-11-18 12:43:45,500 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 324 GetRequests, 306 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=93, Invalid=287, Unknown=0, NotChecked=0, Total=380 [2018-11-18 12:43:45,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1774 states. [2018-11-18 12:43:45,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1774 to 1666. [2018-11-18 12:43:45,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1666 states. [2018-11-18 12:43:45,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1666 states to 1666 states and 2215 transitions. [2018-11-18 12:43:45,559 INFO L78 Accepts]: Start accepts. Automaton has 1666 states and 2215 transitions. Word has length 160 [2018-11-18 12:43:45,559 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:45,559 INFO L480 AbstractCegarLoop]: Abstraction has 1666 states and 2215 transitions. [2018-11-18 12:43:45,559 INFO L481 AbstractCegarLoop]: Interpolant automaton has 15 states. [2018-11-18 12:43:45,560 INFO L276 IsEmpty]: Start isEmpty. Operand 1666 states and 2215 transitions. [2018-11-18 12:43:45,564 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 154 [2018-11-18 12:43:45,564 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:45,564 INFO L375 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:45,565 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:45,565 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:45,565 INFO L82 PathProgramCache]: Analyzing trace with hash -1109542972, now seen corresponding path program 1 times [2018-11-18 12:43:45,565 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:45,566 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 15 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:45,589 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 12:43:45,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 12:43:46,066 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:43:46,128 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2018-11-18 12:43:46,128 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-18 12:43:46,131 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 12:43:46,131 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-18 12:43:46,132 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-18 12:43:46,132 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-18 12:43:46,132 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2018-11-18 12:43:46,132 INFO L87 Difference]: Start difference. First operand 1666 states and 2215 transitions. Second operand 6 states. [2018-11-18 12:43:52,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:43:52,885 INFO L93 Difference]: Finished difference Result 3793 states and 5113 transitions. [2018-11-18 12:43:52,886 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-11-18 12:43:52,886 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 153 [2018-11-18 12:43:52,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:43:52,893 INFO L225 Difference]: With dead ends: 3793 [2018-11-18 12:43:52,893 INFO L226 Difference]: Without dead ends: 2149 [2018-11-18 12:43:52,896 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 158 GetRequests, 150 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2018-11-18 12:43:52,898 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2149 states. [2018-11-18 12:43:52,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2149 to 2068. [2018-11-18 12:43:52,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2068 states. [2018-11-18 12:43:52,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2068 states to 2068 states and 2746 transitions. [2018-11-18 12:43:52,977 INFO L78 Accepts]: Start accepts. Automaton has 2068 states and 2746 transitions. Word has length 153 [2018-11-18 12:43:52,978 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:43:52,978 INFO L480 AbstractCegarLoop]: Abstraction has 2068 states and 2746 transitions. [2018-11-18 12:43:52,978 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-18 12:43:52,978 INFO L276 IsEmpty]: Start isEmpty. Operand 2068 states and 2746 transitions. [2018-11-18 12:43:52,982 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2018-11-18 12:43:52,982 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:43:52,982 INFO L375 BasicCegarLoop]: trace histogram [5, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:43:52,983 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:43:52,983 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:43:52,983 INFO L82 PathProgramCache]: Analyzing trace with hash 1619283104, now seen corresponding path program 3 times [2018-11-18 12:43:52,983 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:43:52,983 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 16 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:43:53,009 INFO L101 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2018-11-18 12:46:12,162 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2018-11-18 12:46:12,162 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2018-11-18 12:46:12,367 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 12:46:12,413 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 7 proven. 15 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:46:12,413 INFO L316 TraceCheckSpWp]: Computing backward predicates... [2018-11-18 12:46:12,751 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 7 proven. 15 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2018-11-18 12:46:12,763 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-18 12:46:12,763 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10] total 17 [2018-11-18 12:46:12,763 INFO L459 AbstractCegarLoop]: Interpolant automaton has 17 states [2018-11-18 12:46:12,764 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2018-11-18 12:46:12,764 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=59, Invalid=213, Unknown=0, NotChecked=0, Total=272 [2018-11-18 12:46:12,764 INFO L87 Difference]: Start difference. First operand 2068 states and 2746 transitions. Second operand 17 states. [2018-11-18 12:46:14,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 12:46:14,044 INFO L93 Difference]: Finished difference Result 4279 states and 5770 transitions. [2018-11-18 12:46:14,045 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2018-11-18 12:46:14,045 INFO L78 Accepts]: Start accepts. Automaton has 17 states. Word has length 161 [2018-11-18 12:46:14,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-18 12:46:14,050 INFO L225 Difference]: With dead ends: 4279 [2018-11-18 12:46:14,050 INFO L226 Difference]: Without dead ends: 2233 [2018-11-18 12:46:14,053 INFO L604 BasicCegarLoop]: 0 DeclaredPredicates, 327 GetRequests, 306 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 36 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=119, Invalid=387, Unknown=0, NotChecked=0, Total=506 [2018-11-18 12:46:14,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2233 states. [2018-11-18 12:46:14,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2233 to 2077. [2018-11-18 12:46:14,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2077 states. [2018-11-18 12:46:14,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2077 states to 2077 states and 2764 transitions. [2018-11-18 12:46:14,102 INFO L78 Accepts]: Start accepts. Automaton has 2077 states and 2764 transitions. Word has length 161 [2018-11-18 12:46:14,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-18 12:46:14,103 INFO L480 AbstractCegarLoop]: Abstraction has 2077 states and 2764 transitions. [2018-11-18 12:46:14,103 INFO L481 AbstractCegarLoop]: Interpolant automaton has 17 states. [2018-11-18 12:46:14,103 INFO L276 IsEmpty]: Start isEmpty. Operand 2077 states and 2764 transitions. [2018-11-18 12:46:14,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 163 [2018-11-18 12:46:14,105 INFO L367 BasicCegarLoop]: Found error trace [2018-11-18 12:46:14,106 INFO L375 BasicCegarLoop]: trace histogram [6, 4, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 12:46:14,106 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-18 12:46:14,106 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 12:46:14,106 INFO L82 PathProgramCache]: Analyzing trace with hash 1930575160, now seen corresponding path program 4 times [2018-11-18 12:46:14,107 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-18 12:46:14,107 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_4e3bcd4a-7dc1-4aa4-8c1b-412e2f78492e/bin-2019/uautomizer/cvc4nyu Starting monitored process 17 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:46:14,122 INFO L101 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2018-11-18 12:46:14,374 WARN L521 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-18 12:46:14,375 FATAL L292 ToolchainWalker]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.UnsupportedOperationException: ConstantTerm is neither BigInter nor BigDecimal, therefore comparison is not possible! at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.AnnotateAndAsserterWithStmtOrderPrioritization.termHasConstantGreaterThan(AnnotateAndAsserterWithStmtOrderPrioritization.java:358) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.AnnotateAndAsserterWithStmtOrderPrioritization.termHasConstantGreaterThan(AnnotateAndAsserterWithStmtOrderPrioritization.java:345) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.AnnotateAndAsserterWithStmtOrderPrioritization.termHasConstantGreaterThan(AnnotateAndAsserterWithStmtOrderPrioritization.java:345) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.AnnotateAndAsserterWithStmtOrderPrioritization.termHasConstantGreaterThan(AnnotateAndAsserterWithStmtOrderPrioritization.java:345) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.AnnotateAndAsserterWithStmtOrderPrioritization.termHasConstantGreaterThan(AnnotateAndAsserterWithStmtOrderPrioritization.java:345) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.AnnotateAndAsserterWithStmtOrderPrioritization.partitionStmtsAccordingToConstantSize(AnnotateAndAsserterWithStmtOrderPrioritization.java:377) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.AnnotateAndAsserterWithStmtOrderPrioritization.annotateAndAssertStmtsAccording5Heuristic(AnnotateAndAsserterWithStmtOrderPrioritization.java:391) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.AnnotateAndAsserterWithStmtOrderPrioritization.buildAnnotatedSsaAndAssertTerms(AnnotateAndAsserterWithStmtOrderPrioritization.java:245) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.TraceCheck.checkTrace(TraceCheck.java:293) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.TraceCheck.(TraceCheck.java:214) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.InterpolatingTraceCheck.(InterpolatingTraceCheck.java:97) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.TraceCheckSpWp.(TraceCheckSpWp.java:134) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceCheckConstructor.constructForwardBackward(TraceCheckConstructor.java:224) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceCheckConstructor.constructTraceCheck(TraceCheckConstructor.java:188) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceCheckConstructor.get(TraceCheckConstructor.java:165) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.MultiTrackRefinementStrategy.getTraceCheck(MultiTrackRefinementStrategy.java:232) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseRefinementStrategy.checkFeasibility(BaseRefinementStrategy.java:223) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseRefinementStrategy.executeStrategy(BaseRefinementStrategy.java:197) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceAbstractionRefinementEngine.(TraceAbstractionRefinementEngine.java:70) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.BasicCegarLoop.isCounterexampleFeasible(BasicCegarLoop.java:429) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterateInternal(AbstractCegarLoop.java:434) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterate(AbstractCegarLoop.java:376) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.iterate(TraceAbstractionStarter.java:312) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:154) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:123) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:123) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:316) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2018-11-18 12:46:14,378 INFO L168 Benchmark]: Toolchain (without parser) took 208776.44 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 540.0 MB). Free memory was 941.2 MB in the beginning and 871.8 MB in the end (delta: 69.3 MB). Peak memory consumption was 609.4 MB. Max. memory is 11.5 GB. [2018-11-18 12:46:14,378 INFO L168 Benchmark]: CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 12:46:14,379 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1646.57 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 197.1 MB). Free memory was 941.2 MB in the beginning and 845.1 MB in the end (delta: 96.1 MB). Peak memory consumption was 317.1 MB. Max. memory is 11.5 GB. [2018-11-18 12:46:14,379 INFO L168 Benchmark]: Boogie Preprocessor took 103.20 ms. Allocated memory is still 1.2 GB. Free memory was 845.1 MB in the beginning and 836.2 MB in the end (delta: 8.9 MB). Peak memory consumption was 8.9 MB. Max. memory is 11.5 GB. [2018-11-18 12:46:14,379 INFO L168 Benchmark]: RCFGBuilder took 7077.07 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 38.8 MB). Free memory was 836.2 MB in the beginning and 1.1 GB in the end (delta: -275.5 MB). Peak memory consumption was 136.8 MB. Max. memory is 11.5 GB. [2018-11-18 12:46:14,380 INFO L168 Benchmark]: TraceAbstraction took 199946.93 ms. Allocated memory was 1.3 GB in the beginning and 1.6 GB in the end (delta: 304.1 MB). Free memory was 1.1 GB in the beginning and 871.8 MB in the end (delta: 239.9 MB). Peak memory consumption was 543.9 MB. Max. memory is 11.5 GB. [2018-11-18 12:46:14,385 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1646.57 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 197.1 MB). Free memory was 941.2 MB in the beginning and 845.1 MB in the end (delta: 96.1 MB). Peak memory consumption was 317.1 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 103.20 ms. Allocated memory is still 1.2 GB. Free memory was 845.1 MB in the beginning and 836.2 MB in the end (delta: 8.9 MB). Peak memory consumption was 8.9 MB. Max. memory is 11.5 GB. * RCFGBuilder took 7077.07 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 38.8 MB). Free memory was 836.2 MB in the beginning and 1.1 GB in the end (delta: -275.5 MB). Peak memory consumption was 136.8 MB. Max. memory is 11.5 GB. * TraceAbstraction took 199946.93 ms. Allocated memory was 1.3 GB in the beginning and 1.6 GB in the end (delta: 304.1 MB). Free memory was 1.1 GB in the beginning and 871.8 MB in the end (delta: 239.9 MB). Peak memory consumption was 543.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - ExceptionOrErrorResult: UnsupportedOperationException: ConstantTerm is neither BigInter nor BigDecimal, therefore comparison is not possible! de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: UnsupportedOperationException: ConstantTerm is neither BigInter nor BigDecimal, therefore comparison is not possible!: de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.AnnotateAndAsserterWithStmtOrderPrioritization.termHasConstantGreaterThan(AnnotateAndAsserterWithStmtOrderPrioritization.java:358) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...